Published: 22/02/2017 Updated: 17/01/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel prior to 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Debian Bug report logs - #852556 linux-image-490-1-amd64: [Regression] Trendnet's TU-ET100C Pegasus II based LAN to USB adapter stopped to work Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Lisandro Damián Nicanor Pérez Meyer <lisandro@debianorg> ...

Several security issues were fixed in the Linux kernel ...

Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mrc in the Linux kernel before 4910 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infinib ...

CWE-190 https://github.com/torvalds/linux/commit/647bf3d8a8e5777319da92af672289b2a6c4dc66 https://eyalitkin.wordpress.com/2017/02/11/cve-publication-cve-2016-8636/https://bugzilla.redhat.com/show_bug.cgi?id=1421981 http://www.openwall.com/lists/oss-security/2017/02/11/9 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.10 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=647bf3d8a8e5777319da92af672289b2a6c4dc66 http://www.securityfocus.com/bid/96189 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852556 https://usn.ubuntu.com/3361-1/

CVE-2016-8636

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect