CVE-2016-9756

Published: Dec 28, 2016Modified: May 6, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.8.11

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2117d5398c81554fbf803f5fd1dc55eb78216c0c

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00000.html

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.12

Source: secalert@redhat.com

Release Notes

http://www.openwall.com/lists/oss-security/2016/12/01/1

Source: secalert@redhat.com

Mailing ListPatch

http://www.securityfocus.com/bid/94615

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1400468

Source: secalert@redhat.com

Issue Tracking

https://github.com/torvalds/linux/commit/2117d5398c81554fbf803f5fd1dc55eb78216c0c

Source: secalert@redhat.com

PatchVendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2117d5398c81554fbf803f5fd1dc55eb78216c0c