CVE-2016-3070
published 2016-08-06CVE-2016-3070: The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which…
PriorityP430high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.41%
34.2th percentile
The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 4.4.2-1 (bookworm) | linux 4.4.2-1 (bookworm) |
| linux | linux_kernel | <= 4.3.6 | — |
| linux | linux_kernel | >= 0 < 4.4.2-1 | 4.4.2-1 |
| linux | linux_kernel | >= 0 < 4.4.2-1 | 4.4.2-1 |
| linux | linux_kernel | >= 0 < 4.4.2-1 | 4.4.2-1 |
| linux | linux_kernel | >= 0 < 4.4.2-1 | 4.4.2-1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerability
vendor_ubuntu·2016-07-14
CVE-2016-3070 Linux kernel vulnerability
Title: Linux kernel vulnerability
Summary: The system could be made to crash under certain conditions.
Jan Stancek discovered that the Linux kernel's memory manager did not
properly handle moving pages mapped by the asynchronous I/O (AIO) ring
buffer to the other nodes. A local attacker could use this to cause a
denial of service (system crash).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
lin
Ubuntu
Linux kernel (Raspberry Pi 2) vulnerability
vendor_ubuntu·2016-07-14
CVE-2016-3070 Linux kernel (Raspberry Pi 2) vulnerability
Title: Linux kernel (Raspberry Pi 2) vulnerability
Summary: The system could be made to crash under certain conditions.
Jan Stancek discovered that the Linux kernel's memory manager did not
properly handle moving pages mapped by the asynchronous I/O (AIO) ring
buffer to the other nodes. A local attacker could use this to cause a
denial of service (system crash).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, l
Ubuntu
Linux kernel (Utopic HWE) vulnerability
vendor_ubuntu·2016-07-14
CVE-2016-3070 Linux kernel (Utopic HWE) vulnerability
Title: Linux kernel (Utopic HWE) vulnerability
Summary: The system could be made to crash under certain conditions.
Jan Stancek discovered that the Linux kernel's memory manager did not
properly handle moving pages mapped by the asynchronous I/O (AIO) ring
buffer to the other nodes. A local attacker could use this to cause a
denial of service (system crash).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux
Ubuntu
Linux kernel (Trusty HWE) vulnerability
vendor_ubuntu·2016-07-14
CVE-2016-3070 Linux kernel (Trusty HWE) vulnerability
Title: Linux kernel (Trusty HWE) vulnerability
Summary: The system could be made to crash under certain conditions.
USN-3034-1 fixed a vulnerability in the Linux kernel for Ubuntu 14.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu
12.04 LTS.
Jan Stancek discovered that the Linux kernel's memory manager did not
properly handle moving pages mapped by the asynchronous I/O (AIO) ring
buffer to the other nodes. A local attacker could use this to cause a
denial of service (system crash).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which r
Ubuntu
Linux kernel (Vivid HWE) vulnerability
vendor_ubuntu·2016-07-14
CVE-2016-3070 Linux kernel (Vivid HWE) vulnerability
Title: Linux kernel (Vivid HWE) vulnerability
Summary: The system could be made to crash under certain conditions.
Jan Stancek discovered that the Linux kernel's memory manager did not
properly handle moving pages mapped by the asynchronous I/O (AIO) ring
buffer to the other nodes. A local attacker could use this to cause a
denial of service (system crash).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-
Ubuntu
Linux kernel (Wily HWE) vulnerability
vendor_ubuntu·2016-07-14
CVE-2016-3070 Linux kernel (Wily HWE) vulnerability
Title: Linux kernel (Wily HWE) vulnerability
Summary: The system could be made to crash under certain conditions.
USN-3035-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10.
This update provides the corresponding updates for the Linux Hardware
Enablement (HWE) kernel from Ubuntu 15.10 for Ubuntu 14.04 LTS.
Jan Stancek discovered that the Linux kernel's memory manager did not
properly handle moving pages mapped by the asynchronous I/O (AIO) ring
buffer to the other nodes. A local attacker could use this to cause a
denial of service (system crash).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires yo
Red Hat
kernel: Null pointer dereference in trace_writeback_dirty_page()
vendor_redhat·2016-05-10·CVSS 7.8
CVE-2016-3070 [HIGH] CWE-476 kernel: Null pointer dereference in trace_writeback_dirty_page()
kernel: Null pointer dereference in trace_writeback_dirty_page()
The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
A security flaw was found in the Linux kernel that an attempt to move page mapped by AIO ring buffer to the other node triggers NULL pointer dereference at trace_writeback_dirty_page(), because aio_fs_backing_dev_info.dev is 0.
