The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows local users to obtain root access on non-SMEP platforms via a crafted application. NOTE: this vulnerability exists because of incorrect backporting of the CVE-2016-9178 patch to older kernels.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uek-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-debugUpgrade dtrace-modules-shared-headersUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-docUpgrade dtrace-modules-provider-headersUpgrade dtrace-modules | Apr 4, 2017 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-51-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-51-generic-lpaeUpgrade linux-image-4.4.0-51-lowlatencyUpgrade linux-image-4.4.0-51-powerpc-smpUpgrade linux-image-4.4.0-1042-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-51-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-51-genericUpgrade linux-image-4.4.0-51-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenial | Dec 1, 2016 | Nov 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub