fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4581.json"
[
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"65345018380902995925547119864777682126",
"128638995068039231269048645445682089849",
"42205272251995397776869370579763895388",
"72325424089905326964046519291618977652",
"142454616132466076892605248836348767088",
"57535554478977866218301617458691761526",
"250424368165891523853725093550073417248",
"23110991353660804861168665726618317295",
"29731630967949140448386618585225767716",
"299844606246514323294722246726740101623",
"133205210370297601399887851949367970667",
"270102931022179302747500550562655748608",
"324074826918199753345094237128468278119",
"198469673482786633675996119393966529312",
"150855784706257083062642339069845132605",
"265478746690338794461765904200271841425",
"90596265983264012347104508900800737340",
"177930400682234586081743217119905300269",
"236732265184660035366467935863000898408",
"261842477160052076991451271232699935889",
"187520335897882636851113166269189253786",
"34093916288291754204395029818611870839",
"141164993786419172321472714422224509786",
"44895614528956162377857136746192849107",
"21225115117818051441881139825319738767",
"37626019301285063515862157870300408504"
]
},
"signature_type": "Line",
"target": {
"file": "fs/pnode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@5ec0811d30378ae104f250bfc9b3640242d81e3f",
"id": "CVE-2016-4581-2dfe52fa",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "13005430748067046875454117948765497865",
"length": 1207.0
},
"signature_type": "Function",
"target": {
"file": "fs/pnode.c",
"function": "propagate_one"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@5ec0811d30378ae104f250bfc9b3640242d81e3f",
"id": "CVE-2016-4581-98fc5562",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "26329870692367425171384657432718747884",
"length": 836.0
},
"signature_type": "Function",
"target": {
"file": "fs/pnode.c",
"function": "propagate_mnt"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@5ec0811d30378ae104f250bfc9b3640242d81e3f",
"id": "CVE-2016-4581-f199ffbc",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4581.json"
[
{
"deprecated": false,
"digest": {
"function_hash": "13005430748067046875454117948765497865",
"length": 1207.0
},
"signature_type": "Function",
"target": {
"file": "fs/pnode.c",
"function": "propagate_one"
},
"source": "https://github.com/torvalds/linux/commit/5ec0811d30378ae104f250bfc9b3640242d81e3f",
"id": "CVE-2016-4581-a65628af",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "26329870692367425171384657432718747884",
"length": 836.0
},
"signature_type": "Function",
"target": {
"file": "fs/pnode.c",
"function": "propagate_mnt"
},
"source": "https://github.com/torvalds/linux/commit/5ec0811d30378ae104f250bfc9b3640242d81e3f",
"id": "CVE-2016-4581-a80b0af0",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"65345018380902995925547119864777682126",
"128638995068039231269048645445682089849",
"42205272251995397776869370579763895388",
"72325424089905326964046519291618977652",
"142454616132466076892605248836348767088",
"57535554478977866218301617458691761526",
"250424368165891523853725093550073417248",
"23110991353660804861168665726618317295",
"29731630967949140448386618585225767716",
"299844606246514323294722246726740101623",
"133205210370297601399887851949367970667",
"270102931022179302747500550562655748608",
"324074826918199753345094237128468278119",
"198469673482786633675996119393966529312",
"150855784706257083062642339069845132605",
"265478746690338794461765904200271841425",
"90596265983264012347104508900800737340",
"177930400682234586081743217119905300269",
"236732265184660035366467935863000898408",
"261842477160052076991451271232699935889",
"187520335897882636851113166269189253786",
"34093916288291754204395029818611870839",
"141164993786419172321472714422224509786",
"44895614528956162377857136746192849107",
"21225115117818051441881139825319738767",
"37626019301285063515862157870300408504"
]
},
"signature_type": "Line",
"target": {
"file": "fs/pnode.c"
},
"source": "https://github.com/torvalds/linux/commit/5ec0811d30378ae104f250bfc9b3640242d81e3f",
"id": "CVE-2016-4581-e3bc82fe",
"signature_version": "v1"
}
]