drivers/vfio/pci/vfiopciintrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging access to a vfio PCI device file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9084.json"
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"219380740422457204544473623772003958245",
"264599558525306533415723522511465936498",
"27393989900155516086247585001194023980",
"327269645043652522027574648987274622462"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-9084-0293ff61",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"file": "drivers/vfio/pci/vfio_pci_intrs.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 654.0,
"function_hash": "307791481686725862069246917818311480514"
},
"signature_type": "Function",
"id": "CVE-2016-9084-07a63035",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"function": "vfio_msi_enable",
"file": "drivers/vfio/pci/vfio_pci_intrs.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 7915.0,
"function_hash": "85887424076481087351986022807036792898"
},
"signature_type": "Function",
"id": "CVE-2016-9084-17cc42f7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"function": "vfio_pci_ioctl",
"file": "drivers/vfio/pci/vfio_pci.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"233260825154470081430059614618351995287",
"280843295728363834628003148800973214550",
"72497988581435961034247026414548120732",
"88129304035963681060668758695708880675",
"33519468663533814488268269382413880782",
"195120568887590806256321997632376757305",
"323824813005457054862480484044171985171",
"9900658456361510760113624994001252683",
"323044706926447940371288834504637100725",
"6565626423960224473290161098189212154",
"156837437531890599886589822764534593517",
"21591182734682821016621723534852300164",
"277936980605261843110981516083420692373",
"69507979302654280050078286082043682215",
"332268600892101297100043647693620448445",
"322294407180563505448855248124514433351",
"45000894389753077072631052964878864562",
"5486993693929673239160777881162393578",
"235475058954547892111289184096102294934",
"60327917198922362581557884175310992360",
"102987212665911380411713584641982584937",
"173923191456440802749490327528982108073",
"225391970030866028378591465724642129611",
"147695036662967060786683405307067804519"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-9084-a8374e32",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"file": "drivers/vfio/pci/vfio_pci.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9084.json"
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 7915.0,
"function_hash": "85887424076481087351986022807036792898"
},
"signature_type": "Function",
"id": "CVE-2016-9084-03388461",
"source": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"function": "vfio_pci_ioctl",
"file": "drivers/vfio/pci/vfio_pci.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 654.0,
"function_hash": "307791481686725862069246917818311480514"
},
"signature_type": "Function",
"id": "CVE-2016-9084-106c11a5",
"source": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"function": "vfio_msi_enable",
"file": "drivers/vfio/pci/vfio_pci_intrs.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"233260825154470081430059614618351995287",
"280843295728363834628003148800973214550",
"72497988581435961034247026414548120732",
"88129304035963681060668758695708880675",
"33519468663533814488268269382413880782",
"195120568887590806256321997632376757305",
"323824813005457054862480484044171985171",
"9900658456361510760113624994001252683",
"323044706926447940371288834504637100725",
"6565626423960224473290161098189212154",
"156837437531890599886589822764534593517",
"21591182734682821016621723534852300164",
"277936980605261843110981516083420692373",
"69507979302654280050078286082043682215",
"332268600892101297100043647693620448445",
"322294407180563505448855248124514433351",
"45000894389753077072631052964878864562",
"5486993693929673239160777881162393578",
"235475058954547892111289184096102294934",
"60327917198922362581557884175310992360",
"102987212665911380411713584641982584937",
"173923191456440802749490327528982108073",
"225391970030866028378591465724642129611",
"147695036662967060786683405307067804519"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-9084-f81b0d01",
"source": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"file": "drivers/vfio/pci/vfio_pci.c"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"219380740422457204544473623772003958245",
"264599558525306533415723522511465936498",
"27393989900155516086247585001194023980",
"327269645043652522027574648987274622462"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-9084-f844ad09",
"source": "https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a",
"target": {
"file": "drivers/vfio/pci/vfio_pci_intrs.c"
}
}
]