UBUNTU-CVE-2016-2383

Details

The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.

Affected Packages

linux

Ubuntu 16.04 LTS

Affected versions:

4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.114.3.0-5.164.3.0-6.174.3.0-7.184.4.0-10.254.4.0-2.16+5 more

Fixed in:

4.4.0-11.26

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1002.2

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1001.10

linux-gke

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1003.3

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.8.0-36.36~16.04.1

linux-lts-wily

Ubuntu 14.04 LTS

Affected versions:

4.2.0-18.22~14.04.14.2.0-19.23~14.04.14.2.0-21.25~14.04.14.2.0-22.27~14.04.14.2.0-23.28~14.04.14.2.0-25.30~14.04.14.2.0-27.32~14.04.14.2.0-30.35~14.04.14.2.0-30.36~14.04.14.2.0-34.39~14.04.1

Fixed in:

4.2.0-35.40~14.04.1

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-13.29~14.04.1

linux-raspi2

Ubuntu 16.04 LTS

Affected versions:

4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.4

Fixed in:

4.4.0-1004.5

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1012.12

References

REPORThttp://www.openwall.com/lists/oss-security/2016/02/14/1 REPORThttps://ubuntu.com/security/CVE-2016-2383 REPORThttps://ubuntu.com/security/notices/USN-2947-1 REPORThttps://ubuntu.com/security/notices/USN-2947-2 REPORThttps://ubuntu.com/security/notices/USN-2947-3 REPORThttps://www.cve.org/CVERecord?id=CVE-2016-2383

UBUNTU-CVE-2016-2383

Details

Affected Packages

References

CVSS Analysis

Related

Ecosystems

Timeline