CVE-2016-4569 in Google Android

Summary

The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.

Reservation

05/09/2016

Disclosure

05/23/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
90553	Google Android Kernel Sound information disclosure	200	Not defined	Official fix	CVE-2016-4569
87608	Linux Kernel ALSA Timer timer.c snd_timer_user_params information disclosure	200	Not defined	Official fix	CVE-2016-4569