cve/2016/CVE-2016-10153.md
2024-05-26 14:27:05 +02:00

765 B

CVE-2016-10153

Description

The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging reliance on earlier net/ceph/crypto.c code.

POC

Reference

No PoCs from references.

Github