CVE-2016-9178 in Linux Kernel

摘要 (英语)

The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user_ex call.

预定

2016-11-04

披露

2016-11-27

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
93849	Linux Kernel uaccess.h __get_user_asm_ex 信息公开	200	未定义	官方修复	CVE-2016-9178