NetSight
IP …
high7.8Public exploit code

CVE-2016-1583

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of serv…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.19 before 3.18.54
from 3.19 before 4.4.14
from 4.5 before 4.6.3
NovellSuse Linux Enterprise Software Development Kit
Versions 11.0, 12.0
NovellSuse Linux Enterprise Debuginfo
Version 11.0
NovellSuse Linux Enterprise Desktop
Version 12.0
NovellSuse Linux Enterprise Live Patching
Version 12.0
NovellSuse Linux Enterprise Module For Public Cloud
Version 12
NovellSuse Linux Enterprise Server
Versions 11.0, 12.0
NovellSuse Linux Enterprise Workstation Extension
Version 12.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
DebianDebian Linux
Version 8.0

Weakness classification

CWE-119

References