cnvd - cnvd-2016-10522

cnvd-2016-10522

Vulnerability from cnvd

Title: Linux Kernel本地整数溢出漏洞

Description:

Linux kernel是美国Linux基金会发布的操作系统Linux所使用的内核。

Linux Kernel存在整数溢出漏洞，攻击者可利用该漏洞在受影响应用程序上下文中执行任意代码，也可能造成拒绝服务。

Severity: 中

Patch Name: Linux Kernel本地整数溢出漏洞的补丁

Patch Description:

Linux kernel是美国Linux基金会发布的操作系统Linux所使用的内核。

Linux Kernel存在整数溢出漏洞，攻击者可利用该漏洞在受影响应用程序上下文中执行任意代码，也可能造成拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： http://seclists.org/oss-sec/2016/q4/251

Reference: http://www.securityfocus.com/bid/93929

Impacted products

Name
['Linux Kernel 3.0.4', 'Linux Kernel 3.0.1', 'Linux Kernel 2.6.20 .6', 'Linux Kernel 2.6.20 .7', 'Linux Kernel 3.0-rc1', 'Linux Kernel 2.6.13.1', 'Linux Kernel 2.6.12.6', 'Linux Kernel 2.6.12.5', 'Linux Kernel 2.6.12.4', 'Linux Kernel 2.6.12.3', 'Linux Kernel 2.6.12.2', 'Linux Kernel 2.6.12.1', 'Linux Kernel 2.6.14.3', 'Linux Kernel 2.6.14.2', 'Linux Kernel 2.6.15.4', 'Linux Kernel 2.6.15 .1', 'Linux Kernel 2.6.15 .2', 'Linux Kernel 2.6.15 .3', 'Linux Kernel 2.6.21 .1', 'Linux Kernel 2.6.21 .2', 'Linux Kernel 2.6.21 .3', 'Linux Kernel 2.6.21 .6', 'Linux Kernel 2.6.21 .7', 'Linux Kernel 2.6.21 4', 'Linux Kernel 2.6.20.3', 'Linux Kernel 2.6.20.2', 'Linux Kernel 2.6.15-27.48', 'Linux Kernel 2.6.15.11', 'Linux Kernel 2.6.18', 'Linux Kernel 2.6.18-53', 'Linux Kernel 2.6.20.11', 'Linux Kernel 2.6.20.13', 'Linux Kernel 2.6', 'Linux Kernel 2.6.1', 'Linux Kernel 2.6.2', 'Linux Kernel 2.6.10', 'Linux Kernel 2.6.13.2', 'Linux Kernel 2.6.13.3', 'Linux Kernel 2.6.13.4', 'Linux Kernel 2.6.13', 'Linux Kernel 2.6.14', 'Linux Kernel 2.6.15', 'Linux Kernel 2.6.16', 'Linux Kernel 2.6.18.1', 'Linux Kernel 2.6.20', 'Linux Kernel 2.6.15.5', 'Linux Kernel 2.6.20 .14', 'Linux Kernel 2.6.20 .12', 'Linux Kernel 2.6.20 .10', 'Linux Kernel 2.6.19', 'Linux Kernel 2.6.18 .8', 'Linux Kernel 2.6.18 .7', 'Linux Kernel 2.6.18 .6', 'Linux Kernel 2.6.18 .5', 'Linux Kernel 2.6.18 .2', 'Linux Kernel 2.6.16 .27', 'Linux Kernel 2.6.16 .53', 'Linux Kernel 2.6.16 .52', 'Linux Kernel 2.6.16 .51', 'Linux Kernel 2.6.16 .50', 'Linux Kernel 2.6.16 .49', 'Linux Kernel 2.6.16 .48', 'Linux Kernel 2.6.16 .47', 'Linux Kernel 2.6.16 .46', 'Linux Kernel 2.6.16 .45', 'Linux Kernel 2.6.16 .44', 'Linux Kernel 2.6.16 .43', 'Linux Kernel 2.6.16 .41', 'Linux Kernel 2.6.16 .40', 'Linux Kernel 2.6.16 .39', 'Linux Kernel 2.6.16 .38', 'Linux Kernel 2.6.16 .37', 'Linux Kernel 2.6.16 .36', 'Linux Kernel 2.6.16 .35', 'Linux Kernel 2.6.16 .34', 'Linux Kernel 2.6.16 .33', 'Linux Kernel 2.6.16 .32', 'Linux Kernel 2.6.16 .31', 'Linux Kernel 2.6.16 .30', 'Linux Kernel 2.6.16 .29', 'Linux Kernel 2.6.16 .28', 'Linux Kernel 2.6.16 .25', 'Linux Kernel 2.6.16 .24', 'Linux Kernel 2.6.16 .22', 'Linux Kernel 2.6.15 .7', 'Linux Kernel 2.6.15 .6', 'Linux Kernel 2.6.15 .4', 'Linux Kernel 2.6.14 .6', 'Linux Kernel 2.6.14 .7', 'Linux Kernel 2.6.13 .5', 'Linux Kernel 2.6.20-2', 'Linux Kernel 2.6.14.1', 'Linux kernel 3.1.8', 'Linux kernel 3.0.5', 'Linux kernel 3.0.2', 'Linux kernel 3.3.4', 'Linux kernel 3.3.2', 'Linux kernel 3.3.5', 'Linux Kernel 3.8', 'Linux Kernel 3.9.4', 'Linux Kernel 3.0.18', 'Linux Kernel 4.2', 'Linux Kernel 4.4']

