CVE-2016-8650 in Linux Kernel
摘要 (英语)
The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
预定
2016-10-12
披露
2016-11-27
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 93846 | Linux Kernel mpi-pow.c mpi_powm 权限提升 | 20 | 未定义 | 官方修复 | CVE-2016-8650 |