The sg implementation in the Linux kernel through 4.9 does...
Vulnerability Description
The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-10088
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securitytracker.com/id/1037538
- https://access.redhat.com/errata/RHSA-2017:2669
- http://www.securityfocus.com/bid/95169
- http://rhn.redhat.com/errata/RHSA-2017-0817.html
- http://www.openwall.com/lists/oss-security/2016/12/30/1
- https://access.redhat.com/errata/RHSA-2017:2077
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=128394eff343fc6d2f32172f03e24829539c5835
- https://access.redhat.com/errata/RHSA-2017:1842
- https://github.com/torvalds/linux/commit/128394eff343fc6d2f32172f03e24829539c5835
More from linux
View All →Affected Vendor
linux
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.