An issue was discovered in drivers/net/ethernet/arc/emacmain.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arcemactx and arcemactxclean.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10906.json"
[
{
"id": "CVE-2016-10906-297eb216",
"target": {
"file": "drivers/net/ethernet/arc/emac_main.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c278c253f3d992c6994d08aa0efb2b6806ca396f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"238629377882513068521367945713959656005",
"61245950553974704315740040455873087060",
"18589701502609426247173260006563726430",
"188152961989106993868050572269077526425",
"238883493897734095860595705677556091661",
"128862537224611207982006017479823665040",
"244786117303217639373163741106148550163",
"72795344781103804896423634414020503414",
"63075389371626535237922999954116610162",
"70858855227037828412954854122416551863",
"16252440879845038598570284047582495005",
"73965624743789790372718454635566121837",
"197602632529362752088597089733967038632",
"173297732107616328237597318840037878391",
"63507221077137638704643432710329192557"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2016-10906-3154ce7d",
"target": {
"function": "arc_emac_tx",
"file": "drivers/net/ethernet/arc/emac_main.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c278c253f3d992c6994d08aa0efb2b6806ca396f",
"digest": {
"function_hash": "282245321643763687988926117195492309901",
"length": 1250.0
},
"signature_type": "Function"
},
{
"id": "CVE-2016-10906-43543817",
"target": {
"function": "arc_emac_tx_clean",
"file": "drivers/net/ethernet/arc/emac_main.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c278c253f3d992c6994d08aa0efb2b6806ca396f",
"digest": {
"function_hash": "82324840565012901303449856694289720010",
"length": 1035.0
},
"signature_type": "Function"
}
]