The rtnlfilllink_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.
[
{
"digest": {
"function_hash": "177216360514168275862627517643990282443",
"length": 345.0
},
"id": "CVE-2016-4486-387a08f1",
"target": {
"function": "rtnl_fill_link_ifmap",
"file": "net/core/rtnetlink.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@5f8e44741f9f216e33736ea4ec65ca9ac03036e6",
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"132229419108793661756949669420325076557",
"280332793141128236568828756326172470442",
"157425717441600612961062276647342273212",
"122779278328117440911207523655035725714",
"175364030657182931666427615877588947466",
"252797487309096870754894627764669570258",
"74430577852004467767997433571868703857",
"36770632196916606325550945403324580709",
"95284500231686146704226931224287086516",
"285850852196308950048875092904178772293",
"194543969364659745966771336959205679149"
],
"threshold": 0.9
},
"id": "CVE-2016-4486-7ecd5298",
"target": {
"file": "net/core/rtnetlink.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@5f8e44741f9f216e33736ea4ec65ca9ac03036e6",
"signature_type": "Line"
}
]
[
{
"digest": {
"line_hashes": [
"132229419108793661756949669420325076557",
"280332793141128236568828756326172470442",
"157425717441600612961062276647342273212",
"122779278328117440911207523655035725714",
"175364030657182931666427615877588947466",
"252797487309096870754894627764669570258",
"74430577852004467767997433571868703857",
"36770632196916606325550945403324580709",
"95284500231686146704226931224287086516",
"285850852196308950048875092904178772293",
"194543969364659745966771336959205679149"
],
"threshold": 0.9
},
"id": "CVE-2016-4486-15761097",
"target": {
"file": "net/core/rtnetlink.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/5f8e44741f9f216e33736ea4ec65ca9ac03036e6",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "177216360514168275862627517643990282443",
"length": 345.0
},
"id": "CVE-2016-4486-79f88e02",
"target": {
"function": "rtnl_fill_link_ifmap",
"file": "net/core/rtnetlink.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/5f8e44741f9f216e33736ea4ec65ca9ac03036e6",
"signature_type": "Function"
}
]