CVE-2016-9084: Integer Overflow
drivers/vfio/pci/vfiopciintrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging access to a vfio PCI device file.
Other sources
The use of a kzalloc with an integer multiplication allowed an integer overflow condition to be reached in vfiopciintrs.c. This combined with CVE-2016-9083 may allow an attacker to craft an attack and use unallocated memory, potentially crashing the machine. This issue is related to CVE-2016-9083 (bugzilla.redhat.com/CVE-2016-9083 )
Proposed patch:
https://patchwork.kernel.org/patch/9373631/
CVE assignment:
http://seclists.org/oss-sec/2016/q4/251
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2016-9084.
What is the severity of CVE-2016-9084?
The severity of CVE-2016-9084 is medium.
How does CVE-2016-9084 affect Linux kernel versions?
CVE-2016-9084 affects Linux kernel versions through 4.8.11.
How can CVE-2016-9084 be exploited?
CVE-2016-9084 can be exploited by local users with access to a vfio PCI device file.
What is the fix for CVE-2016-9084?
The fix for CVE-2016-9084 is to upgrade to Linux kernel versions 3.13.0-132.181, 4.4.0-79.100, 4.9~, or a higher version.