Input validation error in linux-vanilla (Alpine package)

1) Input validation error

EUVDB-ID: #VU33074

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2016-3961

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local authenticated user to perform a denial of service (DoS) attack.

Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area.

Mitigation

Install update from vendor's website.

Vulnerable software versions

linux-vanilla (Alpine package): 4.1.39-r0

linux-grsec (Alpine package): 4.1.39-r0

CPE2.3

• cpe:2.3:a:alpine:linux-vanilla_alpine_package:4.1.39-r0:*:*:*:*:alpine_linux:*:3.3
• cpe:2.3:a:alpine:linux-grsec_alpine_package:4.1.39-r0:*:*:*:*:alpine_linux:*:3.3

External links

https://git.alpinelinux.org/aports/commit/?id=b23dbe4b3fa4109d375d6e95f249a1528219b6fb
https://git.alpinelinux.org/aports/commit/?id=7be5a1acd6d9c82c166502cf565830d21e5a24ca

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.