UBUNTU-CVE-2016-4569

Dashboard / Vulnerabilities / UBUNTU-CVE-2016-4569

UBUNTU-CVE-2016-4569

Summary:

Details: The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.

References: https://ubuntu.com/security/CVE-2016-4569, http://comments.gmane.org/gmane.linux.kernel/2214250, http://www.openwall.com/lists/oss-security/2016/05/09/17, https://git.kernel.org/cgit/linux/kernel/git/tiwai/sound.git/commit/?h=for-next&id=cec8f96e49d9be372fdb0c3836dcf31ec71e457e, https://ubuntu.com/security/notices/USN-3016-1, https://ubuntu.com/security/notices/USN-3016-2, https://ubuntu.com/security/notices/USN-3017-1, https://ubuntu.com/security/notices/USN-3017-3, https://ubuntu.com/security/notices/USN-3016-3, https://ubuntu.com/security/notices/USN-3016-4, https://ubuntu.com/security/notices/USN-3017-2, https://ubuntu.com/security/notices/USN-3020-1, https://ubuntu.com/security/notices/USN-3018-2, https://ubuntu.com/security/notices/USN-3018-1, https://ubuntu.com/security/notices/USN-3019-1, https://ubuntu.com/security/notices/USN-3021-2, https://ubuntu.com/security/notices/USN-3021-1, https://www.cve.org/CVERecord?id=CVE-2016-4569