CVEvulnerability

CVE-2016-10088

7.0 HIGH Published 2016-12-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-12-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.

Affected configurations

• linux linux kernel (< 3.10.107) • linux linux kernel (>= 3.11 < 3.12.70) • linux linux kernel (>= 3.13 < 3.16.40) • linux linux kernel (>= 3.17 < 3.18.47) • linux linux kernel (>= 3.19 < 4.1.38) • linux linux kernel (>= 4.2 < 4.4.41) • linux linux kernel (>= 4.5 < 4.8.17) • linux linux kernel (>= 4.9 < 4.9.2)

Related

Weakness · CWE (1)

References