CVE-2016-10088: Use After Free
It was found that the fix for CVE-2016-9576 was incomplete: the Linux kernel's sg implementation did not properly restrict write operations in situations where the KERNELDS option is set. A local attacker to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging write access to a /dev/sg device.
Other sources
The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNELDS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2016-10088?
CVE-2016-10088 is a vulnerability in the Linux kernel that allows local users to read or write to arbitrary kernel memory locations or cause a denial of service.
How severe is CVE-2016-10088?
CVE-2016-10088 has a severity rating of high.
What software is affected by CVE-2016-10088?
The Linux kernel versions up to 4.9 are affected by CVE-2016-10088.
How can I fix CVE-2016-10088?
To fix CVE-2016-10088, update your Linux kernel to version 4.10 or higher.
Where can I find more information about CVE-2016-10088?
You can find more information about CVE-2016-10088 at the following references: [link1], [link2], [link3].