Skip to content
OpenAdvisories
Unscored CVE-2016-0774 EUVD-2016-0790GHSA-qc32-8fv3-qwvw

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+d…

Published Apr 27, 2016 · Updated Aug 5, 2024 · Assigned by redhat

Package: linux Package: linux Ecosystem: Debian Ecosystem: Ubuntu

Description

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 linux 3.16.2-2 —
Debian 13 linux 3.16.2-2 —
Debian 12 linux 3.16.2-2 —
Debian 6.0 linux-2.6 2.6.32-48squeeze20 DLA-439-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS linux 3.13.0-86.130 USN-2968-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 perf +18 3.10.0-327.el7 RHSA-2015:2152
RHEL 6 perf +16 2.6.32-573.22.1.el6 RHSA-2016:0494
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.1 EUS kernel-kdump +4 3.10.0-229.26.2.el7 RHSA-2016:0103
RHEL 7.1 EUS perf +13 3.10.0-229.26.2.ael7b RHSA-2016:0103
RHEL 6.6 EUS perf +16 2.6.32-504.46.1.el6 RHSA-2016:0617

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 kernel-docs +1 3.12.55-52.42.2 SUSE-SU-2016:0785-1
SLES 12 kernel-ec2 +4 3.12.55-52.42.1 SUSE-SU-2016:0785-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 kernel-xen +3 3.12.55-52.42.1 SUSE-SU-2016:0785-1
SLE Live Patching 12 kgraft-patch-SLE12-SP1_Update_0 4-11.2 SUSE-SU-2016:1031-1
SLE Live Patching 12 kgraft-patch-SLE12-SP1_Update_3 2-2.1 SUSE-SU-2016:1033-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_11 +1 3-2.1 SUSE-SU-2016:1035-1, SUSE-SU-2016:1034-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_12 1-2.1 SUSE-SU-2016:0785-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_4 +1 6-2.1 SUSE-SU-2016:1046-1, SUSE-SU-2016:1040-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_6 +1 5-2.1 SUSE-SU-2016:1038-1, SUSE-SU-2016:1037-1
SLE Live Patching 12 kgraft-patch-SLE12_Update_8 +3 4-2.1 SUSE-SU-2016:1045-1, SUSE-SU-2016:1041-1, SUSE-SU-2016:1039-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 dtrace-modules-3.8.13-118.4.2.el6uek 0.4.5-3.el6 ELSA-2016-3528
Oracle Linux 7 dtrace-modules-3.8.13-118.4.2.el7uek 0.4.5-3.el7 ELSA-2016-3528
Oracle Linux 7 kernel-uek +5 3.8.13-118.4.2.el7uek ELSA-2016-3528

Advisories 21

References