CVE-2016-4482: Infoleak
Last updated 24 July 2024
Other sources
The procconnectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFSCONNECTINFO ioctl call.
— Launchpad
The procconnectinfo() function in 'drivers/usb/core/devio.c' in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFSCONNECTINFO ioctl call. The stack object 'ci' has a total size of 8 bytes. Its last 3 bytes are padding bytes which are not initialized and are leaked to userland.
External references:
http://www.spinics.net/lists/linux-usb/msg140243.html
CVE-ID request and assignment:
http://seclists.org/oss-sec/2016/q2/209
http://seclists.org/oss-sec/2016/q2/213
Upstream fix:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=681fef8380eb818c0b845fca5d2ab1dcbab114ee
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4482?
The severity of CVE-2016-4482 is considered to be medium due to its potential to expose sensitive information from the kernel stack.
How do I fix CVE-2016-4482?
To fix CVE-2016-4482, update to a patched version of the Linux kernel, specifically version 5.10.223-1 or higher.
Which Linux versions are affected by CVE-2016-4482?
CVE-2016-4482 affects Linux kernel versions up to and including 4.6 as well as several Ubuntu and SUSE Linux distributions.
What type of vulnerability is CVE-2016-4482?
CVE-2016-4482 is a local privilege escalation vulnerability that allows unauthorized access to sensitive kernel memory.
Can CVE-2016-4482 be exploited remotely?
CVE-2016-4482 cannot be exploited remotely as it requires local access to the machine.