CVE-2016-6786

Published: Dec 28, 2016Modified: May 6, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 30955111.

Affected (4)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.85
Linux Linux Kernel	From 3.17 to 3.18.54
Linux Linux Kernel	From 3.19 to 4.0
Linux Linux Kernel	From 3.3 to 3.16.40

Related CWEs

CWE-264

References (12)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2b

Source: security@android.com

PatchVendor Advisory

http://source.android.com/security/bulletin/2016-12-01.html

Source: security@android.com

Third Party Advisory

http://www.debian.org/security/2017/dsa-3791

Source: security@android.com

Third Party Advisory

http://www.securityfocus.com/bid/94679

Source: security@android.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1403842

Source: security@android.com

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2b

Source: security@android.com

PatchVendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2b