CVE-2016-2085

The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local…

published April 27, 2016

CVSS
—
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.6th percentile
Published
2016-04-27T17:00Z
EPSS history
Timeline
  • 27 APR 17:00Z
    The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local…
    cvelistv5