Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-7912.json"
[
{
"target": {
"file": "drivers/usb/gadget/function/f_fs.c",
"function": "ffs_user_copy_worker"
},
"digest": {
"length": 833.0,
"function_hash": "16265079312279071985376172666869703181"
},
"signature_type": "Function",
"id": "CVE-2016-7912-37b81456",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@38740a5b87d53ceb89eb2c970150f6e94e00373a",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/usb/gadget/function/f_fs.c"
},
"digest": {
"line_hashes": [
"147459014891655907874405284659931229867",
"31434796801308146895864616152932572177",
"264266191614536698860225258938055030153",
"176895607153623938696703895990537503924",
"278404810225016404804260029594025403397",
"283340983782085652530908059843207902755",
"177760464663046185618099376882282381424",
"69536776239139054479693597182931035558",
"133889884010945018878687301431625263116",
"318235218311481276487658377715356162002",
"214523440026538224644508965433418994978",
"104195999735949669649390323567672165447"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-7912-e4a1c33d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@38740a5b87d53ceb89eb2c970150f6e94e00373a",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-7912.json"
[
{
"target": {
"file": "drivers/usb/gadget/function/f_fs.c"
},
"digest": {
"line_hashes": [
"147459014891655907874405284659931229867",
"31434796801308146895864616152932572177",
"264266191614536698860225258938055030153",
"176895607153623938696703895990537503924",
"278404810225016404804260029594025403397",
"283340983782085652530908059843207902755",
"177760464663046185618099376882282381424",
"69536776239139054479693597182931035558",
"133889884010945018878687301431625263116",
"318235218311481276487658377715356162002",
"214523440026538224644508965433418994978",
"104195999735949669649390323567672165447"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-7912-2a14f69a",
"source": "https://github.com/torvalds/linux/commit/38740a5b87d53ceb89eb2c970150f6e94e00373a",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/usb/gadget/function/f_fs.c",
"function": "ffs_user_copy_worker"
},
"digest": {
"length": 833.0,
"function_hash": "16265079312279071985376172666869703181"
},
"signature_type": "Function",
"id": "CVE-2016-7912-804b3049",
"source": "https://github.com/torvalds/linux/commit/38740a5b87d53ceb89eb2c970150f6e94e00373a",
"deprecated": false,
"signature_version": "v1"
}
]