drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging access to a vfio PCI device file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 9, 2016 | Nov 27, 2016 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 6, 2017 | Nov 27, 2016 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 7, 2017 | Oct 12, 2016 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 3, 2017 | Nov 27, 2016 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2 | Dec 9, 2016 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1018-awsUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-4.4.0-79-genericUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-virtual | Jun 8, 2017 | Nov 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub