CVE-2016-2548

Published: Apr 27, 2016Modified: May 6, 2026

6.2

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.5 / Impact: 3.6

Source: NVD

Description

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl call, related to the (1) snd_timer_close and (2) _snd_timer_stop functions.

Affected (1)

Products: Linux: Linux Kernel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (40)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

Source: cve@mitre.org

http://www.debian.org/security/2016/dsa-3503

Source: cve@mitre.org

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/01/19/1

Source: cve@mitre.org

http://www.securityfocus.com/bid/83383

Source: cve@mitre.org

http://www.securitytracker.com/id/1035306

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2929-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2929-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2930-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2930-2

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2930-3

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2931-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2932-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2967-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2967-2

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1311568

Source: cve@mitre.org

https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d

Source: cve@mitre.org

PatchVendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2016/dsa-3503

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2016/01/19/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/83383

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1035306

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2929-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2929-2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2930-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2930-2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2930-3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2931-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2932-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2967-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2967-2

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1311568

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/b5a663aa426f4884c71cd8580adae73f33570f0d

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.