CVE-2016-8636
published 2017-02-22CVE-2016-8636: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial…
PriorityP335high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
1.15%
63.8th percentile
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.9.10-1 (bookworm) | linux 4.9.10-1 (bookworm) |
| linux | linux_kernel | >= 0 < 4.9.10-1 | 4.9.10-1 |
| linux | linux_kernel | >= 0 < 4.9.10-1 | 4.9.10-1 |
| linux | linux_kernel | >= 0 < 4.9.10-1 | 4.9.10-1 |
| linux | linux_kernel | >= 0 < 4.9.10-1 | 4.9.10-1 |
| linux | linux_kernel | >= 4.8 < 4.9.10 | 4.9.10 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel (HWE) vulnerabilities
vendor_ubuntu·2017-07-21·CVSS 5.5
CVE-2015-1350 [MEDIUM] Linux kernel (HWE) vulnerabilities
Title: Linux kernel (HWE) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
USN-3358-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04.
This update provides the corresponding updates for the Linux Hardware
Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Please
note that this update changes the Linux HWE kernel to the 4.10 based
kernel from Ubuntu 17.04, superseding the 4.8 based HWE kernel from
Ubuntu 16.10.
Ben Harris discovered that the Linux kernel would strip extended privilege
attributes of files when performing a failed unprivileged system call. A
local attacker could use this to cause a denial of service. (CVE-2015-1350)
Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel
did not properly validate
Red Hat
kernel: Integer overflow in the RDMA over infiniband software implementation
vendor_redhat·2017-02-07·CVSS 7.8
CVE-2016-8636 [HIGH] CWE-190 kernel: Integer overflow in the RDMA over infiniband software implementation
kernel: Integer overflow in the RDMA over infiniband software implementation
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
Statement: This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux as they did not include the software implementation of the RDMA protocol over infiniband.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kerne
Debian
CVE-2016-8636: linux - Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rx...
vendor_debian·2016·CVSS 7.8
CVE-2016-8636 [HIGH] CVE-2016-8636: linux - Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rx...
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
Scope: local
bookworm: resolved (fixed in 4.9.10-1)
bullseye: resolved (fixed in 4.9.10-1)
forky: resolved (fixed in 4.9.10-1)
sid: resolved (fixed in 4.9.10-1)
trixie: resolved (fixed in 4.9.10-1)
GHSA
GHSA-vv9c-r5jj-58f9: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr
ghsa_unreviewed·2022-05-17
CVE-2016-8636 [HIGH] CWE-190 GHSA-vv9c-r5jj-58f9: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
OSV
linux-hwe vulnerabilities
osv·2017-07-21·CVSS 5.5
[MEDIUM] linux-hwe vulnerabilities
linux-hwe vulnerabilities
USN-3358-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04.
This update provides the corresponding updates for the Linux Hardware
Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Please
note that this update changes the Linux HWE kernel to the 4.10 based
kernel from Ubuntu 17.04, superseding the 4.8 based HWE kernel from
Ubuntu 16.10.
Ben Harris discovered that the Linux kernel would strip extended privilege
attributes of files when performing a failed unprivileged system call. A
local attacker could use this to cause a denial of service. (CVE-2015-1350)
Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel
did not properly validate meta block groups. An attacker with physical
access could use this to specially cr
OSV
CVE-2016-8636: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr
osv·2017-02-22·CVSS 7.8
CVE-2016-8636 [HIGH] CVE-2016-8636: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
Kernel
IB/rxe: Fix mem_check_range integer overflow
kernel_security·2017-02-07
IB/rxe: Fix mem_check_range integer overflow
IB/rxe: Fix mem_check_range integer overflow
Update the range check to avoid integer-overflow in edge case.
Resolves CVE 2016-8636.
Signed-off-by: Eyal Itkin
Signed-off-by: Dan Carpenter
Reviewed-by: Leon Romanovsky
Signed-off-by: Doug Ledford
No detection rules found.
No public exploits indexed.
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=647bf3d8a8e5777319da92af672289b2a6c4dc66http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.10http://www.openwall.com/lists/oss-security/2017/02/11/9http://www.securityfocus.com/bid/96189https://bugzilla.redhat.com/show_bug.cgi?id=1421981https://eyalitkin.wordpress.com/2017/02/11/cve-publication-cve-2016-8636/https://github.com/torvalds/linux/commit/647bf3d8a8e5777319da92af672289b2a6c4dc66http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=647bf3d8a8e5777319da92af672289b2a6c4dc66http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.10http://www.openwall.com/lists/oss-security/2017/02/11/9http://www.securityfocus.com/bid/96189https://bugzilla.redhat.com/show_bug.cgi?id=1421981https://eyalitkin.wordpress.com/2017/02/11/cve-publication-cve-2016-8636/https://github.com/torvalds/linux/commit/647bf3d8a8e5777319da92af672289b2a6c4dc66
2017-02-22
Published