CVEvulnerability

CVE-2016-4913

7.8 HIGH Published 2016-05-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-05-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-200

Description

The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.

Affected configurations

• canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10 • canonical ubuntu linux 16.04 • linux linux kernel (< 3.2.81) • linux linux kernel (>= 3.3 < 3.10.102) • linux linux kernel (>= 3.11 < 3.12.60) • linux linux kernel (>= 3.13 < 3.14.70) • linux linux kernel (>= 3.15 < 3.16.36) • linux linux kernel (>= 3.17 < 3.18.34) • linux linux kernel (>= 3.19 < 4.1.25) • linux linux kernel (>= 4.2 < 4.4.11) • linux linux kernel (>= 4.5 < 4.5.5) • oracle linux 6 • novell suse linux enterprise software development kit 11.0 • novell suse linux enterprise debuginfo 11.0 • novell suse linux enterprise server 11.0

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References