CVE-2016-1583

Published: 8 June 2016

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

From the Ubuntu security team

Jann Horn discovered that eCryptfs improperly attempted to use the mmap() handler of a lower filesystem that did not implement one, causing a recursive page fault to occur. A local unprivileged attacker could use to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges.

Priority

High

CVSS 3 base score: 7.8

Status

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1583
• https://ubuntu.com/security/notices/USN-2996-1
• https://ubuntu.com/security/notices/USN-2997-1
• https://ubuntu.com/security/notices/USN-2998-1
• https://ubuntu.com/security/notices/USN-2999-1
• https://ubuntu.com/security/notices/USN-3000-1
• https://ubuntu.com/security/notices/USN-3001-1
• https://ubuntu.com/security/notices/USN-3002-1
• https://ubuntu.com/security/notices/USN-3003-1
• https://ubuntu.com/security/notices/USN-3004-1
• https://ubuntu.com/security/notices/USN-3005-1
• https://ubuntu.com/security/notices/USN-3006-1
• https://ubuntu.com/security/notices/USN-3007-1
• https://ubuntu.com/security/notices/USN-3008-1
• NVD
• Launchpad
• Debian