CVE

Id
87840  
CVE No.
CVE-2016-10318  
Status
Candidate  
Description
A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel before 4.7.4 allows a user to assign an encryption policy to a directory owned by a different user, potentially creating a denial of service.  
Phase
Assigned (20170404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
765154 87840 CVE-2016-10318 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=163ae1c6ad6299b19e22b4a35d5ab24a89791a98  View
765155 87840 CVE-2016-10318 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.4  View
765156 87840 CVE-2016-10318 CONFIRM:https://github.com/torvalds/linux/commit/163ae1c6ad6299b19e22b4a35d5ab24a89791a98  View
765157 87840 CVE-2016-10318 BID:97404  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
938 JVNDB-2016-001711 Cisco Small Business 500 Wireless Access Point デバイスのファームウェアにおけるシステム時刻を設定される脆弱性 Cisco Small Business 500 Wireless Access Point デバイスのファームウェアには、システム時刻を設定される脆弱性が存在します。 CVE-2016-1334 87840 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001711.html  View