CVE

Id
96464  
CVE No.
CVE-2016-9644  
Status
Candidate  
Description
The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows local users to obtain root access on non-SMEP platforms via a crafted application. NOTE: this vulnerability exists because of incorrect backporting of the CVE-2016-9178 patch to older kernels.  
Phase
Assigned (20161127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
800995 96464 CVE-2016-9644 MLIST:[oss-security] 20161107 Re: Re: kernel: fix minor infoleak in get_user_ex()  View
800996 96464 CVE-2016-9644 URL:http://www.openwall.com/lists/oss-security/2016/11/07/4  View
800997 96464 CVE-2016-9644 CONFIRM:https://lwn.net/Articles/705220/  View
800998 96464 CVE-2016-9644 UBUNTU:USN-3146-1  View
800999 96464 CVE-2016-9644 URL:http://www.ubuntu.com/usn/USN-3146-1  View
801000 96464 CVE-2016-9644 UBUNTU:USN-3146-2  View
801001 96464 CVE-2016-9644 URL:http://www.ubuntu.com/usn/USN-3146-2  View
801002 96464 CVE-2016-9644 BID:94545  View

Related JVN