Design/Logic Flaw

2017-01-0511:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculations, which allows local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file.

CPENameOperatorVersion
linux_kerneleq4.6
linux_kernelge3.5
linux_kernellt3.10.102
linux_kernelge3.11
linux_kernellt3.12.61
linux_kernelge3.15
linux_kernellt3.16.37
linux_kernelge4.5
linux_kernellt4.5.6
linux_kernelge3.13

Name	Operator	Version
linux_kernel	eq	4.6
linux_kernel	ge	3.5
linux_kernel	lt	3.10.102
linux_kernel	ge	3.11
linux_kernel	lt	3.12.61
linux_kernel	ge	3.15
linux_kernel	lt	3.16.37
linux_kernel	ge	4.5
linux_kernel	lt	4.5.6
linux_kernel	ge	3.13