NetSight
IP …
high7.8

CVE-2016-9083

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corr…

Impact

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.6 before 3.10.107
from 3.11 before 3.12.70
from 3.13 before 3.16.39
from 3.17 before 3.18.51
from 3.19 before 4.1.41
from 4.2 before 4.4.65

Weakness classification

CWE-119CWE-190

References