CVE-2016-4580

Published: 23 May 2016

The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.

From the Ubuntu security team

Kangjie Lu discovered an information leak in the X.25 Call Request handling in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory.

Priority

Low

CVSS 3 base score: 7.5

Status

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

Marking as low due to X.25's lack of adoption

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4580
• http://www.openwall.com/lists/oss-security/2016/05/10/12
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5
• https://ubuntu.com/security/notices/USN-3016-1
• https://ubuntu.com/security/notices/USN-3016-2
• https://ubuntu.com/security/notices/USN-3017-1
• https://ubuntu.com/security/notices/USN-3017-3
• https://ubuntu.com/security/notices/USN-3016-3
• https://ubuntu.com/security/notices/USN-3016-4
• https://ubuntu.com/security/notices/USN-3017-2
• https://ubuntu.com/security/notices/USN-3020-1
• https://ubuntu.com/security/notices/USN-3018-2
• https://ubuntu.com/security/notices/USN-3018-1
• https://ubuntu.com/security/notices/USN-3019-1
• https://ubuntu.com/security/notices/USN-3021-2
• https://ubuntu.com/security/notices/USN-3021-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1585366