UBUNTU-CVE-2016-4557

Details

The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.

Affected Packages

linux

Ubuntu 16.04 LTS

Affected versions:

4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.114.3.0-5.164.3.0-6.174.3.0-7.184.4.0-10.254.4.0-11.26+14 more

Fixed in:

4.4.0-22.39

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1002.2

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1001.10

linux-gke

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1003.3

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.8.0-36.36~16.04.1

linux-lts-xenial

Ubuntu 14.04 LTS

Affected versions:

4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1

Fixed in:

4.4.0-22.39~14.04.1

linux-raspi2

Ubuntu 16.04 LTS

Affected versions:

4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.54.4.0-1009.10

Fixed in:

4.4.0-1010.12

linux-snapdragon

Ubuntu 16.04 LTS

Affected versions:

4.4.0-1012.12

Fixed in:

4.4.0-1013.14

References

REPORThttp://www.openwall.com/lists/oss-security/2016/05/06/7 REPORThttps://bugs.chromium.org/p/project-zero/issues/detail?id=808 REPORThttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8358b02bf67d3a5d8a825070e1aa73f25fb2e4c7 REPORThttps://ubuntu.com/security/CVE-2016-4557 REPORThttps://ubuntu.com/security/notices/USN-2965-1 REPORThttps://ubuntu.com/security/notices/USN-2965-2 REPORThttps://ubuntu.com/security/notices/USN-2965-3 REPORThttps://ubuntu.com/security/notices/USN-2965-4 REPORThttps://www.cve.org/CVERecord?id=CVE-2016-4557

UBUNTU-CVE-2016-4557

Details

Affected Packages

References

CVSS Analysis

Related

Ecosystems

Timeline