Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-2545

Опубликовано: 19 янв. 2016
Источник: redhat
CVSS2: 1.9
EPSS Низкий

Описание

The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service (race condition and system crash) via a crafted ioctl call.

Отчет

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and MRG-2. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kernelWill not fix
Red Hat Enterprise Linux 6kernelWill not fix
Red Hat Enterprise Linux 7kernelWill not fix
Red Hat Enterprise Linux 7kernel-rtWill not fix
Red Hat Enterprise MRG 2realtime-kernelWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1311560kernel: sound: use-after-free in snd_timer_interrupt

EPSS

Процентиль: 15%
0.00048
Низкий

1.9 Low

CVSS2

Связанные уязвимости

CVSS3: 5.1
ubuntu
около 9 лет назад

The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service (race condition and system crash) via a crafted ioctl call.

CVSS3: 5.1
nvd
около 9 лет назад

The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service (race condition and system crash) via a crafted ioctl call.

CVSS3: 5.1
debian
около 9 лет назад

The snd_timer_interrupt function in sound/core/timer.c in the Linux ke ...

CVSS3: 5.1
github
около 3 лет назад

The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service (race condition and system crash) via a crafted ioctl call.

oracle-oval
около 7 лет назад

ELSA-2018-4145: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 15%
0.00048
Низкий

1.9 Low

CVSS2