CVE-2016-2549
Ubuntu Security Notice USN-2929-2
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call.
sound/core/hrtimer.c en el kernel de Linux en versiones anteriores a 4.4.1 no previene el acceso a la devolución de llamadas recursivas, lo que permite a usuarios locales causar una denegación de servicio (punto muerto) a través de una llamada ioctl manipulada.
Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPT_SO_SET_REPLACE events. A local unprivileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. It was discovered that the Linux kernel did not properly enforce rlimits for file descriptors sent over UNIX domain sockets. A local attacker could use this to cause a denial of service. Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-02-23 CVE Reserved
- 2016-03-04 CVE Published
- 2024-08-05 CVE Updated
- 2025-07-09 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (19)
| URL | Tag | Source |
|---|---|---|
| http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1 | X_refsource_confirm | |
| http://www.openwall.com/lists/oss-security/2016/01/19/1 | Mailing List |
|
| http://www.securityfocus.com/bid/83382 | Vdb Entry | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1311570 | X_refsource_confirm | |
| https://github.com/torvalds/linux/commit/2ba1fe7a06d3624f9a7586d672b55f08f7c670f3 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2ba1fe7a06d3624f9a7586d672b55f08f7c670f3 | 2016-12-03 | |
| http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html | 2016-12-03 | |
| http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html | 2016-12-03 | |
| http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html | 2016-12-03 | |
| http://www.debian.org/security/2016/dsa-3503 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2929-1 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2929-2 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2930-1 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2930-2 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2930-3 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2931-1 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2932-1 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2967-1 | 2016-12-03 | |
| http://www.ubuntu.com/usn/USN-2967-2 | 2016-12-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | <= 4.4 Search vendor "Linux" for product "Linux Kernel" and version " <= 4.4" | - |
Affected
| ||||||