The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a scatterlist.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-02-06T06:04:00

Updated: 2024-08-06T03:14:42.105Z

Reserved: 2017-01-20T00:00:00

Link: CVE-2016-10154

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2017-02-06T06:59:00.310

Modified: 2017-02-09T21:55:39.400

Link: CVE-2016-10154

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-12-14T00:00:00Z

Links: CVE-2016-10154 - Bugzilla