ByteOS Network

CVE Vulnerability Details :

CVE-2016-9576

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-28 Dec, 2016 | 07:42

Updated At-06 Aug, 2024 | 02:59

▼CVE Numbering Authority (CNA)

The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html	vendor-advisory x_refsource_SUSE
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html	vendor-advisory x_refsource_SUSE
https://github.com/torvalds/linux/commit/a0ac402cfcdc904f9772e1762b3fda112dcc56a0	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:2669	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html	vendor-advisory x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2017-0817.html	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html	vendor-advisory x_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1403145	x_refsource_CONFIRM
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/12/08/19	mailing-list x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2017:2077	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:1842	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/94821	vdb-entry x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html	vendor-advisory x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://github.com/torvalds/linux/commit/a0ac402cfcdc904f9772e1762b3fda112dcc56a0

Resource:

x_refsource_CONFIRM

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2669

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://rhn.redhat.com/errata/RHSA-2017-0817.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1403145

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2016/12/08/19

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2077

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2017:1842

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/94821

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html	vendor-advisory x_refsource_SUSE x_transferred
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html	vendor-advisory x_refsource_SUSE x_transferred
https://github.com/torvalds/linux/commit/a0ac402cfcdc904f9772e1762b3fda112dcc56a0	x_refsource_CONFIRM x_transferred
https://access.redhat.com/errata/RHSA-2017:2669	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html	vendor-advisory x_refsource_SUSE x_transferred
http://rhn.redhat.com/errata/RHSA-2017-0817.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html	vendor-advisory x_refsource_SUSE x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1403145	x_refsource_CONFIRM x_transferred
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2016/12/08/19	mailing-list x_refsource_MLIST x_transferred
https://access.redhat.com/errata/RHSA-2017:2077	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2017:1842	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/94821	vdb-entry x_refsource_BID x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html	vendor-advisory x_refsource_SUSE x_transferred