NVD

Id
21029  
Name
CVE-2016-6130  
Description
Race condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux kernel before 4.6 allows local users to obtain sensitive information from kernel memory by changing a certain length value, aka a "double fetch" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-07-03  
Modified Date
2016-11-28  
Seq
2016-6130  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114455 21029 CVE-2016-6130 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=532c34b5fbf1687df63b3fcd5b2846312ac943c6  View
114456 21029 CVE-2016-6130 DSA-3616  View
114457 21029 CVE-2016-6130 20160630 [CVE-2016-6130] Double-Fetch Vulnerability in Linux-4.5/drivers/s390/char/sclp_ctl.c  View
114458 21029 CVE-2016-6130 91540  View
114459 21029 CVE-2016-6130 https://bugzilla.kernel.org/show_bug.cgi?id=116741  View
114460 21029 CVE-2016-6130 https://github.com/torvalds/linux/commit/532c34b5fbf1687df63b3fcd5b2846312ac943c6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2679 JVNDB-2016-003452 Linux Kernel の drivers/s390/char/sclp_ctl.c の sclp_ctl_ioctl_sccb 関数におけるカーネルメモリから重要な情報を取得される脆弱性 Linux Kernel の drivers/s390/char/sclp_ctl.c の sclp_ctl_ioctl_sccb 関数には、競合状態により、カーネルメモリから重要な情報を取得される脆弱性が存在します。 CVE-2016-6130 92637 CVE-2016-6130 21029 1.9 4.7 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003452.html 2016-04-26 2016-07-08 View