Vulnerability Details : CVE-2016-3070
The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
Vulnerability category: Memory CorruptionDenial of service
Products affected by CVE-2016-3070
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-3070
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 8 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-3070
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
7.8
|
HIGH | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2016-3070
-
The product dereferences a pointer that it expects to be valid but is NULL.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-3070
-
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=42cb14b110a5698ccf26ce59c4441722605a3743
kernel/git/torvalds/linux.git - Linux kernel source treeIssue Tracking;Patch
-
https://bugzilla.redhat.com/show_bug.cgi?id=1308846
1308846 – (CVE-2016-3070) CVE-2016-3070 kernel: Null pointer dereference in trace_writeback_dirty_page()Issue Tracking
-
https://github.com/torvalds/linux/commit/42cb14b110a5698ccf26ce59c4441722605a3743
mm: migrate dirty page without clear_page_dirty_for_io etc · torvalds/linux@42cb14b · GitHubIssue Tracking;Patch
-
http://rhn.redhat.com/errata/RHSA-2016-2574.html
RHSA-2016:2574 - Security Advisory - Red Hat Customer Portal
-
https://security-tracker.debian.org/tracker/CVE-2016-3070
CVE-2016-3070Third Party Advisory
-
http://www.ubuntu.com/usn/USN-3036-1
USN-3036-1: Linux kernel (Utopic HWE) vulnerability | Ubuntu security notices
-
http://www.ubuntu.com/usn/USN-3034-2
USN-3034-2: Linux kernel (Trusty HWE) vulnerability | Ubuntu security notices
-
http://www.ubuntu.com/usn/USN-3035-1
USN-3035-1: Linux kernel vulnerability | Ubuntu security notices
-
http://www.ubuntu.com/usn/USN-3035-2
USN-3035-2: Linux kernel (Raspberry Pi 2) vulnerability | Ubuntu security notices
-
http://www.ubuntu.com/usn/USN-3034-1
USN-3034-1: Linux kernel vulnerability | Ubuntu security notices
-
http://www.ubuntu.com/usn/USN-3037-1
USN-3037-1: Linux kernel (Vivid HWE) vulnerability | Ubuntu security notices
-
http://www.securityfocus.com/bid/90518
Linux Kernel 'migrate.c' Null Pointer Deference Local Denial of Service Vulnerability
-
http://rhn.redhat.com/errata/RHSA-2016-2584.html
RHSA-2016:2584 - Security Advisory - Red Hat Customer Portal
-
http://www.debian.org/security/2016/dsa-3607
Debian -- Security Information -- DSA-3607-1 linux
-
http://www.ubuntu.com/usn/USN-3035-3
USN-3035-3: Linux kernel (Wily HWE) vulnerability | Ubuntu security notices
Jump to