CVE-2016-2117

Published: 2 May 2016

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.

From the Ubuntu Security Team

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory.

Notes

The atl2 ethernet driver is the only driver that discloses memory to
ethernet in the default configuration

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

Status

Severity score breakdown

References

• http://www.openwall.com/lists/oss-security/2016/03/16/7
• https://ubuntu.com/security/notices/USN-2989-1
• https://ubuntu.com/security/notices/USN-2998-1
• https://ubuntu.com/security/notices/USN-3000-1
• https://ubuntu.com/security/notices/USN-3001-1
• https://ubuntu.com/security/notices/USN-3002-1
• https://ubuntu.com/security/notices/USN-3003-1
• https://ubuntu.com/security/notices/USN-3004-1
• https://ubuntu.com/security/notices/USN-3005-1
• https://ubuntu.com/security/notices/USN-3006-1
• https://ubuntu.com/security/notices/USN-3007-1
• https://www.cve.org/CVERecord?id=CVE-2016-2117
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1561403