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 as the code with the flaw is not present in the products listed.
T
Debian
CVE-2016-3070: linux - The trace_writeback_dirty_page implementation in include/trace/events/writeback....
vendor_debian·2016·CVSS 7.8
CVE-2016-3070 [HIGH] CVE-2016-3070: linux - The trace_writeback_dirty_page implementation in include/trace/events/writeback....
The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
Scope: local
bookworm: resolved (fixed in 4.4.2-1)
bullseye: resolved (fixed in 4.4.2-1)
forky: resolved (fixed in 4.4.2-1)
sid: resolved (fixed in 4.4.2-1)
trixie: resolved (fixed in 4.4.2-1)
GHSA
GHSA-7ccr-wgh4-75wx: The trace_writeback_dirty_page implementation in include/trace/events/writeback
ghsa_unreviewed·2022-05-14
CVE-2016-3070 [HIGH] CWE-476 GHSA-7ccr-wgh4-75wx: The trace_writeback_dirty_page implementation in include/trace/events/writeback
The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
OSV
linux-lts-xenial vulnerabilities
osv·2016-08-30·CVSS 5.5
CVE-2016-1237 linux-lts-xenial vulnerabilities
linux-lts-xenial vulnerabilities
USN-3070-1 fixed vulnerabilities in the Linux kernel for Ubuntu
16.04 LTS. This update provides the corresponding updates for the
Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for
Ubuntu 14.04 LTS.
A missing permission check when settings ACLs was discovered in nfsd. A
local user could exploit this flaw to gain access to any file by setting an
ACL. (CVE-2016-1237)
Kangjie Lu discovered an information leak in the Reliable Datagram Sockets
(RDS) implementation in the Linux kernel. A local attacker could use this
to obtain potentially sensitive information from kernel memory.
(CVE-2016-5244)
James Patrick-Evans discovered that the airspy USB device driver in the
Linux kernel did not properly handle certain error conditions. An attacker
with
OSV
CVE-2016-3070: The trace_writeback_dirty_page implementation in include/trace/events/writeback
osv·2016-08-06·CVSS 7.8
CVE-2016-3070 [HIGH] CVE-2016-3070: The trace_writeback_dirty_page implementation in include/trace/events/writeback
The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
No detection rules found.
No public exploits indexed.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=42cb14b110a5698ccf26ce59c4441722605a3743http://rhn.redhat.com/errata/RHSA-2016-2574.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2584.htmlhttp://www.debian.org/security/2016/dsa-3607http://www.securityfocus.com/bid/90518http://www.ubuntu.com/usn/USN-3034-1http://www.ubuntu.com/usn/USN-3034-2http://www.ubuntu.com/usn/USN-3035-1http://www.ubuntu.com/usn/USN-3035-2http://www.ubuntu.com/usn/USN-3035-3http://www.ubuntu.com/usn/USN-3036-1http://www.ubuntu.com/usn/USN-3037-1https://bugzilla.redhat.com/show_bug.cgi?id=1308846https://github.com/torvalds/linux/commit/42cb14b110a5698ccf26ce59c4441722605a3743https://security-tracker.debian.org/tracker/CVE-2016-3070http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=42cb14b110a5698ccf26ce59c4441722605a3743http://rhn.redhat.com/errata/RHSA-2016-2574.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2584.htmlhttp://www.debian.org/security/2016/dsa-3607http://www.securityfocus.com/bid/90518http://www.ubuntu.com/usn/USN-3034-1http://www.ubuntu.com/usn/USN-3034-2http://www.ubuntu.com/usn/USN-3035-1http://www.ubuntu.com/usn/USN-3035-2http://www.ubuntu.com/usn/USN-3035-3http://www.ubuntu.com/usn/USN-3036-1http://www.ubuntu.com/usn/USN-3037-1https://bugzilla.redhat.com/show_bug.cgi?id=1308846https://github.com/torvalds/linux/commit/42cb14b110a5698ccf26ce59c4441722605a3743https://security-tracker.debian.org/tracker/CVE-2016-3070
2016-08-06
Published