Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service (use-after-free and system crash) by making an ioctl call at a certain time.
[
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@3567eb6af614dac436c4b16a8d426f9faed639b3",
"digest": {
"function_hash": "287845947214949481907167419379323651053",
"length": 246.0
},
"target": {
"file": "sound/core/seq/seq_queue.c",
"function": "queue_delete"
},
"id": "CVE-2016-2544-b65f2420",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@3567eb6af614dac436c4b16a8d426f9faed639b3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"321083629735703023839558615711363716338",
"297038386327230582227073631956249655153",
"322636561765636905371872523769527107457",
"320723950782787344095618745849288228249",
"79782151377262248990350679978231258168"
]
},
"target": {
"file": "sound/core/seq/seq_queue.c"
},
"id": "CVE-2016-2544-da9507e9",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2544.json"
[
{
"signature_type": "Line",
"source": "https://github.com/torvalds/linux/commit/3567eb6af614dac436c4b16a8d426f9faed639b3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"321083629735703023839558615711363716338",
"297038386327230582227073631956249655153",
"322636561765636905371872523769527107457",
"320723950782787344095618745849288228249",
"79782151377262248990350679978231258168"
]
},
"target": {
"file": "sound/core/seq/seq_queue.c"
},
"id": "CVE-2016-2544-34b10325",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/3567eb6af614dac436c4b16a8d426f9faed639b3",
"digest": {
"function_hash": "287845947214949481907167419379323651053",
"length": 246.0
},
"target": {
"file": "sound/core/seq/seq_queue.c",
"function": "queue_delete"
},
"id": "CVE-2016-2544-ef40c432",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2544.json"