The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 28, 2016 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Dec 18, 2019 | May 23, 2016 |
| Oracle_linux | — | Upgrade dtrace-modulesUpgrade kernel-uekUpgrade kernel-uek-firmwareUpgrade kernelUpgrade kernel-uek-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-debugUpgrade kernel-uek-doc | Nov 9, 2016 | May 23, 2016 |
| Redhat_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-traceUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-docUpgrade kernel-develNo solution existsUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-ppc64Upgrade kernel-debuginfo-common-s390xUpgrade kernel-docUpgrade python-perfUpgrade kernel-rt-debuginfoUpgrade kernel-abi-whitelistsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-trace-develUpgrade kernel-bootwrapperUpgrade kernel-kdump-debuginfoUpgrade kernel-headersUpgrade kernel-kdumpUpgrade kernel-rt-debug-develUpgrade python-perf-debuginfoUpgrade kernel-kdump-develUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-trace-debuginfo | Nov 4, 2016 | May 23, 2016 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2 | Jun 21, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-3.2.0-105-genericUpgrade linux-image-3.16.0-76-genericUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-3.2.0-105-generic-paeUpgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-3.13.0-91-genericUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-3.13.0-91-lowlatencyUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-3.2.0-105-powerpc64-smpUpgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-3.2.0-1483-omap4Upgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-3.2.0-105-powerpc-smpUpgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-3.16.0-76-powerpc-e500mcUpgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-3.2.0-105-virtualUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-3.2.0-105-highbankUpgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-4.4.0-28-genericUpgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-3.13.0-91-powerpc64-smpUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-3.2.0-105-omapUpgrade linux-image-4.2.0-41-powerpc64-embUpgrade linux-image-4.4.0-1016-raspi2 | Jun 27, 2016 | May 23, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub