CVE-2016-0821

The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the…

published March 12, 2016

CVSS
—
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.2th percentile
Published
2016-03-12T21:00Z
EPSS history
Timeline
  • 12 MAR 21:00Z
    The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the…
    cvelistv5