Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 3 products
@brian_pak @5unKn0wn The splice/AF_ALG arbitrary write bug (CVE-2016-2383) was patched in kernel 4.5 (March 2016). 2016...
Post summary
The tweet indicates that CVE-2016-2383, an arbitrary write flaw in splice/AF_ALG, was patched in Linux kernel 4.5 as of March 2016.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | canonical | ubuntu_linux | 14.04 | - | - |
| OS | canonical | ubuntu_linux | 15.10 | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 4.5.0 | - | - |
| OS | linux | linux_kernel | 4.5.0 | - | - |
| OS | linux | linux_kernel | 4.5.0 | - | - |
| OS | opensuse | leap | 42.1 | - | - |