p PatchFirst

CVE-2016-0774

CVE-2016-0774

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.

CVSS 6.8 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.16.2-2

    Update to 3.16.2-2

  • linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.16.2-2

    Update to 3.16.2-2

  • linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.16.2-2

    Update to 3.16.2-2

  • linux Ubuntu:14.04:LTS

    Versions
    • 3.11.0-12.19
    • 3.12.0-1.3
    • 3.12.0-2.5
    • 3.12.0-2.7
    • 3.12.0-3.8
    • 3.12.0-3.9
    • 3.12.0-4.10
    • 3.12.0-4.12
    • 3.12.0-5.13
    • 3.12.0-7.15
    • 3.13.0-1.16
    • 3.13.0-2.17
    • 3.13.0-3.18
    • 3.13.0-4.19
    • 3.13.0-5.20
    • 3.13.0-6.23
    • 3.13.0-7.25
    • 3.13.0-7.26
    • 3.13.0-8.27
    • 3.13.0-8.28
    • 3.13.0-10.30
    • 3.13.0-11.31
    • 3.13.0-12.32
    • 3.13.0-13.33
    • 3.13.0-14.34
    • 3.13.0-15.35
    • 3.13.0-16.36
    • 3.13.0-17.37
    • 3.13.0-18.38
    • 3.13.0-19.39
    • 3.13.0-19.40
    • 3.13.0-20.42
    • 3.13.0-21.43
    • 3.13.0-22.44
    • 3.13.0-23.45
    • 3.13.0-24.46
    • 3.13.0-24.47
    • 3.13.0-27.50
    • 3.13.0-29.53
    • 3.13.0-30.54
    • 3.13.0-30.55
    • 3.13.0-32.57
    • 3.13.0-33.58
    • 3.13.0-34.60
    • 3.13.0-35.62
    • 3.13.0-36.63
    • 3.13.0-37.64
    • 3.13.0-39.66
    • 3.13.0-40.69
    • 3.13.0-41.70
    • 3.13.0-43.72
    • 3.13.0-44.73
    • 3.13.0-45.74
    • 3.13.0-46.75
    • 3.13.0-46.76
    • 3.13.0-46.77
    • 3.13.0-46.79
    • 3.13.0-48.80
    • 3.13.0-49.81
    • 3.13.0-49.83
    • 3.13.0-51.84
    • 3.13.0-52.85
    • 3.13.0-52.86
    • 3.13.0-53.88
    • 3.13.0-53.89
    • 3.13.0-54.91
    • 3.13.0-55.92
    • 3.13.0-55.94
    • 3.13.0-57.95
    • 3.13.0-58.97
    • 3.13.0-59.98
    • 3.13.0-61.100
    • 3.13.0-62.102
    • 3.13.0-63.103
    • 3.13.0-65.105
    • 3.13.0-65.106
    • 3.13.0-66.108
    • 3.13.0-67.110
    • 3.13.0-68.111
    • 3.13.0-70.113
    • 3.13.0-71.114
    • 3.13.0-73.116
    • 3.13.0-74.118
    • 3.13.0-76.120
    • 3.13.0-77.121
    • 3.13.0-79.123
    • 3.13.0-83.127
    • 3.13.0-85.129
    Affected ranges
    • ECOSYSTEM: < 3.13.0-86.130

    Update to 3.13.0-86.130

Original sources

Check your server →