Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-9083
HistoryNov 28, 2016 - 3:59 a.m.

Integer overflow

2016-11-2803:59:00
PRIOn knowledge base
www.prio-n.com
6

AI Score

7.1

Confidence

High

EPSS

0

Percentile

5.1%

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a “state machine confusion bug.”