The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-docUpgrade perfUpgrade kernel-toolsUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-tools-libsUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-devel | Dec 1, 2016 | Aug 8, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 8, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 19, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 28, 2016 | Aug 8, 2015 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2 | Dec 18, 2015 | Jul 31, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-58-powerpc-e500mcUpgrade linux-image-3.2.0-88-virtualUpgrade linux-image-3.13.0-58-powerpc-e500Upgrade linux-image-3.2.0-88-powerpc-smpUpgrade linux-image-3.2.0-88-generic-paeUpgrade linux-image-3.2.0-88-omapUpgrade linux-image-3.13.0-58-powerpc-smpUpgrade linux-image-3.13.0-58-powerpc64-embUpgrade linux-image-3.13.0-58-generic-lpaeUpgrade linux-image-3.13.0-58-powerpc64-smpUpgrade linux-image-3.13.0-58-lowlatencyUpgrade linux-image-3.2.0-88-highbankUpgrade linux-image-3.2.0-88-powerpc64-smpUpgrade linux-image-3.13.0-58-genericUpgrade linux-image-3.2.0-1468-omap4Upgrade linux-image-3.2.0-88-generic | May 3, 2019 | Aug 8, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub