CVE-2016-4470 in Google Android

Resumen (Inglés)

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

Reservar

2016-05-02

Divulgación

2016-06-27

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
91441	Google Android Kernel Security desbordamiento de búfer	416	No está definido	Arreglo oficial	CVE-2016-4470
88374	Linux Kernel key.c key_reject_and_link desbordamiento de búfer	416	Prueba de concepto	Arreglo oficial	CVE-2016-4470