CVE

Id
89367  
CVE No.
CVE-2016-2548  
Status
Candidate  
Description
sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl call, related to the (1) snd_timer_close and (2) _snd_timer_stop functions.  
Phase
Assigned (20160223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
775399 89367 CVE-2016-2548 MLIST:[oss-security] 20160119 Security bugs in Linux kernel sound subsystem  View
775400 89367 CVE-2016-2548 URL:http://www.openwall.com/lists/oss-security/2016/01/19/1  View
775401 89367 CVE-2016-2548 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d  View
775402 89367 CVE-2016-2548 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1  View
775403 89367 CVE-2016-2548 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1311568  View
775404 89367 CVE-2016-2548 CONFIRM:https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d  View
775405 89367 CVE-2016-2548 DEBIAN:DSA-3503  View
775406 89367 CVE-2016-2548 URL:http://www.debian.org/security/2016/dsa-3503  View
775407 89367 CVE-2016-2548 SUSE:SUSE-SU-2016:2074  View
775408 89367 CVE-2016-2548 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html  View
775409 89367 CVE-2016-2548 SUSE:SUSE-SU-2016:0911  View
775410 89367 CVE-2016-2548 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html  View
775411 89367 CVE-2016-2548 SUSE:SUSE-SU-2016:1102  View
775412 89367 CVE-2016-2548 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html  View
775413 89367 CVE-2016-2548 UBUNTU:USN-2967-1  View
775414 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2967-1  View
775415 89367 CVE-2016-2548 UBUNTU:USN-2967-2  View
775416 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2967-2  View
775417 89367 CVE-2016-2548 UBUNTU:USN-2929-1  View
775418 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2929-1  View
775419 89367 CVE-2016-2548 UBUNTU:USN-2929-2  View
775420 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2929-2  View
775421 89367 CVE-2016-2548 UBUNTU:USN-2930-1  View
775422 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2930-1  View
775423 89367 CVE-2016-2548 UBUNTU:USN-2930-2  View
775424 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2930-2  View
775425 89367 CVE-2016-2548 UBUNTU:USN-2930-3  View
775426 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2930-3  View
775427 89367 CVE-2016-2548 UBUNTU:USN-2931-1  View
775428 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2931-1  View
775429 89367 CVE-2016-2548 UBUNTU:USN-2932-1  View
775430 89367 CVE-2016-2548 URL:http://www.ubuntu.com/usn/USN-2932-1  View
775431 89367 CVE-2016-2548 BID:83383  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2689 JVNDB-2016-003462 IBM WebSphere eXtreme Scale における重要な情報を取得される脆弱性 IBM WebSphere eXtreme Scale は、適切にデータを暗号化しないため、重要な情報を取得される脆弱性が存在します。 CVE-2016-2861 89367 4.3 3.7 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003462.html  View