CVE-2016-8650

Published: Nov 28, 2016Modified: May 6, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.

Affected (1)

Products: Linux: Linux Kernel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.8.11

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (24)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5527fffff3f002b0a6b376163613b82f69de073

Source: secalert@redhat.com

Issue TrackingPatchVendor Advisory

http://seclists.org/fulldisclosure/2016/Nov/76

Source: secalert@redhat.com

Mailing List

http://www.openwall.com/lists/oss-security/2016/11/24/8

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/94532

Source: secalert@redhat.com

http://www.securitytracker.com/id/1037968

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:0931

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:0932

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:0933

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2018:1854

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1395187

Source: secalert@redhat.com

Issue Tracking

https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://source.android.com/security/bulletin/2017-03-01.html

Source: secalert@redhat.com

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5527fffff3f002b0a6b376163613b82f69de073

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

http://seclists.org/fulldisclosure/2016/Nov/76

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2016/11/24/8

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/94532

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1037968

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2017:0931

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2017:0932

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2017:0933

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2018:1854

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1395187

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://source.android.com/security/bulletin/2017-03-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.