CVE-2016-4794

HIGH7.8

Use-after-free vulnerability in mm/percpu

Published May 23, 2016

Modified 1 years ago

Details

Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.

References

ADVISORYhttp://rhn.redhat.com/errata/RHSA-2016-2574.html ADVISORYhttp://rhn.redhat.com/errata/RHSA-2016-2584.html WEBhttp://www.openwall.com/lists/oss-security/2016/05/12/6 WEBhttp://www.securityfocus.com/bid/90625 ADVISORYhttp://www.ubuntu.com/usn/USN-3053-1 ADVISORYhttp://www.ubuntu.com/usn/USN-3054-1 ADVISORYhttp://www.ubuntu.com/usn/USN-3055-1 ADVISORYhttp://www.ubuntu.com/usn/USN-3056-1 ADVISORYhttp://www.ubuntu.com/usn/USN-3057-1 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1335889 WEBhttps://lkml.org/lkml/2016/4/17/125 WEBhttps://source.android.com/security/bulletin/2016-12-01.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2016-4794

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedMay 23, 2016

ModifiedAug 6, 2024

CVE-2016-4794 | Mondoo Vulnerability Intelligence