Name

['Linux Kernel 3.0.4', 'Linux Kernel 3.0.1', 'Linux Kernel 2.6.20 .6', 'Linux Kernel 2.6.20 .7', 'Linux Kernel 3.0-rc1', 'Linux Kernel 2.6.13.1', 'Linux Kernel 2.6.12.6', 'Linux Kernel 2.6.12.5', 'Linux Kernel 2.6.12.4', 'Linux Kernel 2.6.12.3', 'Linux Kernel 2.6.12.2', 'Linux Kernel 2.6.12.1', 'Linux Kernel 2.6.14.3', 'Linux Kernel 2.6.14.2', 'Linux Kernel 2.6.15.4', 'Linux Kernel 2.6.15 .1', 'Linux Kernel 2.6.15 .2', 'Linux Kernel 2.6.15 .3', 'Linux Kernel 2.6.21 .1', 'Linux Kernel 2.6.21 .2', 'Linux Kernel 2.6.21 .3', 'Linux Kernel 2.6.21 .6', 'Linux Kernel 2.6.21 .7', 'Linux Kernel 2.6.21 4', 'Linux Kernel 2.6.20.3', 'Linux Kernel 2.6.20.2', 'Linux Kernel 2.6.15-27.48', 'Linux Kernel 2.6.15.11', 'Linux Kernel 2.6.18', 'Linux Kernel 2.6.18-53', 'Linux Kernel 2.6.20.11', 'Linux Kernel 2.6.20.13', 'Linux Kernel 2.6', 'Linux Kernel 2.6.1', 'Linux Kernel 2.6.2', 'Linux Kernel 2.6.10', 'Linux Kernel 2.6.13.2', 'Linux Kernel 2.6.13.3', 'Linux Kernel 2.6.13.4', 'Linux Kernel 2.6.13', 'Linux Kernel 2.6.14', 'Linux Kernel 2.6.15', 'Linux Kernel 2.6.16', 'Linux Kernel 2.6.18.1', 'Linux Kernel 2.6.20', 'Linux Kernel 2.6.15.5', 'Linux Kernel 2.6.20 .14', 'Linux Kernel 2.6.20 .12', 'Linux Kernel 2.6.20 .10', 'Linux Kernel 2.6.19', 'Linux Kernel 2.6.18 .8', 'Linux Kernel 2.6.18 .7', 'Linux Kernel 2.6.18 .6', 'Linux Kernel 2.6.18 .5', 'Linux Kernel 2.6.18 .2', 'Linux Kernel 2.6.16 .27', 'Linux Kernel 2.6.16 .53', 'Linux Kernel 2.6.16 .52', 'Linux Kernel 2.6.16 .51', 'Linux Kernel 2.6.16 .50', 'Linux Kernel 2.6.16 .49', 'Linux Kernel 2.6.16 .48', 'Linux Kernel 2.6.16 .47', 'Linux Kernel 2.6.16 .46', 'Linux Kernel 2.6.16 .45', 'Linux Kernel 2.6.16 .44', 'Linux Kernel 2.6.16 .43', 'Linux Kernel 2.6.16 .41', 'Linux Kernel 2.6.16 .40', 'Linux Kernel 2.6.16 .39', 'Linux Kernel 2.6.16 .38', 'Linux Kernel 2.6.16 .37', 'Linux Kernel 2.6.16 .36', 'Linux Kernel 2.6.16 .35', 'Linux Kernel 2.6.16 .34', 'Linux Kernel 2.6.16 .33', 'Linux Kernel 2.6.16 .32', 'Linux Kernel 2.6.16 .31', 'Linux Kernel 2.6.16 .30', 'Linux Kernel 2.6.16 .29', 'Linux Kernel 2.6.16 .28', 'Linux Kernel 2.6.16 .25', 'Linux Kernel 2.6.16 .24', 'Linux Kernel 2.6.16 .22', 'Linux Kernel 2.6.15 .7', 'Linux Kernel 2.6.15 .6', 'Linux Kernel 2.6.15 .4', 'Linux Kernel 2.6.14 .6', 'Linux Kernel 2.6.14 .7', 'Linux Kernel 2.6.13 .5', 'Linux Kernel 2.6.20-2', 'Linux Kernel 2.6.14.1', 'Linux kernel 3.1.8', 'Linux kernel 3.0.5', 'Linux kernel 3.0.2', 'Linux kernel 3.3.4', 'Linux kernel 3.3.2', 'Linux kernel 3.3.5', 'Linux Kernel 3.8', 'Linux Kernel 3.9.4', 'Linux Kernel 3.0.18', 'Linux Kernel 4.2', 'Linux Kernel 4.4']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "93929"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-9083"
    }
  },
  "description": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002 \r\n\r\nLinux Kernel\u5b58\u5728\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u5e94\u7528\u7a0b\u5e8f\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u4e5f\u53ef\u80fd\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Vlad Tsyrklevich",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://seclists.org/oss-sec/2016/q4/251",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-10522",
  "openTime": "2016-11-02",
  "patchDescription": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u53d1\u5e03\u7684\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002 \r\n\r\nLinux Kernel\u5b58\u5728\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u5e94\u7528\u7a0b\u5e8f\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u4e5f\u53ef\u80fd\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Linux Kernel\u672c\u5730\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Linux Kernel 3.0.4",
