CVE-2016-2544

CVSS v3.0 5.1 (Medium)

CVSS v2.0 4.7 (Medium)

EPSS 0.18 % (56^th)

Affected Products 1

Advisories 16

Race condition in the queue_delete function in sound/core/seq/seq_queue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service (use-after-free and system crash) by making an ioctl call at a certain time.

Weaknesses

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2016-04-27 17:59:13
(8 years ago)
Updated Date: 2017-09-07 01:29:02
(7 years ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel 4.4 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 4.4