CVE

Id
91376  
CVE No.
CVE-2016-4557  
Status
Candidate  
Description
The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.  
Phase
Assigned (20160506)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
784925 91376 CVE-2016-4557 MLIST:[oss-security] 20160506 CVE Requests: Linux: BPF flaws (one use-after-free / local root privilege escalation)  View
784926 91376 CVE-2016-4557 URL:http://www.openwall.com/lists/oss-security/2016/05/06/4  View
784927 91376 CVE-2016-4557 MISC:https://bugs.chromium.org/p/project-zero/issues/detail?id=808  View
784928 91376 CVE-2016-4557 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8358b02bf67d3a5d8a825070e1aa73f25fb2e4c7  View
784929 91376 CVE-2016-4557 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5  View
784930 91376 CVE-2016-4557 CONFIRM:https://bugs.debian.org/823603  View
784931 91376 CVE-2016-4557 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1334307  View
784932 91376 CVE-2016-4557 CONFIRM:https://github.com/torvalds/linux/commit/8358b02bf67d3a5d8a825070e1aa73f25fb2e4c7  View
784933 91376 CVE-2016-4557 SUSE:openSUSE-SU-2016:1641  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
179 JVNDB-2016-000186 サイボウズ Office のスケジュール機能に関するクロスサイトスクリプティングの脆弱性 サイボウズ株式会社が提供するサイボウズ Office には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-4870 91376 4 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000186.html  View