Back to feed
EUVD-2016-5564 · Published May 23, 2016
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.
Technologies
Linux Linux KernelRedhat Enterprise Linux Server AusRedhat Enterprise Linux WorkstationOpensuse LeapOpensuse OpensuseRedhat Enterprise Linux Server TusCanonical Ubuntu LinuxDebian Debian LinuxRedhat Enterprise Linux Server EusRedhat Enterprise Linux DesktopRedhat Enterprise Linux Server
Weaknesses
CWE-200
CVSS scores
- v3.05.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - v2.02.1
AV:L/AC:L/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
- https://www.exploit-db.com/exploits/46529/
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4ec8cc8039a7063e24204299b462bd1383184a5
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
Potentially impacted assets
See if this affects your attack surface
