sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 28, 2016 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-devel | Dec 18, 2019 | May 23, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-firmwareUpgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade kernel-uek-debug-develUpgrade dtrace-modulesUpgrade kernel | Nov 9, 2016 | May 23, 2016 |
| Redhat_linux | — | Upgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade perf-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-trace-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-traceUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoNo solution existsUpgrade kernel-kdumpUpgrade kernel-rt-develUpgrade kernel-rt-docUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfo | Nov 4, 2016 | May 23, 2016 |
| Suse | — | Upgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-default | Jun 21, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-76-genericUpgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-3.13.0-91-powerpc64-smpUpgrade linux-image-3.16.0-76-powerpc-e500mcUpgrade linux-image-3.2.0-105-highbankUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-3.2.0-105-generic-paeUpgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-3.2.0-105-omapUpgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-3.2.0-1483-omap4Upgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-3.2.0-105-powerpc-smpUpgrade linux-image-4.4.0-1016-raspi2Upgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-4.2.0-41-powerpc64-embUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-3.2.0-105-virtualUpgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-3.2.0-105-powerpc64-smpUpgrade linux-image-3.2.0-105-genericUpgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.13.0-91-lowlatencyUpgrade linux-image-3.13.0-91-genericUpgrade linux-image-4.4.0-28-generic | Jun 27, 2016 | May 23, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub