CVE-2016-4569

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7

Description The issue is related to the snd timer user params function in the sound/core/timer.c file of the Linux kernel. This function does not properly initialize a certain data structure, allowing local users to obtain sensitive information from kernel stack memory. This can be achieved through crafted use of the ALSA timer interface.

Recommendations For Linux kernel versions prior to 4.7, update to version 4.7 or later to resolve the issue.