Tracker / CVE-2016-9576
CVE-2016-9576
High 7.8
The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device.
Affected products and versions
| linux | linux_kernel · 4.0 → 4.4.38 |
|---|---|
| linux | linux_kernel · 4.5 → 4.8.14 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.