The _getuserasmex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a getuserex call.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9178.json"
[
{
"id": "CVE-2016-9178-d82eda23",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18558553012866503788959798520791384318",
"256100387088147489735690031245121057490",
"325349883871198719592724059410222399623",
"211456170766033742366290180586525168428"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1c109fabbd51863475cd12ac206bdd249aee35af",
"target": {
"file": "arch/x86/include/asm/uaccess.h"
},
"deprecated": false
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9178.json"
[
{
"id": "CVE-2016-9178-177bd14e",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18558553012866503788959798520791384318",
"256100387088147489735690031245121057490",
"325349883871198719592724059410222399623",
"211456170766033742366290180586525168428"
]
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/1c109fabbd51863475cd12ac206bdd249aee35af",
"target": {
"file": "arch/x86/include/asm/uaccess.h"
},
"deprecated": false
}
]