Skip to content
OpenAdvisories
Unscored CVE-2016-9756 EUVD-2016-10557GHSA-r788-47qv-vw8p

arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allow…

Published Dec 28, 2016 · Updated Aug 6, 2024 · Assigned by redhat

Package: linux Package: linux Package: linux-aws Package: linux-lts-vivid Package: linux-lts-xenial Ecosystem: Debian Ecosystem: Ubuntu

Description

arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 linux 4.8.15-1 —
Debian 13 linux 4.8.15-1 —
Debian 12 linux 4.8.15-1 —
Debian 7 linux 3.2.84-1 DLA-772-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux 4.4.0-59.80 USN-3169-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1003.12 —
Ubuntu 14.04 LTS linux 3.13.0-107.154 USN-3168-1
Ubuntu 14.04 LTS linux-lts-vivid 3.19.0-79.87~14.04.1 —
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-59.80~14.04.1 USN-3169-2

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 kernel-docs 3.12.69-60.64.29.3 SUSE-SU-2017:0464-1
SLES 12 SP1 kernel-xen +4 3.12.69-60.64.29.1 SUSE-SU-2017:0464-1
SLES 12 kernel-ec2 +4 3.12.61-52.66.1 SUSE-SU-2017:0471-1, SUSE-SU-2017:0464-1
SLES 12 kgraft-patch-SLE12_Update_19 1-2.1 SUSE-SU-2017:0471-1
SLES 11 SP4 kernel-docs 3.0.101-94.2 SUSE-SU-2017:0437-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-94.1 SUSE-SU-2017:0437-1
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.96.1 SUSE-SU-2017:0494-1
SLES 11 SP2 kernel-ec2 +6 3.0.101-0.7.53.1 SUSE-SU-2017:0333-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP1 kernel-xen +3 3.12.69-60.64.29.1 SUSE-SU-2017:0464-1
SLES for SAP 12 kernel-xen +3 3.12.61-52.66.1 SUSE-SU-2017:0471-1
SLES for SAP 12 kgraft-patch-SLE12_Update_19 1-2.1 SUSE-SU-2017:0471-1
SLES for SAP 11 SP4 kernel-ec2 +8 3.0.101-94.1 SUSE-SU-2017:0437-1
SLE Real Time 12 SP1 kernel-rt +5 3.12.69-60.30.1 SUSE-SU-2017:0407-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-68.1 SUSE-SU-2017:1102-1
SLE Live Patching 12 kgraft-patch-SLE12-SP1_Update_12 1-4.1 SUSE-SU-2017:0464-1
SUSE OpenStack Cloud 5 kernel-ec2 +6 3.0.101-0.47.96.1 SUSE-SU-2017:0494-1
SUSE Manager Proxy 2.1 kernel-ec2 +6 3.0.101-0.47.96.1 SUSE-SU-2017:0494-1
SUSE Manager 2.1 kernel-ec2 +6 3.0.101-0.47.96.1 SUSE-SU-2017:0494-1
SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2 +6 3.0.101-0.47.96.1 SUSE-SU-2017:0494-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 dtrace-modules-4.1.12-61.1.33.el6uek 0.5.3-2.el6 ELSA-2017-3533
Oracle Linux 7 dtrace-modules-4.1.12-61.1.33.el7uek 0.5.3-2.el7 ELSA-2017-3533
Oracle Linux 7 kernel-uek +5 4.1.12-61.1.33.el7uek ELSA-2017-3533

Advisories 12

References