vulnwire
7.8high

CVE-2016-4565

The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cau…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
7.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 42%
Public exploits
0
none known

The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.

Exploit prediction (EPSS)

0.48% probability of exploitation in the next 30 days, higher than 42% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
Technology feeds
Linux kernel (RSS, critical only)

References

  • lists.opensuse.org /opensuse-security-announce/2016-06/msg00054.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-3006-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • oracle.com /technetwork/topics/security/ovmbulletinjul2016-3090546.html · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/USN-3004-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00022.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00023.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-3001-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00017.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-1640.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-1657.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00008.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securityfocus.com /bid/90301 · vdb-entry, x_refsource_BID, x_transferred
  • access.redhat.com /errata/RHSA-2016:1406 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • oracle.com /technetwork/topics/security/linuxbulletinjul2016-3090544.html · x_refsource_CONFIRM, x_transferred
  • access.redhat.com /errata/RHSA-2016:1341 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • oracle.com /technetwork/topics/security/linuxbulletinapr2016-2952096.html · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00003.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-3005-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00015.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00007.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • access.redhat.com /errata/RHSA-2016:1301 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • git.kernel.org /cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e6bd18f57aad1a2d1ef40e646d03ed0f2515c · x_refsource_CONFIRM, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-1814.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00055.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • github.com /torvalds/linux/commit/e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3 · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/USN-3018-2 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • ubuntu.com /usn/USN-3021-2 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00019.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00026.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-1489.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • ubuntu.com /usn/USN-3019-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-06/msg00044.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • kernel.org /pub/linux/kernel/v4.x/ChangeLog-4.5.3 · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2016/dsa-3607 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • ubuntu.com /usn/USN-3002-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=1310570 · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-06/msg00052.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00021.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-3021-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • ubuntu.com /usn/USN-3018-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00000.html · Mailing List, Third Party Advisory
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00009.html · Mailing List, Third Party Advisory
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00014.html · Mailing List, Third Party Advisory
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00016.html · Mailing List, Third Party Advisory
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00018.html · Mailing List, Third Party Advisory
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00020.html · Mailing List, Third Party Advisory
  • lists.opensuse.org /opensuse-security-announce/2016-08/msg00044.html · Mailing List, Third Party Advisory
  • rhn.redhat.com /errata/RHSA-2016-1581.html · Third Party Advisory
  • rhn.redhat.com /errata/RHSA-2016-1617.html · Third Party Advisory
  • openwall.com /lists/oss-security/2016/05/07/1 · Mailing List, Third Party Advisory
  • ubuntu.com /usn/USN-3003-1 · Third Party Advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.