CVE-2016-10088

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows…

published December 30, 2016

CVSS
—
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.7th percentile
Published
2016-12-30T18:00Z
EPSS history
Timeline
  • 30 DEC 18:00Z
    The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows…
    cvelistv5