NVD

Id
21955  
Name
CVE-2016-7911  
Description
Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted ioprio_get system call.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-11-16  
Modified Date
2016-11-28  
Seq
2016-7911  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117632 21955 CVE-2016-7911 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8ba8682107ee2ca3347354e018865d8e1967c5f4  View
117633 21955 CVE-2016-7911 http://source.android.com/security/bulletin/2016-11-01.html  View
117634 21955 CVE-2016-7911 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.6  View
117635 21955 CVE-2016-7911 94135  View
117636 21955 CVE-2016-7911 https://github.com/torvalds/linux/commit/8ba8682107ee2ca3347354e018865d8e1967c5f4  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5117 JVNDB-2016-005890 Linux Kernel の block/ioprio.c の get_task_ioprio 関数における権限を取得される脆弱性 Linux Kernel の block/ioprio.c の get_task_ioprio 関数には、競合状態により、権限を取得される、またはサービス運用妨害 (解放済みメモリの使用 (use-after-free)) 状態にされる脆弱性が存在します。 CVE-2016-7911 94418 CVE-2016-7911 21955 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005890.html 2016-08-10 2016-11-17 View