CVE

Id
95456  
CVE No.
CVE-2016-8636  
Status
Candidate  
Description
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.  
Phase
Assigned (20161012)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
798476 95456 CVE-2016-8636 MLIST:[oss-security] 20170211 CVE publication request - CVE 2016-8636  View
798477 95456 CVE-2016-8636 URL:http://www.openwall.com/lists/oss-security/2017/02/11/9  View
798478 95456 CVE-2016-8636 MISC:https://eyalitkin.wordpress.com/2017/02/11/cve-publication-cve-2016-8636/  View
798479 95456 CVE-2016-8636 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=647bf3d8a8e5777319da92af672289b2a6c4dc66  View
798480 95456 CVE-2016-8636 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.10  View
798481 95456 CVE-2016-8636 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1421981  View
798482 95456 CVE-2016-8636 CONFIRM:https://github.com/torvalds/linux/commit/647bf3d8a8e5777319da92af672289b2a6c4dc66  View
798483 95456 CVE-2016-8636 BID:96189  View

Related JVN