Summaryinfo

A vulnerability, which was classified as critical, has been found in Linux Kernel 3.x. This vulnerability affects the function msm_ipc_router_bind_control_port of the file net/ipc_router/ipc_router_core.c of the component IPC router kernel Module. The manipulation leads to race condition. This vulnerability is referenced as CVE-2016-2059. The attack can only be performed from a local environment. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Linux Kernel 3.x (Operating System). It has been rated as critical. This issue affects the function msm_ipc_router_bind_control_port of the file net/ipc_router/ipc_router_core.c of the component IPC router kernel Module. The manipulation with an unknown input leads to a race condition vulnerability. Using CWE to declare the problem leads to CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows attackers to gain privileges or cause a denial of service (race condition and list corruption) by making many BIND_CONTROL_PORT ioctl calls.

The weakness was published 05/05/2016 (Website). It is possible to read the advisory at codeaurora.org. The identification of this vulnerability is CVE-2016-2059 since 01/25/2016. Attacking locally is a requirement. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 90230†). Similar entries are available at VDB-90675, VDB-90618, VDB-90676 and VDB-91000. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 3.x

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion