CVE

Id
91377  
CVE No.
CVE-2016-4558  
Status
Candidate  
Description
The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted application on (1) a system with more than 32 Gb of memory, related to the program reference count or (2) a 1 Tb system, related to the map reference count.  
Phase
Assigned (20160506)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
784934 91377 CVE-2016-4558 MLIST:[oss-security] 20160506 CVE Requests: Linux: BPF flaws (one use-after-free / local root privilege escalation)  View
784935 91377 CVE-2016-4558 URL:http://www.openwall.com/lists/oss-security/2016/05/06/4  View
784936 91377 CVE-2016-4558 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=92117d8443bc5afacc8d5ba82e541946310f106e  View
784937 91377 CVE-2016-4558 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5  View
784938 91377 CVE-2016-4558 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1334303  View
784939 91377 CVE-2016-4558 CONFIRM:https://github.com/torvalds/linux/commit/92117d8443bc5afacc8d5ba82e541946310f106e  View
784940 91377 CVE-2016-4558 UBUNTU:USN-3005-1  View
784941 91377 CVE-2016-4558 URL:http://www.ubuntu.com/usn/USN-3005-1  View
784942 91377 CVE-2016-4558 UBUNTU:USN-3006-1  View
784943 91377 CVE-2016-4558 URL:http://www.ubuntu.com/usn/USN-3006-1  View
784944 91377 CVE-2016-4558 UBUNTU:USN-3007-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
185 JVNDB-2016-000192 サイボウズ Office におけるサービス運用妨害 (DoS) の脆弱性 サイボウズ株式会社が提供する サイボウズ Office のスケジュール機能には、不適切な入力確認に起因するサービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2016-4871 91377 6.8 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000192.html  View