CVE-2016-7916
published 2016-11-16CVE-2016-7916: Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel…
PriorityP420medium5.5CVSS 3.0
AVLACLPRNUIRSUCHINAN
EPSS
0.39%
31.5th percentile
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.5.4-1 (bookworm) | linux 4.5.4-1 (bookworm) |
| android | — | — | |
| linux | linux_kernel | <= 4.5.3 | — |
| linux | linux_kernel | >= 0 < 4.5.4-1 | 4.5.4-1 |
| linux | linux_kernel | >= 0 < 4.5.4-1 | 4.5.4-1 |
| linux | linux_kernel | >= 0 < 4.5.4-1 | 4.5.4-1 |
| linux | linux_kernel | >= 0 < 4.5.4-1 | 4.5.4-1 |
| linux | linux_kernel | >= 0 < 3.13.0-106.153 | 3.13.0-106.153 |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.7MEDIUMAV:L/AC:M/Au:N/C:C/I:N/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2016-12-20·CVSS 4.7
CVE-2016-6213 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the kernel.
CAI Qian discovered that shared bind mounts in a mount namespace
exponentially added entries without restriction to the Linux kernel's mount
table. A local attacker could use this to cause a denial of service (system
crash). (CVE-2016-6213)
It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2016-7916)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requ
Ubuntu
Linux kernel vulnerability
vendor_ubuntu·2016-12-20
CVE-2016-7916 Linux kernel vulnerability
Title: Linux kernel vulnerability
Summary: The system could be made to expose sensitive information.
It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard syst
Ubuntu
Linux kernel (OMAP4) vulnerability
vendor_ubuntu·2016-12-20
CVE-2016-7916 Linux kernel (OMAP4) vulnerability
Title: Linux kernel (OMAP4) vulnerability
Summary: The system could be made to expose sensitive information.
It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory).
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a stand
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities
vendor_ubuntu·2016-12-20·CVSS 4.7
CVE-2016-6213 [MEDIUM] Linux kernel (Trusty HWE) vulnerabilities
Title: Linux kernel (Trusty HWE) vulnerabilities
Summary: Several security issues were fixed in the kernel.
USN-3160-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu
12.04 LTS.
CAI Qian discovered that shared bind mounts in a mount namespace
exponentially added entries without restriction to the Linux kernel's mount
table. A local attacker could use this to cause a denial of service (system
crash). (CVE-2016-6213)
It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2016-7916)
Android
CVE-2016-7916: Android Security Bulletin 2016-11-01
CVE: CVE-2016-7916
Severity: HIGH
References: A-30951939
Upstream
kernel
vendor_android·2016-11-01·CVSS 5.5
CVE-2016-7916 [MEDIUM] CVE-2016-7916: Android Security Bulletin 2016-11-01
CVE: CVE-2016-7916
Severity: HIGH
References: A-30951939
Upstream
kernel
Android Security Bulletin 2016-11-01
CVE: CVE-2016-7916
Severity: HIGH
References: A-30951939
Upstream
kernel
Red Hat
kernel: proc: prevent accessing /proc/<pid>/environ until it's ready
vendor_redhat·2016-01-19·CVSS 5.5
CVE-2016-7916 [MEDIUM] CWE-362 kernel: proc: prevent accessing /proc/<pid>/environ until it's ready
kernel: proc: prevent accessing /proc//environ until it's ready
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
Race condition in the environ_read() function in 'fs/proc/base.c' in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a '/proc/*/environ' file during a process-setup time interval in which environment-variable copying is incomplete.
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 as the code with the flaw is not presen
Debian
CVE-2016-7916: linux - Race condition in the environ_read function in fs/proc/base.c in the Linux kerne...
vendor_debian·2016·CVSS 5.5
CVE-2016-7916 [MEDIUM] CVE-2016-7916: linux - Race condition in the environ_read function in fs/proc/base.c in the Linux kerne...
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
Scope: local
bookworm: resolved (fixed in 4.5.4-1)
bullseye: resolved (fixed in 4.5.4-1)
forky: resolved (fixed in 4.5.4-1)
sid: resolved (fixed in 4.5.4-1)
trixie: resolved (fixed in 4.5.4-1)
GHSA
GHSA-4mfv-78wv-cc6j: Race condition in the environ_read function in fs/proc/base
ghsa_unreviewed·2022-05-17
CVE-2016-7916 [MEDIUM] CWE-362 GHSA-4mfv-78wv-cc6j: Race condition in the environ_read function in fs/proc/base
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
OSV
linux vulnerabilities
osv·2016-12-20·CVSS 4.7
CVE-2016-6213 [MEDIUM] linux vulnerabilities
linux vulnerabilities
CAI Qian discovered that shared bind mounts in a mount namespace
exponentially added entries without restriction to the Linux kernel's mount
table. A local attacker could use this to cause a denial of service (system
crash). (CVE-2016-6213)
It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2016-7916)
OSV
CVE-2016-7916: Race condition in the environ_read function in fs/proc/base
osv·2016-11-16·CVSS 5.5
CVE-2016-7916 [MEDIUM] CVE-2016-7916: Race condition in the environ_read function in fs/proc/base
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
No detection rules found.
No public exploits indexed.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8148a73c9901a8794a50f950083c00ccf97d43b3http://source.android.com/security/bulletin/2016-11-01.htmlhttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4http://www.securityfocus.com/bid/94138http://www.ubuntu.com/usn/USN-3159-1http://www.ubuntu.com/usn/USN-3159-2https://bugzilla.kernel.org/show_bug.cgi?id=116461https://forums.grsecurity.net/viewtopic.php?f=3&t=4363https://github.com/torvalds/linux/commit/8148a73c9901a8794a50f950083c00ccf97d43b3http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8148a73c9901a8794a50f950083c00ccf97d43b3http://source.android.com/security/bulletin/2016-11-01.htmlhttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4http://www.securityfocus.com/bid/94138http://www.ubuntu.com/usn/USN-3159-1http://www.ubuntu.com/usn/USN-3159-2https://bugzilla.kernel.org/show_bug.cgi?id=116461https://forums.grsecurity.net/viewtopic.php?f=3&t=4363https://github.com/torvalds/linux/commit/8148a73c9901a8794a50f950083c00ccf97d43b3
2016-11-16
Published