      "Linux Kernel 3.0.1",
      "Linux Kernel 2.6.20 .6",
      "Linux Kernel 2.6.20 .7",
      "Linux Kernel 3.0-rc1",
      "Linux Kernel 2.6.13.1",
      "Linux Kernel 2.6.12.6",
      "Linux Kernel 2.6.12.5",
      "Linux Kernel 2.6.12.4",
      "Linux Kernel 2.6.12.3",
      "Linux Kernel 2.6.12.2",
      "Linux Kernel 2.6.12.1",
      "Linux Kernel 2.6.14.3",
      "Linux Kernel 2.6.14.2",
      "Linux Kernel 2.6.15.4",
      "Linux Kernel 2.6.15 .1",
      "Linux Kernel 2.6.15 .2",
      "Linux Kernel 2.6.15 .3",
      "Linux Kernel 2.6.21 .1",
      "Linux Kernel 2.6.21 .2",
      "Linux Kernel 2.6.21 .3",
      "Linux Kernel 2.6.21 .6",
      "Linux Kernel 2.6.21 .7",
      "Linux Kernel 2.6.21 4",
      "Linux Kernel 2.6.20.3",
      "Linux Kernel 2.6.20.2",
      "Linux Kernel 2.6.15-27.48",
      "Linux Kernel 2.6.15.11",
      "Linux Kernel 2.6.18",
      "Linux Kernel 2.6.18-53",
      "Linux Kernel 2.6.20.11",
      "Linux Kernel 2.6.20.13",
      "Linux Kernel 2.6",
      "Linux Kernel 2.6.1",
      "Linux Kernel 2.6.2",
      "Linux Kernel 2.6.10",
      "Linux Kernel 2.6.13.2",
      "Linux Kernel 2.6.13.3",
      "Linux Kernel 2.6.13.4",
      "Linux Kernel 2.6.13",
      "Linux Kernel 2.6.14",
      "Linux Kernel 2.6.15",
      "Linux Kernel 2.6.16",
      "Linux Kernel 2.6.18.1",
      "Linux Kernel 2.6.20",
      "Linux Kernel 2.6.15.5",
      "Linux Kernel 2.6.20 .14",
      "Linux Kernel 2.6.20 .12",
      "Linux Kernel 2.6.20 .10",
      "Linux Kernel 2.6.19",
      "Linux Kernel 2.6.18 .8",
      "Linux Kernel 2.6.18 .7",
      "Linux Kernel 2.6.18 .6",
      "Linux Kernel 2.6.18 .5",
      "Linux Kernel 2.6.18 .2",
      "Linux Kernel 2.6.16 .27",
      "Linux Kernel 2.6.16 .53",
      "Linux Kernel 2.6.16 .52",
      "Linux Kernel 2.6.16 .51",
      "Linux Kernel 2.6.16 .50",
      "Linux Kernel 2.6.16 .49",
      "Linux Kernel 2.6.16 .48",
      "Linux Kernel 2.6.16 .47",
      "Linux Kernel 2.6.16 .46",
      "Linux Kernel 2.6.16 .45",
      "Linux Kernel 2.6.16 .44",
      "Linux Kernel 2.6.16 .43",
      "Linux Kernel 2.6.16 .41",
      "Linux Kernel 2.6.16 .40",
      "Linux Kernel 2.6.16 .39",
      "Linux Kernel 2.6.16 .38",
      "Linux Kernel 2.6.16 .37",
      "Linux Kernel 2.6.16 .36",
      "Linux Kernel 2.6.16 .35",
      "Linux Kernel 2.6.16 .34",
      "Linux Kernel 2.6.16 .33",
      "Linux Kernel 2.6.16 .32",
      "Linux Kernel 2.6.16 .31",
      "Linux Kernel 2.6.16 .30",
      "Linux Kernel 2.6.16 .29",
      "Linux Kernel 2.6.16 .28",
      "Linux Kernel 2.6.16 .25",
      "Linux Kernel 2.6.16 .24",
      "Linux Kernel 2.6.16 .22",
      "Linux Kernel 2.6.15 .7",
      "Linux Kernel 2.6.15 .6",
      "Linux Kernel 2.6.15 .4",
      "Linux Kernel 2.6.14 .6",
      "Linux Kernel 2.6.14 .7",
      "Linux Kernel 2.6.13 .5",
      "Linux Kernel 2.6.20-2",
      "Linux Kernel 2.6.14.1",
      "Linux kernel 3.1.8",
      "Linux kernel 3.0.5",
      "Linux kernel 3.0.2",
      "Linux kernel 3.3.4",
      "Linux kernel 3.3.2",
      "Linux kernel 3.3.5",
      "Linux Kernel 3.8",
      "Linux Kernel 3.9.4",
      "Linux Kernel 3.0.18",
      "Linux Kernel 4.2",
      "Linux Kernel 4.4"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/93929",
  "serverity": "\u4e2d",
  "submitTime": "2016-11-02",
  "title": "Linux Kernel\u672c\u5730\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e"
}

