CVE Vulnerabilities

CVE-2016-4565

Published: May 23, 2016 | Modified: Jan 17, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux * 3.2.81 (excluding)
Linux_kernel Linux 3.3 (including) 3.10.103 (excluding)
Linux_kernel Linux 3.11 (including) 3.12.61 (excluding)
Linux_kernel Linux 3.13 (including) 3.14.76 (excluding)
Linux_kernel Linux 3.15 (including) 3.16.36 (excluding)
Linux_kernel Linux 3.17 (including) 3.18.34 (excluding)
Linux_kernel Linux 3.19 (including) 4.1.25 (excluding)
Linux_kernel Linux 4.2 (including) 4.4.9 (excluding)
Linux_kernel Linux 4.5 (including) 4.5.3 (excluding)

References