CVE-2016-4470

Published: Jun 27, 2016Modified: May 6, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

Affected (17)

Products: Oracle: Vm Server, Linux · Linux: Linux Kernel · Novell: Suse Linux Enterprise Real Time Extension · +1 more

Show all products

Oracle: Vm Server, Linux · Linux: Linux Kernel · Novell: Suse Linux Enterprise Real Time Extension · Redhat: Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux For Real Time, Enterprise Linux Hpc Node, Enterprise Linux Hpc Node Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Workstation, Enterprise Mrg

2 products

1 product

1 product

Suse Linux Enterprise Real Time Extension

Redhat

10 products

Enterprise Linux

Enterprise Linux Desktop

Enterprise Linux For Real Time

Enterprise Linux Hpc Node

Enterprise Linux Hpc Node Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Workstation

Enterprise Mrg

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Vm Server	Version 3.3
Oracle Vm Server	Version 3.4

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 5.0
Oracle Linux	Version 6
Oracle Linux	Version 7

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.6.3

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Real Time Extension	Version 12.0 sp1

Configuration E

10 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux For Real Time	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Hpc Node Eus	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Enterprise Mrg	Version 2.0

References (96)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38327424b40bcebe2de92d07312c89360ac9229a

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00012.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00013.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-1532.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1539.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1541.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1657.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-2006.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-2074.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-2076.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-2128.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-2133.html

Source: secalert@redhat.com

http://www.debian.org/security/2016/dsa-3607

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2016/06/15/11

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securitytracker.com/id/1036763

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3049-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3050-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3051-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3052-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3053-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3054-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3055-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3056-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3057-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1341716

Source: secalert@redhat.com

Issue TrackingThird Party AdvisoryVDB Entry

https://github.com/torvalds/linux/commit/38327424b40bcebe2de92d07312c89360ac9229a

Source: secalert@redhat.com

Vendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38327424b40bcebe2de92d07312c89360ac9229a