CVE-2016-9083 (GCVE-0-2016-9083)

Vulnerability from cvelistv5

Published

2016-11-28 03:01

Modified

2024-08-06 02:42

Severity ?

CWE

Summary

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2016/10/26/11	mailing-list, x_refsource_MLIST
	https://patchwork.kernel.org/patch/9373631/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0387.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1389258	x_refsource_CONFIRM
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a	x_refsource_CONFIRM
	https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0386.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/93929	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:42:10.488Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20161027 kernel: low-severity vfio driver integer overflow",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/26/11"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/9373631/"
          },
          {
            "name": "RHSA-2017:0387",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0387.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389258"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a"
          },
          {
            "name": "RHSA-2017:0386",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0386.html"
          },
          {
            "name": "93929",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93929"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a \"state machine confusion bug.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20161027 kernel: low-severity vfio driver integer overflow",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/26/11"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://patchwork.kernel.org/patch/9373631/"
        },
        {
          "name": "RHSA-2017:0387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0387.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389258"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a"
        },
        {
          "name": "RHSA-2017:0386",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0386.html"
        },
        {
          "name": "93929",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93929"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9083",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a \"state machine confusion bug.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20161027 kernel: low-severity vfio driver integer overflow",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/10/26/11"
            },
            {
              "name": "https://patchwork.kernel.org/patch/9373631/",
              "refsource": "CONFIRM",
              "url": "https://patchwork.kernel.org/patch/9373631/"
            },
            {
              "name": "RHSA-2017:0387",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0387.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1389258",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1389258"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a",
              "refsource": "CONFIRM",
              "url": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a"
            },
            {
              "name": "RHSA-2017:0386",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0386.html"
            },
            {
              "name": "93929",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93929"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9083",
    "datePublished": "2016-11-28T03:01:00",
    "dateReserved": "2016-10-27T00:00:00",
    "dateUpdated": "2024-08-06T02:42:10.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted