UBUNTU-CVE-2016-6197
fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.
02 / AFFECTED SOFTWARE
Affected packages
11 explicit affected versions
30 explicit affected versions
12 explicit affected versions
7 explicit affected versions
26 explicit affected versions
51 explicit affected versions
78 explicit affected versions
45 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
7 explicit affected versions
7 explicit affected versions
8 explicit affected versions
7 explicit affected versions
1 explicit affected versions
191 explicit affected versions
61 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.
05 / REFERENCES
Further evidence
- http://openwall.com/lists/oss-security/2016/07/11/7
- https://github.com/linux-test-project/ltp/blob/master/testcases/kernel/syscalls/rename/rename13.c
- https://ubuntu.com/security/CVE-2016-6197
- https://ubuntu.com/security/notices/USN-3070-1
- https://ubuntu.com/security/notices/USN-3070-2
- https://ubuntu.com/security/notices/USN-3070-3
- https://ubuntu.com/security/notices/USN-3070-4
- https://www.cve.org/CVERecord?id=CVE-2016-6197