sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service (race condition, use-after-free, and system crash) via a crafted ioctl call.
[
{
"target": {
"file": "sound/core/timer.c",
"function": "snd_timer_user_release"
},
"id": "CVE-2016-2546-3a84f5bc",
"deprecated": false,
"digest": {
"length": 304.0,
"function_hash": "93658301043610627059593339139590449747"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@af368027a49a751d6ff4ee9e3f9961f35bb4fede",
"signature_type": "Function"
},
{
"target": {
"file": "sound/core/timer.c",
"function": "snd_timer_user_tselect"
},
"id": "CVE-2016-2546-6659e5eb",
"deprecated": false,
"digest": {
"length": 1391.0,
"function_hash": "246823642455469834764507836384649061058"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@af368027a49a751d6ff4ee9e3f9961f35bb4fede",
"signature_type": "Function"
},
{
"target": {
"file": "sound/core/timer.c",
"function": "snd_timer_user_ioctl"
},
"id": "CVE-2016-2546-8c8c2e6d",
"deprecated": false,
"digest": {
"length": 1544.0,
"function_hash": "232921382858896732092592046340887693173"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@af368027a49a751d6ff4ee9e3f9961f35bb4fede",
"signature_type": "Function"
},
{
"target": {
"file": "sound/core/timer.c",
"function": "snd_timer_user_open"
},
"id": "CVE-2016-2546-a26ff4e0",
"deprecated": false,
"digest": {
"length": 573.0,
"function_hash": "253399291754686931408917910821732025507"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@af368027a49a751d6ff4ee9e3f9961f35bb4fede",
"signature_type": "Function"
},
{
"target": {
"file": "sound/core/timer.c"
},
"id": "CVE-2016-2546-a2de0070",
"deprecated": false,
"digest": {
"line_hashes": [
"167468526649142956732133350238527039935",
"280815561090248041395520920758609995162",
"41092840891674736576361574543413332946",
"311308767856788296746335865216817439956",
"184466407108799055447936978376582799806",
"120489823828860515532221669782474844021",
"99624881346053657186326451228356854201",
"77927470564534820733569145398148083734",
"83118097954288003670464668002636713305",
"120010129598599151949435142812642551647",
"107591139278623660907097240709036442202",
"226821240153925154684598677089995450693",
"251457243490602671305299216840744310172",
"201552571849307478354334330968862888055",
"217105521143464620705719045430726976538",
"229779334889667718195746043754972913505",
"236086503183989441012533561519938823994",
"112604076571688227768052858246285509961",
"200084453707913055062956086036479282474",
"158515847574593241460660328182214033351",
"118688897651125792809705229284335086964",
"49819817887641712344316879648770462894",
"327860973079972413663730264313481749733",
"91590517646010573894934170740626784613",
"37838770887045118939989888745674955284",
"278019661668580388207308805519217060636",
"224317236271301154927075783115916638076",
"144366414618953271952053919658617268867",
"229906225547153862869674508213213976155",
"172849998909817851520549813621523519300",
"72870685664015702705107362457428773455",
"198334742622700894443580080126294053602",
"298908342781774879945039556473974239682",
"92403265250941708214779002326888469971",
"166525317785192807960247839080549982426",
"238178550821491799457417812733265615475",
"287987705258422111428412499121850528760",
"265035473413517661266144083844209016875",
"231988562306428316373175902520607560939",
"118580844757599990801758703184117402044",
"310965745934518236637455779845370481823",
"306864329129755751235202885716938565346",
"189749904878324132867531906846312025153"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@af368027a49a751d6ff4ee9e3f9961f35bb4fede",
"signature_type": "Line"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2546.json"