Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2016-4578 — Sensitive Information Exposure in Kernel

CWE-200 — Sensitive Information ExposureCWE-665 — Improper Initialization29 documents10 sources
Severity
5.5MEDIUMNVD
OSV6.2
EPSS
0.2%
top 61.31%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
11
Linux KernelCanonical Ubuntu LinuxDebian Linux+8 more
Timeline
PublishedMay 23
Latest updateMay 14

Description

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages8 packages

▶Debianlinux/linux_kernel< 4.5.5-1+3
▶Ubuntulinux/linux_kernel< 3.13.0-91.138+1

Also affects: Debian Linux 8.0, Ubuntu Linux 12.04, 14.04, 15.10, 16.04, Enterprise Linux 7.3, 7.4, 7.6, 7.5

🔴Vulnerability Details

11
GHSA
GHSA-mrgv-56mw-m87g: sound/core/timer↗2022-05-14
▶
OSV
linux-lts-xenial vulnerabilities↗2016-06-27
▶
OSV
linux vulnerabilities↗2016-06-27
▶
OSV
linux-lts-wily vulnerabilities↗2016-06-27
▶
OSV
linux-snapdragon vulnerabilities↗2016-06-27
▶

💥Exploits & PoCs

1
Exploit-DB
Linux Kernel 4.4 (Ubuntu 16.04) - 'snd_timer_user_ccallback()' Kernel Pointer Leak↗2019-03-11
▶

📋Vendor Advisories

14
Android
CVE-2016-4578: Android Security Bulletin 2016-08-01 CVE: CVE-2016-4578 Severity: MEDIUM References: A-28980217 Upstream kernel [2]↗2016-08-01
▶
Ubuntu
Linux kernel (Wily HWE) vulnerabilities↗2016-06-27
▶
Ubuntu
Linux kernel vulnerabilities↗2016-06-27
▶
Ubuntu
Linux kernel (Vivid HWE) vulnerabilities↗2016-06-27
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2016-06-27
▶

💬Community

2
Bugzilla
CVE-2016-4578 kernel: Information leak in events in timer.c↗2016-05-11
▶
Bugzilla
CVE-2016-4569 kernel: Information leak in Linux sound module in timer.c↗2016-05-10
▶
CVE-2016-4578 — Sensitive Information Exposure | cvebase