Multiple memory leaks in error paths in fs/xfs/xfsattrlist.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9685.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2e83b79b2d6c78bf1b4aa227938a214dcbddc83f",
"digest": {
"function_hash": "315362536805270191259501845357507989085",
"length": 2238.0
},
"id": "CVE-2016-9685-280f712f",
"deprecated": false,
"target": {
"file": "fs/xfs/xfs_attr_list.c",
"function": "xfs_attr3_leaf_list_int"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2e83b79b2d6c78bf1b4aa227938a214dcbddc83f",
"digest": {
"line_hashes": [
"220967917777271676717776955365367607918",
"318754419568969730483899419342128344550",
"292430508056315584548829940892769571353",
"204872110420533619275588631498745856472",
"202529595078355014593952370413489350409",
"323323340883692331924292230446716788419",
"26797846646416522502801248460205136887",
"137960733588650338225962614193947389042",
"123719090176365125852714554897783604022",
"131307861390015655675919809707765408454",
"109451700020262814056873302543589495413",
"44911777461616895721752289669429874209",
"183447770609313710651913700040375863046",
"77531649121244756292925088255876409208",
"197585818413408032717823852570963610524",
"70963801960220537172065289247721460092"
],
"threshold": 0.9
},
"id": "CVE-2016-9685-29ccaa75",
"deprecated": false,
"target": {
"file": "fs/xfs/xfs_attr_list.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2e83b79b2d6c78bf1b4aa227938a214dcbddc83f",
"digest": {
"function_hash": "195783592752462228181064531288593525331",
"length": 2464.0
},
"id": "CVE-2016-9685-c15515f3",
"deprecated": false,
"target": {
"file": "fs/xfs/xfs_attr_list.c",
"function": "xfs_attr_shortform_list"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9685.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2e83b79b2d6c78bf1b4aa227938a214dcbddc83f",
"digest": {
"function_hash": "195783592752462228181064531288593525331",
"length": 2464.0
},
"id": "CVE-2016-9685-6d3f5616",
"deprecated": false,
"target": {
"file": "fs/xfs/xfs_attr_list.c",
"function": "xfs_attr_shortform_list"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2e83b79b2d6c78bf1b4aa227938a214dcbddc83f",
"digest": {
"line_hashes": [
"220967917777271676717776955365367607918",
"318754419568969730483899419342128344550",
"292430508056315584548829940892769571353",
"204872110420533619275588631498745856472",
"202529595078355014593952370413489350409",
"323323340883692331924292230446716788419",
"26797846646416522502801248460205136887",
"137960733588650338225962614193947389042",
"123719090176365125852714554897783604022",
"131307861390015655675919809707765408454",
"109451700020262814056873302543589495413",
"44911777461616895721752289669429874209",
"183447770609313710651913700040375863046",
"77531649121244756292925088255876409208",
"197585818413408032717823852570963610524",
"70963801960220537172065289247721460092"
],
"threshold": 0.9
},
"id": "CVE-2016-9685-6eff3fd4",
"deprecated": false,
"target": {
"file": "fs/xfs/xfs_attr_list.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/2e83b79b2d6c78bf1b4aa227938a214dcbddc83f",
"digest": {
"function_hash": "315362536805270191259501845357507989085",
"length": 2238.0
},
"id": "CVE-2016-9685-d57f090b",
"deprecated": false,
"target": {
"file": "fs/xfs/xfs_attr_list.c",
"function": "xfs_attr3_leaf_list_int"
}
}
]