CVE-2016-6198 The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service....
MediumCVSS 5.5
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.5.5-1 | 4.5.5-1 |
| debian/linux(Debian:13) | < 4.5.5-1 | 4.5.5-1 |
| debian/linux(Debian:14) | < 4.5.5-1 | 4.5.5-1 |
| Linux kernel | <= 4.5.4 | No fix listed |
| oracle linux | = 6 | No fix listed |
| oracle vm server | = 3.4 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2016-6198 vendor-advisory
- git.kernel.org issue-tracking patch
- git.kernel.org issue-tracking patch
- RHSA-2016:1847 vendor-advisory
- RHSA-2016:1875 vendor-advisory
- RHSA-2016:2574 vendor-advisory
- RHSA-2016:2584 vendor-advisory
- www.kernel.org release-notes
- [oss-security] 20160711 Re: cvs request: local DoS using rename syscall on overlayfs on top of xfs to crash the kernel - Linux kernel exploit mailing-list third-party-advisory
- www.oracle.com third-party-advisory
- www.oracle.com vendor-advisory
- 91709 vdb-entry
- 1036273 vdb-entry
- bugzilla.redhat.com issue-tracking
- github.com issue-tracking patch
- github.com issue-tracking patch