UBUNTU-CVE-2016-6198

Description

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c.

CVSS Metrics

• v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Systems

• ubuntu•linux

  all | < 4.4.0-28.47

• ubuntu•linux-azure-6.11

  all

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-azure-fde-5.15

  all

• ubuntu•linux-gcp-6.11

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-gkeop

  all

• ubuntu•linux-gkeop-5.15

  all

• ubuntu•linux-hwe-6.11

  all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-lowlatency-hwe-6.11

  all

• ubuntu•linux-lts-wily

  < 4.2.0-41.48~14.04.1

• ubuntu•linux-lts-xenial

  < 4.4.0-28.47~14.04.1

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  < 4.4.0-1016.22 | all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all | all

• ubuntu•linux-snapdragon

  < 4.4.0-1019.22

References (4)

• https://ubuntu.com/security/CVE-2016-6198
• http://openwall.com/lists/oss-security/2016/07/11/7
• https://github.com/linux-test-project/ltp/blob/master/testcases/kernel/syscalls/rename/rename13.c
• https://www.cve.org/CVERecord?id=CVE-2016-6198