CVE

Id
94734  
CVE No.
CVE-2016-7914  
Status
Candidate  
Description
The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.5.3 does not check whether a slot is a leaf, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and out-of-bounds read) via an application that uses associative-array data structures, as demonstrated by the keyutils test suite.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
797278 94734 CVE-2016-7914 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8d4a2ec1e0b41b0cf9a0c5cd4511da7f8e4f3de2  View
797279 94734 CVE-2016-7914 CONFIRM:http://source.android.com/security/bulletin/2016-11-01.html  View
797280 94734 CVE-2016-7914 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3  View
797281 94734 CVE-2016-7914 CONFIRM:https://github.com/torvalds/linux/commit/8d4a2ec1e0b41b0cf9a0c5cd4511da7f8e4f3de2  View
797282 94734 CVE-2016-7914 BID:94138  View

Related JVN