Improper input validation in Linux kernel - CVE-2016-2143
Published: July 1, 2016 / Updated: April 17, 2018
Vulnerability identifier: #VU4042
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-2143
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to cause DoS condition on the target system.
The weakness exists in the fork implementation on s390 platforms due to mishandling the case of four page-table levels. A local attacker can exploit arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h and cause the service to crash.
The weakness exists in the fork implementation on s390 platforms due to mishandling the case of four page-table levels. A local attacker can exploit arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h and cause the service to crash.
Affected software
Linux kernel
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
kernel (Red Hat package)
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
kernel (Red Hat package)
How to mitigate CVE-2016-2143
Update to version 4.5.
kernel (Red Hat package) - update to 2.6.32-642.11.1.el6