CVE

Id
87539  
CVE No.
CVE-2016-10044  
Status
Candidate  
Description
The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.  
Phase
Assigned (20161226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
763966 87539 CVE-2016-10044 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=22f6b4d34fcf039c63a94e7670e0da24f8575a5a  View
763967 87539 CVE-2016-10044 CONFIRM:http://source.android.com/security/bulletin/2017-02-01.html  View
763968 87539 CVE-2016-10044 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.7  View
763969 87539 CVE-2016-10044 CONFIRM:https://github.com/torvalds/linux/commit/22f6b4d34fcf039c63a94e7670e0da24f8575a5a  View
763970 87539 CVE-2016-10044 BID:96122  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1202 JVNDB-2016-001975 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-1033 87539 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001975.html  View