CVE-2016-3135: Integer Overflow
An integer overflow vulnerability was found in xtalloctableinfo, which on 32-bit systems can lead to small structure allocation and a copyfromuser based heap corruption.
Proposed fix:
patch v1 message: http://marc.info/?l=netfilter-devel&m=145757136822750&w=2 patch v1 thread: http://marc.info/?t=145757149700001&r=1&w=2
patch v2 message: http://marc.info/?l=netfilter-devel&m=145800533813758&w=2 (in netfilter-devel) patch v2 message: http://marc.info/?l=linux-netdev&m=145800538413781&w=2 (in linux-netdev)
CVE request and assignment:
http://seclists.org/oss-sec/2016/q1/581 http://seclists.org/oss-sec/2016/q1/619
Other sources
Integer overflow in the xtalloctableinfo function in net/netfilter/xtables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPTSOSETREPLACE setsockopt call.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2016-3135?
CVE-2016-3135 is a vulnerability in the Linux kernel that allows local users to gain privileges or cause a denial of service.
How severe is CVE-2016-3135?
CVE-2016-3135 has a low severity rating.
What is the affected software?
The affected software includes Linux kernel versions 4.2.0-34.39, 4.4.0-34.53, and 4.6~.
How can I fix CVE-2016-3135?
To fix CVE-2016-3135, update your Linux kernel to version 4.2.0-34.39 or higher.
Where can I find more information about CVE-2016-3135?
You can find more information about CVE-2016-3135 at the following references: [Google Security Research](https://code.google.com/p/google-security-research/issues/detail?id=758), [Linux kernel commit](http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d157bd761585605b7882935ffb86286919f62ea1), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1317386).