ISOMAN

CVE

CVE-2016-4470

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

Severity
MEDIUM
CVSS
5.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Oracle Linux7.9 x86_64 server dvdunknownsource
Oracle Linux7.9 x86_64 server bootunknownsource
Oracle Linux7.9 x86_64 server uek-bootunknownsource
Oracle Linux7.9 source source-dvd1unknownsource
Oracle Linux7.9 source source-dvd2unknownsource
Oracle Linux7.8 x86_64 server dvdunknownsource
Oracle Linux7.8 x86_64 server bootunknownsource
Oracle Linux7.8 x86_64 server uek-bootunknownsource
Oracle Linux7.8 source source-dvd1unknownsource
Oracle Linux7.8 source source-dvd2unknownsource
Oracle Linux7.7 x86_64 server dvdunknownsource
Oracle Linux7.7 x86_64 server bootunknownsource
Oracle Linux7.7 x86_64 server uek-bootunknownsource
Oracle Linux7.7 source source-dvd1unknownsource
Oracle Linux7.7 source source-dvd2unknownsource
Oracle Linux6.10 x86_64 server dvdunknownsource
Oracle Linux6.10 x86_64 server bootunknownsource
Oracle Linux6.10 x86_64 server uek-bootunknownsource
Oracle Linux6.10 source source-dvd1unknownsource
Oracle Linux6.10 source source-dvd2unknownsource
Oracle Linux6.9 x86_64 server dvdunknownsource
Oracle Linux6.9 x86_64 server bootunknownsource
Oracle Linux6.9 x86_64 server uek-bootunknownsource
Oracle Linux6.9 source source-dvd1unknownsource
Oracle Linux6.9 source source-dvd2unknownsource
Oracle Linux6.8 x86_64 server dvdunknownsource
Oracle Linux6.8 x86_64 server bootunknownsource
Oracle Linux6.8 x86_64 server uek-bootunknownsource
Oracle Linux6.8 source source-dvd1unknownsource
Oracle Linux6.8 source source-dvd2unknownsource
Oracle Linux7.9 aarch64 server dvdunknownsource
Oracle Linux7.9 aarch64 server uek-bootunknownsource
Oracle Linux7.8 aarch64 server dvdunknownsource
Oracle Linux7.8 aarch64 server uek-bootunknownsource
Oracle Linux7.7 aarch64 server dvdunknownsource
Oracle Linux7.7 aarch64 server uek-bootunknownsource

References

  1. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38327424b40bcebe2de92d07312c89360ac9229a
  2. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
  3. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html
  4. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
  5. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html
  6. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html
  7. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00012.html
  8. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00013.html
  9. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html
  10. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html
  11. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html
  12. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html
  13. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html
  14. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html
  15. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html
  16. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html
  17. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html
  18. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html
  19. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html
  20. http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html