CVE-2016-6327 : drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows lo

drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an ABORT_TASK command to abort a device write operation.

Published 2016-10-16 21:59:07

Updated 2023-02-12 23:24:59

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2016-6327

Linux » Linux Kernel
Versions up to, including, (<=) 4.5.0
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2016-6327

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-6327

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2016-6327

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-6327

http://rhn.redhat.com/errata/RHSA-2016-2574.html

RHSA-2016:2574 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
https://github.com/torvalds/linux/commit/51093254bf879bc9ce96590400a87897c7498463

IB/srpt: Simplify srpt_handle_tsk_mgmt() · torvalds/linux@5109325 · GitHub
Patch;Vendor Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1

Vendor Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1354525

1354525 – (CVE-2016-6327) CVE-2016-6327 kernel: infiniband: Kernel crash by sending ABORT_TASK command
Issue Tracking;Third Party Advisory;VDB Entry
http://www.openwall.com/lists/oss-security/2016/08/19/5

oss-security - Re: CVE-2016-6327 | Linux kernel crash in infiniband subsystem.
Third Party Advisory
http://www.securityfocus.com/bid/92549

Linux Kernel CVE-2016-6327 Null Pointer Deference Local Denial of Service Vulnerability
http://rhn.redhat.com/errata/RHSA-2016-2584.html

RHSA-2016:2584 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51093254bf879bc9ce96590400a87897c7498463

kernel/git/torvalds/linux.git - Linux kernel source tree
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2016-6327

Products affected by CVE-2016-6327

Exploit prediction scoring system (EPSS) score for CVE-2016-6327

CVSS scores for CVE-2016-6327

CWE ids for CVE-2016-6327

References for CVE-2016-6327