Rapid7

vulnerability

SUSE: CVE-2016-2548: SUSE Linux Security Advisory

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Mar 30, 2016
Added
Apr 7, 2016
Modified
Jun 21, 2018

Description

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl call, related to the (1) snd_timer_close and (2) _snd_timer_stop functions.

Solutions

suse-upgrade-kernel-defaultsuse-upgrade-kernel-docs

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.