CVE

Id
91613  
CVE No.
CVE-2016-4794  
Status
Candidate  
Description
Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.  
Phase
Assigned (20160512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
786668 91613 CVE-2016-4794 MLIST:[linux-kernel] 20160417 Re: bpf: use-after-free in array_map_alloc  View
786669 91613 CVE-2016-4794 URL:https://lkml.org/lkml/2016/4/17/125  View
786670 91613 CVE-2016-4794 MLIST:[oss-security] 20160512 Linux Kernel bpf related UAF  View
786671 91613 CVE-2016-4794 URL:http://www.openwall.com/lists/oss-security/2016/05/12/6  View
786672 91613 CVE-2016-4794 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1335889  View
786673 91613 CVE-2016-4794 CONFIRM:https://source.android.com/security/bulletin/2016-12-01.html  View
786674 91613 CVE-2016-4794 UBUNTU:USN-3053-1  View
786675 91613 CVE-2016-4794 URL:http://www.ubuntu.com/usn/USN-3053-1  View
786676 91613 CVE-2016-4794 UBUNTU:USN-3054-1  View
786677 91613 CVE-2016-4794 URL:http://www.ubuntu.com/usn/USN-3054-1  View
786678 91613 CVE-2016-4794 UBUNTU:USN-3055-1  View
786679 91613 CVE-2016-4794 URL:http://www.ubuntu.com/usn/USN-3055-1  View
786680 91613 CVE-2016-4794 UBUNTU:USN-3056-1  View
786681 91613 CVE-2016-4794 URL:http://www.ubuntu.com/usn/USN-3056-1  View
786682 91613 CVE-2016-4794 UBUNTU:USN-3057-1  View
786683 91613 CVE-2016-4794 URL:http://www.ubuntu.com/usn/USN-3057-1  View
786684 91613 CVE-2016-4794 BID:90625  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3753 JVNDB-2016-004526 QEMU の megasas_lookup_frame 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の megasas_lookup_frame 関数には、MegaRAID SAS 8708EM2 ホストバスアダプタのエミュレーションサポートを伴いビルドされている場合、サービス運用妨害 (境界外読み取りおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-5107 91613 1.5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004526.html  View