CVE-2016-4578

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.

CVSS v3.0

5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.20% chance of exploitation in the next 30 days, 66th percentile

Published

2016-05-23

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46529

References

• CVE Record
• NVD entry

Related

• CVE-2016-4567
• CVE-2016-4622
• CVE-2016-4566
• CVE-2016-4625
• CVE-2016-4558
• CVE-2016-4631