CVE-2016-4470
CVE-2016-4470
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.
CVSS 5.5 · Medium · EPSS 0.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
linux Debian:12
- Affected ranges
- ECOSYSTEM: < 4.6.2-2
Update to 4.6.2-2
linux Debian:13
- Affected ranges
- ECOSYSTEM: < 4.6.2-2
Update to 4.6.2-2
linux Debian:14
- Affected ranges
- ECOSYSTEM: < 4.6.2-2
Update to 4.6.2-2
linux Ubuntu:14.04:LTS
- Versions
- 3.11.0-12.19
- 3.12.0-1.3
- 3.12.0-2.5
- 3.12.0-2.7
- 3.12.0-3.8
- 3.12.0-3.9
- 3.12.0-4.10
- 3.12.0-4.12
- 3.12.0-5.13
- 3.12.0-7.15
- 3.13.0-1.16
- 3.13.0-2.17
- 3.13.0-3.18
- 3.13.0-4.19
- 3.13.0-5.20
- 3.13.0-6.23
- 3.13.0-7.25
- 3.13.0-7.26
- 3.13.0-8.27
- 3.13.0-8.28
- 3.13.0-10.30
- 3.13.0-11.31
- 3.13.0-12.32
- 3.13.0-13.33
- 3.13.0-14.34
- 3.13.0-15.35
- 3.13.0-16.36
- 3.13.0-17.37
- 3.13.0-18.38
- 3.13.0-19.39
- 3.13.0-19.40
- 3.13.0-20.42
- 3.13.0-21.43
- 3.13.0-22.44
- 3.13.0-23.45
- 3.13.0-24.46
- 3.13.0-24.47
- 3.13.0-27.50
- 3.13.0-29.53
- 3.13.0-30.54
- 3.13.0-30.55
- 3.13.0-32.57
- 3.13.0-33.58
- 3.13.0-34.60
- 3.13.0-35.62
- 3.13.0-36.63
- 3.13.0-37.64
- 3.13.0-39.66
- 3.13.0-40.69
- 3.13.0-41.70
- 3.13.0-43.72
- 3.13.0-44.73
- 3.13.0-45.74
- 3.13.0-46.75
- 3.13.0-46.76
- 3.13.0-46.77
- 3.13.0-46.79
- 3.13.0-48.80
- 3.13.0-49.81
- 3.13.0-49.83
- 3.13.0-51.84
- 3.13.0-52.85
- 3.13.0-52.86
- 3.13.0-53.88
- 3.13.0-53.89
- 3.13.0-54.91
- 3.13.0-55.92
- 3.13.0-55.94
- 3.13.0-57.95
- 3.13.0-58.97
- 3.13.0-59.98
- 3.13.0-61.100
- 3.13.0-62.102
- 3.13.0-63.103
- 3.13.0-65.105
- 3.13.0-65.106
- 3.13.0-66.108
- 3.13.0-67.110
- 3.13.0-68.111
- 3.13.0-70.113
- 3.13.0-71.114
- 3.13.0-73.116
- 3.13.0-74.118
- 3.13.0-76.120
- 3.13.0-77.121
- 3.13.0-79.123
- 3.13.0-83.127
- 3.13.0-85.129
- 3.13.0-86.130
- 3.13.0-86.131
- 3.13.0-87.133
- 3.13.0-88.135
- 3.13.0-91.138
- 3.13.0-92.139
- Affected ranges
- ECOSYSTEM: < 3.13.0-93.140
Update to 3.13.0-93.140
linux-lts-vivid Ubuntu:14.04:LTS
- Versions
- 3.19.0-18.18~14.04.1
- 3.19.0-20.20~14.04.1
- 3.19.0-21.21~14.04.1
- 3.19.0-22.22~14.04.1
- 3.19.0-23.24~14.04.1
- 3.19.0-25.26~14.04.1
- 3.19.0-26.28~14.04.1
- 3.19.0-28.30~14.04.1
- 3.19.0-30.33~14.04.1
- 3.19.0-30.34~14.04.1
- 3.19.0-31.36~14.04.1
- 3.19.0-32.37~14.04.1
- 3.19.0-33.38~14.04.1
- 3.19.0-37.42~14.04.1
- 3.19.0-39.44~14.04.1
- 3.19.0-41.46~14.04.2
- 3.19.0-42.48~14.04.1
- 3.19.0-43.49~14.04.1
- 3.19.0-47.53~14.04.1
- 3.19.0-49.55~14.04.1
- 3.19.0-51.57~14.04.1
- 3.19.0-51.58~14.04.1
- 3.19.0-56.62~14.04.1
- 3.19.0-58.64~14.04.1
- 3.19.0-59.65~14.04.1
- 3.19.0-59.66~14.04.1
- 3.19.0-61.69~14.04.1
- 3.19.0-64.72~14.04.1
- 3.19.0-65.73~14.04.1
- Affected ranges
- ECOSYSTEM: < 3.19.0-66.74~14.04.1
Update to 3.19.0-66.74~14.04.1
linux-lts-xenial Ubuntu:14.04:LTS
- Versions
- 4.4.0-13.29~14.04.1
- 4.4.0-14.30~14.04.2
- 4.4.0-15.31~14.04.1
- 4.4.0-18.34~14.04.1
- 4.4.0-21.37~14.04.1
- 4.4.0-22.39~14.04.1
- 4.4.0-22.40~14.04.1
- 4.4.0-24.43~14.04.1
- 4.4.0-28.47~14.04.1
- 4.4.0-31.50~14.04.1
- Affected ranges
- ECOSYSTEM: < 4.4.0-34.53~14.04.1
Update to 4.4.0-34.53~14.04.1
linux Ubuntu:16.04:LTS
- Versions
- 4.2.0-16.19
- 4.2.0-17.21
- 4.2.0-19.23
- 4.3.0-1.10
- 4.3.0-2.11
- 4.3.0-5.16
- 4.3.0-6.17
- 4.3.0-7.18
- 4.4.0-2.16
- 4.4.0-4.19
- 4.4.0-6.21
- 4.4.0-7.22
- 4.4.0-8.23
- 4.4.0-9.24
- 4.4.0-10.25
- 4.4.0-11.26
- 4.4.0-12.28
- 4.4.0-13.29
- 4.4.0-14.30
- 4.4.0-15.31
- 4.4.0-16.32
- 4.4.0-17.33
- 4.4.0-18.34
- 4.4.0-21.37
- 4.4.0-22.39
- 4.4.0-22.40
- 4.4.0-24.43
- 4.4.0-28.47
- 4.4.0-31.50
- Affected ranges
- ECOSYSTEM: < 4.4.0-34.53
Update to 4.4.0-34.53
linux-raspi2 Ubuntu:16.04:LTS
- Versions
- 4.2.0-1013.19
- 4.2.0-1014.21
- 4.3.0-1006.6
- 4.4.0-1003.4
- 4.4.0-1004.5
- 4.4.0-1009.10
- 4.4.0-1010.12
- 4.4.0-1010.13
- 4.4.0-1012.16
- 4.4.0-1016.22
- 4.4.0-1017.23
- Affected ranges
- ECOSYSTEM: < 4.4.0-1019.25
Update to 4.4.0-1019.25
linux-snapdragon Ubuntu:16.04:LTS
- Versions
- 4.4.0-1012.12
- 4.4.0-1013.14
- 4.4.0-1013.15
- 4.4.0-1015.18
- 4.4.0-1019.22
- 4.4.0-1020.23
- Affected ranges
- ECOSYSTEM: < 4.4.0-1022.25
Update to 4.4.0-1022.25
Original sources
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html
- http://www.ubuntu.com/usn/USN-3054-1
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2016-1657.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.ubuntu.com/usn/USN-3051-1
- http://rhn.redhat.com/errata/RHSA-2016-2128.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html
- http://rhn.redhat.com/errata/RHSA-2016-2133.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
- http://www.ubuntu.com/usn/USN-3053-1
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00012.html
- http://www.ubuntu.com/usn/USN-3055-1
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html
- http://www.ubuntu.com/usn/USN-3056-1
- http://www.ubuntu.com/usn/USN-3052-1
- http://www.ubuntu.com/usn/USN-3049-1
- https://nvd.nist.gov/vuln/detail/CVE-2016-4470