The tracewritebackdirty_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-3070.json"
[
{
"target": {
"file": "mm/migrate.c"
},
"digest": {
"line_hashes": [
"149763591454265563538105017581575625864",
"339842004274406955291628796897359417552",
"177579614104210746085812693702855013559",
"127851726515592648665517711031049101291",
"186787342600654293915660231921197206270",
"269395564316830720598397039875886642015",
"303615761415722171268454380513640318063",
"156822382650517372984650230565128802877",
"125915474945590370564554026715735044048",
"14586588605235896169237914325033679587",
"1823118659253144786842217904933442115",
"288985452115659894437542911245264517477",
"133588690784932692679741645936384398996",
"101547156145211789205161924186019239692",
"47049425437014730340916326803597633544",
"63652745398025359170606049076762674419",
"17656838037807733798988608224605872281",
"319353917119383919828709384176567878291",
"192513792184627092447750885276178172026",
"139545425688582369790301350134463730615",
"68347230405425474922818152067546031132",
"56932809376887226085908545635169439685",
"210050809160906046848419415154565191573",
"245970408525419215244269049317185875089",
"12189225601371281872835513863341372987",
"315267864614144777760030981179455619655",
"128800016763508156495016414208520768954",
"95911695565381844947765531533878815828",
"245408940559266651629276840954051983504",
"16367869791726731773554412000928504543",
"34956042799367935089317148530852678818",
"13926260990262624124311173615556976792",
"122918560402557947751179347843541398338"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-3070-5d8b20a8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@42cb14b110a5698ccf26ce59c4441722605a3743",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "mm/migrate.c",
"function": "migrate_page_move_mapping"
},
"digest": {
"length": 1516.0,
"function_hash": "137201947938254148587536208307280021098"
},
"signature_type": "Function",
"id": "CVE-2016-3070-bd91402e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@42cb14b110a5698ccf26ce59c4441722605a3743",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "mm/migrate.c",
"function": "migrate_page_copy"
},
"digest": {
"length": 1002.0,
"function_hash": "68288386262262774200004029526313414556"
},
"signature_type": "Function",
"id": "CVE-2016-3070-f1414a41",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@42cb14b110a5698ccf26ce59c4441722605a3743",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-3070.json"
[
{
"target": {
"file": "mm/migrate.c",
"function": "migrate_page_copy"
},
"digest": {
"length": 1002.0,
"function_hash": "68288386262262774200004029526313414556"
},
"signature_type": "Function",
"id": "CVE-2016-3070-3fd3c988",
"source": "https://github.com/torvalds/linux/commit/42cb14b110a5698ccf26ce59c4441722605a3743",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "mm/migrate.c",
"function": "migrate_page_move_mapping"
},
"digest": {
"length": 1516.0,
"function_hash": "137201947938254148587536208307280021098"
},
"signature_type": "Function",
"id": "CVE-2016-3070-765c4be6",
"source": "https://github.com/torvalds/linux/commit/42cb14b110a5698ccf26ce59c4441722605a3743",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "mm/migrate.c"
},
"digest": {
"line_hashes": [
"149763591454265563538105017581575625864",
"339842004274406955291628796897359417552",
"177579614104210746085812693702855013559",
"127851726515592648665517711031049101291",
"186787342600654293915660231921197206270",
"269395564316830720598397039875886642015",
"303615761415722171268454380513640318063",
"156822382650517372984650230565128802877",
"125915474945590370564554026715735044048",
"14586588605235896169237914325033679587",
"1823118659253144786842217904933442115",
"288985452115659894437542911245264517477",
"133588690784932692679741645936384398996",
"101547156145211789205161924186019239692",
"47049425437014730340916326803597633544",
"63652745398025359170606049076762674419",
"17656838037807733798988608224605872281",
"319353917119383919828709384176567878291",
"192513792184627092447750885276178172026",
"139545425688582369790301350134463730615",
"68347230405425474922818152067546031132",
"56932809376887226085908545635169439685",
"210050809160906046848419415154565191573",
"245970408525419215244269049317185875089",
"12189225601371281872835513863341372987",
"315267864614144777760030981179455619655",
"128800016763508156495016414208520768954",
"95911695565381844947765531533878815828",
"245408940559266651629276840954051983504",
"16367869791726731773554412000928504543",
"34956042799367935089317148530852678818",
"13926260990262624124311173615556976792",
"122918560402557947751179347843541398338"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-3070-9ecb4918",
"source": "https://github.com/torvalds/linux/commit/42cb14b110a5698ccf26ce59c4441722605a3743",
"deprecated": false,
"signature_version": "v1"
}
]