kernel: pipe buffer state corruption after unsuccessful atomic read from pipe
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | |||
| kernel-0:2.6.32-573.22.1.el6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2016:0494 | 2016-03-22T00:00:00Z |
| Red Hat Enterprise Linux 6.6 Extended Update Support | |||
| kernel-0:2.6.32-504.46.1.el6 | cpe:/o:redhat:rhel_eus:6.6 | RHSA-2016:0617 | 2016-04-12T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| kernel-0:3.10.0-327.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2015:2152 | 2015-11-19T00:00:00Z |
| Red Hat Enterprise Linux 7.1 Extended Update Support | |||
| kernel-0:3.10.0-229.26.2.ael7b | cpe:/o:redhat:rhel_eus:7.1 | RHSA-2016:0103 | 2016-02-02T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-439-1 | linux-2.6 security update |
Debian DSA |
DSA-3503-1 | linux security update |
EUVD |
EUVD-2016-0790 | The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805. |
Ubuntu USN |
USN-2967-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2967-2 | Linux kernel (OMAP4) vulnerabilities |
Ubuntu USN |
USN-2968-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-2968-2 | Linux kernel (Trusty HWE) vulnerabilities |
No CVSS v4.0
No CVSS v3.1
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.337% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.