CVE-2016-7912
published 2016-11-16CVE-2016-7912: Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to…
PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
2.11%
79.7th percentile
Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.5.3-1 (bookworm) | linux 4.5.3-1 (bookworm) |
| android | — | — | |
| linux | linux_kernel | >= 0 < 4.5.3-1 | 4.5.3-1 |
| linux | linux_kernel | >= 0 < 4.5.3-1 | 4.5.3-1 |
| linux | linux_kernel | >= 0 < 4.5.3-1 | 4.5.3-1 |
| linux | linux_kernel | >= 0 < 4.5.3-1 | 4.5.3-1 |
| linux | linux_kernel | >= 3.15 < 3.16.40 | 3.16.40 |
| linux | linux_kernel | >= 3.17 < 4.1.24 | 4.1.24 |
| linux | linux_kernel | >= 4.2 < 4.4.9 | 4.4.9 |
| linux | linux_kernel | >= 4.5 < 4.5.3 | 4.5.3 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rcjx-c5rp-m8jj: Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs
ghsa_unreviewed·2022-05-17
CVE-2016-7912 [HIGH] CWE-416 GHSA-rcjx-c5rp-m8jj: Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs
Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.
OSV
CVE-2016-7912: Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs
osv·2016-11-16·CVSS 7.8
CVE-2016-7912 [HIGH] CVE-2016-7912: Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs
Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.
Android
CVE-2016-7912: Android Security Bulletin 2016-11-01
CVE: CVE-2016-7912
Severity: CRITICAL
References: A-30950866
Upstream
kernel
vendor_android·2016-11-01·CVSS 7.8
CVE-2016-7912 [HIGH] CVE-2016-7912: Android Security Bulletin 2016-11-01
CVE: CVE-2016-7912
Severity: CRITICAL
References: A-30950866
Upstream
kernel
Android Security Bulletin 2016-11-01
CVE: CVE-2016-7912
Severity: CRITICAL
References: A-30950866
Upstream
kernel
Red Hat
kernel: media: use-after-free in USB gadget driver
vendor_redhat·2016-04-14·CVSS 7.8
CVE-2016-7912 [HIGH] CWE-416 kernel: media: use-after-free in USB gadget driver
kernel: media: use-after-free in USB gadget driver
Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.
Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG-2 as the
Debian
CVE-2016-7912: linux - Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb...
vendor_debian·2016·CVSS 7.8
CVE-2016-7912 [HIGH] CVE-2016-7912: linux - Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb...
Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.
Scope: local
bookworm: resolved (fixed in 4.5.3-1)
bullseye: resolved (fixed in 4.5.3-1)
forky: resolved (fixed in 4.5.3-1)
sid: resolved (fixed in 4.5.3-1)
trixie: resolved (fixed in 4.5.3-1)
No detection rules found.
No public exploits indexed.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38740a5b87d53ceb89eb2c970150f6e94e00373ahttp://source.android.com/security/bulletin/2016-11-01.htmlhttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3http://www.securityfocus.com/bid/94197https://github.com/torvalds/linux/commit/38740a5b87d53ceb89eb2c970150f6e94e00373ahttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38740a5b87d53ceb89eb2c970150f6e94e00373ahttp://source.android.com/security/bulletin/2016-11-01.htmlhttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3http://www.securityfocus.com/bid/94197https://github.com/torvalds/linux/commit/38740a5b87d53ceb89eb2c970150f6e94e00373a
2016-11-16
Published