NetSight
IP …
high7.5

CVE-2016-2117

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remo…

Impact

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.

Affected products

VendorProductAffected versions
OracleVm Server
Versions 3.3, 3.4
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
LinuxLinux Kernel
through 4.5.2

Weakness classification

CWE-200

References