CVE-2016-2548

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1

Description The issue allows local users to cause a denial of service, resulting in a system crash, via a crafted ioctl call. This is related to the snd timer close and snd timer stop functions in the sound/core/timer.c file.

Recommendations For Linux kernel versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ioctl call related to the snd timer close and snd timer stop functions to minimize the risk of exploitation.