CVE-2016-4569

The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users…

published May 23, 2016

CVSS
—
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00835 · 57.0th percentile
Published
2016-05-23T10:00Z
EPSS history
Timeline
  • 23 MAY 10:00Z
    The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users…
    cvelistv5