sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 28, 2016 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernelUpgrade python-perf | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Dec 18, 2019 | May 23, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-develUpgrade kernel-uek-firmwareUpgrade kernel-uek-debugUpgrade kernel-uekUpgrade kernelUpgrade dtrace-modulesUpgrade kernel-uek-docUpgrade kernel-uek-debug-devel | Nov 9, 2016 | May 23, 2016 |
| Redhat_linux | — | Upgrade kernel-kdump-develUpgrade kernel-docUpgrade kernel-rt-trace-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-rt-trace-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-develUpgrade perfUpgrade kernel-rt-traceUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-rt-docUpgrade kernel-kdumpUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64No solution existsUpgrade kernelUpgrade kernel-bootwrapperUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Nov 4, 2016 | May 23, 2016 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade cluster-md-kmp-default | Jun 21, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-91-lowlatencyUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.13.0-91-genericUpgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-3.2.0-105-powerpc64-smpUpgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-3.2.0-105-genericUpgrade linux-image-4.4.0-28-genericUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-4.2.0-41-powerpc64-embUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-3.2.0-105-virtualUpgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-3.16.0-76-genericUpgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-3.13.0-91-powerpc64-smpUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-3.2.0-105-highbankUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-3.2.0-105-omapUpgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-3.2.0-105-powerpc-smpUpgrade linux-image-4.4.0-1016-raspi2Upgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-3.2.0-105-generic-paeUpgrade linux-image-3.2.0-1483-omap4Upgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-3.16.0-76-powerpc-e500mc | Jun 27, 2016 | May 23, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub