QwikSec

Security Database

CVE

CWE

Training

CVE-2016-4470

Published: Jun 27, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

x_refsource_CONFIRM

SUSE-SU-2016:2010

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:2011

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

SUSE-SU-2016:2003

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

SUSE-SU-2016:1994

vendor-advisory

x_refsource_SUSE

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_REDHAT

SUSE-SU-2016:1961

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

x_refsource_CONFIRM

SUSE-SU-2016:2001

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:1985

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2016:2184

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:1998

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

SUSE-SU-2016:2006

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_UBUNTU

vendor-advisory

x_refsource_REDHAT

SUSE-SU-2016:2014

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:2018

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_REDHAT

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

SUSE-SU-2016:2009

vendor-advisory

x_refsource_SUSE

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38327424b40bcebe2de92d07312c89360ac9229a

x_refsource_CONFIRM

[oss-security] 20160615 CVE-2016-4470: Linux kernel Uninitialized variable in request_key handling user controlled kfree().

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=1341716

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

SUSE-SU-2016:2005

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:2007

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:1999

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:2000

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_UBUNTU

SUSE-SU-2016:1995

vendor-advisory

x_refsource_SUSE

vendor-advisory

x_refsource_REDHAT

SUSE-SU-2016:2105

vendor-advisory

x_refsource_SUSE

SUSE-SU-2016:2002

vendor-advisory

x_refsource_SUSE

https://github.com/torvalds/linux/commit/38327424b40bcebe2de92d07312c89360ac9229a

x_refsource_CONFIRM

SUSE-SU-2016:1937

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.