CVE-2016-4581: Null Pointer Dereference
fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.
Other sources
It was reported that when first propagated copy is a slave, it causes kernel oops. This oops happens with the namespacesem held and can be triggered by non-root users.
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5ec0811d30378ae104f250bfc9b3640242d81e3f
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2016-4581.
What is the severity of CVE-2016-4581?
The severity of CVE-2016-4581 is medium.
What is the affected software?
The affected software versions include Linux kernel 3.13.0-87.133, 4.2.0-38.45, 4.4.0-24.43, and 4.6~.
How can I fix CVE-2016-4581?
To fix CVE-2016-4581, update your Linux kernel to version 4.5.4 or later.
Where can I find more information about CVE-2016-4581?
You can find more information about CVE-2016-4581 in the references: [1](https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5ec0811d30378ae104f250bfc9b3640242d81e3f), [2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1333713), [3](http://seclists.org/oss-sec/2016/q2/313).