suse · CVE-2016-1583

Quick triage

Priority: high 公開: 2021-05-30 13:38:01 UTC Updated: 2025-05-18 00:01:57 UTC

参照: Official suse advisory, NVD, CVE.org · CVE 詳細

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-1583 severity important: SUSE including 241 source package names (kernel-bigsmp-3.0.101-0.47.86.1, kernel-bigsmp-base-3.0.101-0.47.86.1, …), 683 product×package rows across 106 product lines (SUSE CaaS Platform 4.0, SUSE CaaS Platform 4.5, … (106 product lines)): Fixed 394, Known Not Affected 289.

Description:

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

cvelogic Threat Intelligence