CVE-2016-4485: Infoleak
An information leak vulnerability in [llc] module was found in "net/llc/afllc.c". The stack object "info" has a total size of 12 bytes. Its last byte is padding which is not initialized and leaked via putcmsg().
Public via:
http://marc.info/?l=linux-kernel&m=146230753506235&w=2
http://marc.info/?l=linux-netdev&m=146230754406241&w=2
CVE-ID request and assignment:
http://seclists.org/oss-sec/2016/q2/233
http://seclists.org/oss-sec/2016/q2/236
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=b8670c09f37bdf2847cc44f36511a53afc6161fd
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b8670c09f37bdf2847cc44f36511a53afc6161fd
Other sources
The llccmsgrcv function in net/llc/afllc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4485?
CVE-2016-4485 is classified as a medium severity information leak vulnerability.
How do I fix CVE-2016-4485?
To mitigate CVE-2016-4485, update your Linux kernel to version 4.5.5 or later.
Which software versions are affected by CVE-2016-4485?
CVE-2016-4485 affects various versions of SUSE Linux Enterprise and Ubuntu Linux including kernel versions up to 4.5.4.
What type of vulnerability is CVE-2016-4485?
CVE-2016-4485 is an information leak vulnerability found in the llc module of the Linux kernel.
Is CVE-2016-4485 able to be exploited remotely?
Yes, CVE-2016-4485 could be exploited by an attacker to read uninitialized memory from the affected system.