NetSight
IP …
high7.8

CVE-2016-9754

The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculatio…

Impact

The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculations, which allows local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.5 before 3.10.102
from 3.11 before 3.12.61
from 3.13 before 3.14.71
from 3.15 before 3.16.37
from 3.17 before 3.18.35
from 3.19 before 4.1.26

Weakness classification

CWE-190

References