kernel security, bug fix, and enhancement update

2.6.32-573.26.1 - kernel revert 'sched: core: Use hrtimerstartexpires' Jiri Olsa 1326043 1324318 - kernel Revert 'Cleanup bandwidth timers' Jiri Olsa 1326043 1324318 - kernel revert 'fair: Test list head instead of list entry in throttlecfsrq' Jiri Olsa 1326043 1324318 - kernel revert 'sched, per...

CVE-2016-2548

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service system crash via a crafted ioctl call, related to the 1 sndtimerclose and 2 sndtimerstop functions...

DEBIAN-CVE-2016-2548

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service system crash via a crafted ioctl call, related to the 1 sndtimerclose and 2 sndtimerstop functions...

DEBIAN-CVE-2016-2547

sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer instances, which allows local users to cause a denial of service race condition, use-after-free, and system crash via a crafted ioctl call...

DEBIAN-CVE-2016-2546

sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition, use-after-free, and system crash via a crafted ioctl call...

DEBIAN-CVE-2016-2545

The sndtimerinterrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service race condition and system crash via a crafted ioctl call...

Race condition

sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service race condition, use-after-free, and system crash via a crafted ioctl call...

Design/Logic Flaw

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service system crash via a crafted ioctl call, related to the 1 sndtimerclose and 2 sndtimerstop functions...

CVE-2016-2547

sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer instances, which allows local users to cause a denial of service race condition, use-after-free, and system crash via a crafted ioctl call...

Linux kernel Advanced Linux Sound Architecture Framework Competitive Conditions Vulnerability (CNVD-2016-01976)

Linux kernel is an open source operating system. A contention condition vulnerability exists in timer ioctls, the Advanced Linux Sound Architecture framework for Linux kernel, which can be exploited by a local attacker to cause the system to hang, resulting in a denial-of-service attack...

Linux kernel Advanced Linux Sound Architecture Framework Competitive Conditions Vulnerability (CNVD-2016-01975)

Linux kernel is an open source operating system. A contention condition vulnerability exists in timer ioctls, the Advanced Linux Sound Architecture framework for Linux kernel, which can be exploited by a local attacker to cause the system to hang, resulting in a denial-of-service attack...

Linux kernel Advanced Linux Sound Architecture Framework Competitive Conditions Vulnerability

Linux kernel is an open source operating system. A contention condition vulnerability exists in timer ioctls, the Advanced Linux Sound Architecture framework for Linux kernel, which can be exploited by a local attacker to cause the system to hang, resulting in a denial-of-service attack...

Disney Magic Timer by Oral-B - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Disney Magic Timer by Oral-B published at the 'play' market has multiple vulnerabilities...

Talking Poker Timer - Clock - Customized SSL, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Talking Poker Timer - Clock published at the 'play' market has multiple vulnerabilities...

Ultimate Holdem Timer - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate Holdem Timer published at the 'play' market has multiple vulnerabilities...

My Day - Countdown Timer - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Day - Countdown Timer published at the 'play' market has multiple vulnerabilities...

Stopwatch Timer - Dangerous filesystem permissions, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Stopwatch Timer published at the 'play' market has multiple vulnerabilities...

Interval timer HIIT Training - Dynamic Code Loading, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Interval timer HIIT Training published at the 'play' market has multiple vulnerabilities...

Exercise Timer - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Exercise Timer published at the 'play' market has multiple vulnerabilities...

Timer - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Timer published at the 'play' market has multiple vulnerabilities...