CVE-2016-9644 | BDVDB-2026-79448 Detail

Description#

The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows local users to obtain root access on non-SMEP platforms via a crafted application. NOTE: this vulnerability exists because of incorrect backporting of the CVE-2016-9178 patch to older kernels.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.ubuntu.com/usn/USN-3146-2
http://www.securityfocus.com/bid/94545
http://www.ubuntu.com/usn/USN-3146-1
http://www.openwall.com/lists/oss-security/2016/11/07/4
https://lwn.net/Articles/705220/

Exploit#

No public exploit known

History#

Version 12016-11-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.