CVE-2016-9083

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory…

published November 28, 2016

CVSS
—
EPSS
0%
Percentile
30.9
In the wild
Unconfirmed
What it is

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00383 · 30.9th percentile
Published
2016-11-28T03:01Z
EPSS history
Timeline
  • 28 NOV 03:01Z
    drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory…
    cvelistv5