The rdsincinfo_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.
[
{
"id": "CVE-2016-5244-4d47d6c9",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/rds/recv.c",
"function": "rds_inc_info_copy"
},
"digest": {
"function_hash": "336295930793208337759396680278902723233",
"length": 535.0
},
"source": "https://github.com/torvalds/linux/commit/4116def2337991b39919f3b448326e21c40e0dbb"
},
{
"id": "CVE-2016-5244-b8db9664",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/rds/recv.c"
},
"digest": {
"line_hashes": [
"288750582223773285938400159747343439799",
"257961609276061901559095979629422920512"
],
"threshold": 0.9
},
"source": "https://github.com/torvalds/linux/commit/4116def2337991b39919f3b448326e21c40e0dbb"
}
]
[
{
"id": "CVE-2016-5244-1ef55ede",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "net/rds/recv.c"
},
"digest": {
"line_hashes": [
"288750582223773285938400159747343439799",
"257961609276061901559095979629422920512"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@4116def2337991b39919f3b448326e21c40e0dbb"
},
{
"id": "CVE-2016-5244-5a38b8e7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "net/rds/recv.c",
"function": "rds_inc_info_copy"
},
"digest": {
"function_hash": "336295930793208337759396680278902723233",
"length": 535.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@4116def2337991b39919f3b448326e21c40e0dbb"
}
]