PT-2016-6185

CVE-2016-4951

·

Published

2016-05-23

·

Updated

2024-06-15

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7
Description The issue is related to the tipc nl publ dump function in the Linux kernel, which does not verify socket existence. This allows local users to cause a denial of service, resulting in a NULL pointer dereference and system crash, or possibly have other unspecified impacts via a dumpit operation.
Recommendations For Linux kernel versions prior to 4.7, update to version 4.7 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2016-1641
ALT-PU-2016-1642
MGASA-2016-0271
MGASA-2016-0283
MGASA-2016-0284
OPENSUSE-SU-2016_1641-1
OPENSUSE-SU-2016_2290-1
OPENSUSE-SU-2024:10128-1
USN-3016-1
USN-3016-2
USN-3016-3
USN-3016-4
USN-3017-1
USN-3017-2
USN-3017-3
USN-3020-1
Found an issue in the description? Have something to add? Feel free to write us 👾