The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 28, 2016 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debugUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Dec 18, 2019 | May 23, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernelUpgrade dtrace-modulesUpgrade kernel-uek-firmwareUpgrade kernel-uek-debugUpgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernel-uek-devel | Nov 9, 2016 | May 23, 2016 |
| Redhat_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-abi-whitelistsUpgrade kernel-kdump-debuginfoUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-debuginfo-common-s390xUpgrade kernel-docUpgrade perf-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-kdump-develUpgrade kernel-rt-trace-develUpgrade kernel-kdumpUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-docNo solution existsUpgrade kernel-rt-traceUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-devel | Nov 4, 2016 | May 23, 2016 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade cluster-network-kmp-default | Jun 21, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-28-genericUpgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-3.2.0-105-omapUpgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-3.2.0-105-virtualUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-3.2.0-105-highbankUpgrade linux-image-4.2.0-41-powerpc64-embUpgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-3.13.0-91-powerpc64-smpUpgrade linux-image-4.4.0-1016-raspi2Upgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-3.2.0-1483-omap4Upgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-3.2.0-105-genericUpgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-3.2.0-105-powerpc64-smpUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-3.2.0-105-generic-paeUpgrade linux-image-3.2.0-105-powerpc-smpUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-3.13.0-91-genericUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-3.16.0-76-genericUpgrade linux-image-3.16.0-76-powerpc-e500mcUpgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-3.13.0-91-lowlatency | Jun 27, 2016 | May 23, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub