CVE-2016-9644

HIGH

Linux Kernel 4.4.22-4.4.28 - Local Privilege Escalation via __get_user_asm_ex Macro

Title source: llm
STIX 2.1

Description

The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows local users to obtain root access on non-SMEP platforms via a crafted application. NOTE: this vulnerability exists because of incorrect backporting of the CVE-2016-9178 patch to older kernels.

References (5)

Core 5
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-3146-2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94545
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-3146-1
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/11/07/4
Product x_refsource_confirm
https://lwn.net/Articles/705220/

Scores

CVSS v3 7.8
EPSS 0.0145
EPSS Percentile 71.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (7)
linux/linux_kernel 4.4.22
linux/linux_kernel 4.4.23
linux/linux_kernel 4.4.24
linux/linux_kernel 4.4.25
linux/linux_kernel 4.4.26
linux/linux_kernel 4.4.27
linux/linux_kernel 4.4.28
Published Nov 28, 2016
Tracked Since Feb 18, 2026