CVE 2016-8632
The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability.
Related bugs and status
CVE-2016-8632 (Candidate) is related to these bugs:
Bug #1239087: Safely remove is not working (or broken) in Gnome Disks
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1239087 | Safely remove is not working (or broken) in Gnome Disks | gnome-disk-utility (Ubuntu) | Undecided | New |
Bug #792085: Automatic remount of safely removed USB 3.0 drive
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
792085 | Automatic remount of safely removed USB 3.0 drive | linux (Fedora) | Undecided | Fix Released | ||
792085 | Automatic remount of safely removed USB 3.0 drive | linux (openSUSE) | Medium | Fix Released | ||
792085 | Automatic remount of safely removed USB 3.0 drive | linux (Ubuntu) | Medium | Fix Released | ||
792085 | Automatic remount of safely removed USB 3.0 drive | linux (Ubuntu Yakkety) | Medium | Fix Released | ||
792085 | Automatic remount of safely removed USB 3.0 drive | linux (Ubuntu Xenial) | Medium | Fix Released | ||
792085 | Automatic remount of safely removed USB 3.0 drive | linux (Ubuntu Trusty) | Medium | Triaged |
Bug #1720867: Trusty NVMe boot fails on some systems
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1720867 | Trusty NVMe boot fails on some systems | linux (Ubuntu) | Undecided | Fix Released | ||
1720867 | Trusty NVMe boot fails on some systems | linux (Ubuntu Trusty) | Undecided | Fix Released |
Bug #1722335: linux: 3.13.0-134.183 -proposed tracker
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1722335 | linux: 3.13.0-134.183 -proposed tracker | linux (Ubuntu) | Undecided | Invalid | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow | Medium | Invalid | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow automated-testing | Medium | Incomplete | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow certification-testing | Medium | Confirmed | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow prepare-package | Medium | Fix Released | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow prepare-package-meta | Medium | Fix Released | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow prepare-package-signed | Medium | Fix Released | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow promote-to-proposed | Medium | Fix Released | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow promote-to-security | Medium | New | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow promote-to-updates | Medium | New | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow regression-testing | Medium | Confirmed | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow security-signoff | Medium | Confirmed | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow upload-to-ppa | Medium | Invalid | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | Kernel SRU Workflow verification-testing | Medium | Fix Released | ||
1722335 | linux: 3.13.0-134.183 -proposed tracker | linux (Ubuntu Trusty) | Undecided | Fix Released |
Bug #1724500: linux: 3.13.0-135.184 -proposed tracker
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
1724500 | linux: 3.13.0-135.184 -proposed tracker | linux (Ubuntu) | Undecided | Invalid | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow automated-testing | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow certification-testing | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow prepare-package | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow prepare-package-meta | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow prepare-package-signed | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow promote-to-proposed | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow promote-to-security | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow promote-to-updates | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow regression-testing | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow security-signoff | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow upload-to-ppa | Medium | Invalid | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | Kernel SRU Workflow verification-testing | Medium | Fix Released | ||
1724500 | linux: 3.13.0-135.184 -proposed tracker | linux (Ubuntu Trusty) | Undecided | Fix Released |
See the
CVE page on Mitre.org
for more details.