CVE-2016-6787
published 2016-12-28CVE-2016-6787: kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain…
PriorityP430high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.43%
35.3th percentile
kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.0.2-1 (bookworm) | linux 4.0.2-1 (bookworm) |
| android | — | — | |
| linux | linux_kernel | < 3.2.85 | 3.2.85 |
| linux | linux_kernel | >= 0 < 4.0.2-1 | 4.0.2-1 |
| linux | linux_kernel | >= 0 < 4.0.2-1 | 4.0.2-1 |
| linux | linux_kernel | >= 0 < 4.0.2-1 | 4.0.2-1 |
| linux | linux_kernel | >= 0 < 4.0.2-1 | 4.0.2-1 |
| linux | linux_kernel | >= 3.17 < 3.18.54 | 3.18.54 |
| linux | linux_kernel | >= 3.19 < 4.0 | 4.0 |
| linux | linux_kernel | >= 3.3 < 3.16.40 | 3.16.40 |
CVSS provenance
nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv7.0HIGH
vendor_debian7.0HIGH
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p6gf-fgwx-j2gv: kernel/events/core
ghsa_unreviewed·2022-05-17
CVE-2016-6787 [HIGH] GHSA-p6gf-fgwx-j2gv: kernel/events/core
kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.
OSV
CVE-2016-6787: kernel/events/core
osv·2016-12-28·CVSS 7.0
CVE-2016-6787 [HIGH] CVE-2016-6787: kernel/events/core
kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.
Android
CVE-2016-6787: Android Security Bulletin 2016-12-01
CVE: CVE-2016-6787
Severity: HIGH
References: A-31095224
Upstream kernel
vendor_android·2016-12-01·CVSS 7.0
CVE-2016-6787 [HIGH] CVE-2016-6787: Android Security Bulletin 2016-12-01
CVE: CVE-2016-6787
Severity: HIGH
References: A-31095224
Upstream kernel
Android Security Bulletin 2016-12-01
CVE: CVE-2016-6787
Severity: HIGH
References: A-31095224
Upstream kernel
Debian
CVE-2016-6787: linux - kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0...
vendor_debian·2016·CVSS 7.0
CVE-2016-6787 [HIGH] CVE-2016-6787: linux - kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0...
kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.
Scope: local
bookworm: resolved (fixed in 4.0.2-1)
bullseye: resolved (fixed in 4.0.2-1)
forky: resolved (fixed in 4.0.2-1)
sid: resolved (fixed in 4.0.2-1)
trixie: resolved (fixed in 4.0.2-1)
Red Hat
kernel: Possible privilege escalation due to lack of locking around changing event->ctx
vendor_redhat·2015-02-04·CVSS 7.0
CVE-2016-6787 [HIGH] CWE-667 kernel: Possible privilege escalation due to lack of locking around changing event->ctx
kernel: Possible privilege escalation due to lack of locking around changing event->ctx
kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG-2 as the flaw was already fixed in the products listed.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: realtime-kernel (Red Hat E
No detection rules found.
No public exploits indexed.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2bhttp://source.android.com/security/bulletin/2016-12-01.htmlhttp://www.debian.org/security/2017/dsa-3791http://www.securityfocus.com/bid/94679https://bugzilla.redhat.com/show_bug.cgi?id=1403842https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2bhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2bhttp://source.android.com/security/bulletin/2016-12-01.htmlhttp://www.debian.org/security/2017/dsa-3791http://www.securityfocus.com/bid/94679https://bugzilla.redhat.com/show_bug.cgi?id=1403842https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2b
2016-12-28
Published