Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2016-0723 | Mondoo Vulnerability Intelligence

CVE-2016-0723

MEDIUM6.8

Race condition in the tty_ioctl function in drivers/tty/tty_io

Published Feb 8, 2016

Modified 1 years ago

No fix available

Details

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.

References

WEBhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439 ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html WEBhttp://source.android.com/security/bulletin/2016-07-01.html ADVISORYhttp://www.debian.org/security/2016/dsa-3448 ADVISORYhttp://www.debian.org/security/2016/dsa-3503 WEBhttp://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html WEBhttp://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html WEBhttp://www.securityfocus.com/bid/82950 WEBhttp://www.securitytracker.com/id/1035695 ADVISORYhttp://www.ubuntu.com/usn/USN-2929-1 ADVISORYhttp://www.ubuntu.com/usn/USN-2929-2 ADVISORYhttp://www.ubuntu.com/usn/USN-2930-1 ADVISORYhttp://www.ubuntu.com/usn/USN-2930-2 ADVISORYhttp://www.ubuntu.com/usn/USN-2930-3 ADVISORYhttp://www.ubuntu.com/usn/USN-2932-1 ADVISORYhttp://www.ubuntu.com/usn/USN-2948-1 ADVISORYhttp://www.ubuntu.com/usn/USN-2948-2 ADVISORYhttp://www.ubuntu.com/usn/USN-2967-1 ADVISORYhttp://www.ubuntu.com/usn/USN-2967-2 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1296253 WEBhttps://github.com/torvalds/linux/commit/5c17c861a357e9458001f021a7afa7aab9937439 WEBhttps://security-tracker.debian.org/tracker/CVE-2016-0723 WEBhttps://support.f5.com/csp/article/K43650115 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2016-0723

CVSS Analysis

CVSS v3.0

6.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

HighA:H

6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Ecosystems

Timeline

PublishedFeb 8, 2016

ModifiedAug 5, 2024