arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9756.json"
[
{
"signature_type": "Function",
"target": {
"file": "arch/x86/kvm/emulate.c",
"function": "em_jmp_far"
},
"deprecated": false,
"id": "CVE-2016-9756-3e7c38be",
"signature_version": "v1",
"digest": {
"function_hash": "54500272217696676354344047303964066039",
"length": 724.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2117d5398c81554fbf803f5fd1dc55eb78216c0c"
},
{
"signature_type": "Line",
"target": {
"file": "arch/x86/kvm/emulate.c"
},
"deprecated": false,
"id": "CVE-2016-9756-b08d0d33",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"316233035701761260500865024944166378434",
"58384618021752759390839249490384778696",
"154013151227986013711347860686918602770",
"246853669247514187805801401091064510244",
"176257376732945451524049547380783918658",
"330147478779475881853958969051673679723",
"181883484724314812439614164969451992211",
"264968703771706788342354962788640839211",
"141670835561970399851790316265768836794",
"125748209554311817092834068766045279608",
"146374538894211592182645731043591277870",
"89757606396848929380899039254648221530",
"152633394864260931696276582154485990279",
"286601876821145832198285473040095311673",
"220623736900144765152541906752712537409",
"128271754012371092265580397172385860752",
"303179750775853543651096648157178305912",
"135785378649634931328508968609311892811",
"221207126803833651353718716499828019024",
"162979492441780490190015929571625617721",
"270373981957232411026280435541149439948",
"65427009918668496227870141856730496876",
"5174961884009138239179628080137625585",
"316763332203463180808382349077213484425",
"71011182703717250388046693810636217599",
"180648052547852120510135917332964006370",
"255530525171830540000980836349098979482",
"78196016209269174864595206372306313126",
"116654201541404668665479634603052966536",
"286900826048736682324054602936595860523",
"41193926564129550568966618530272431629",
"63682387217908588693776368066506821967",
"96491940588557633522644200613283203253",
"69739943698153675599620731737086023555",
"110953059402525971616182052327419375854"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2117d5398c81554fbf803f5fd1dc55eb78216c0c"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/kvm/emulate.c",
"function": "em_ret_far"
},
"deprecated": false,
"id": "CVE-2016-9756-e6b52a59",
"signature_version": "v1",
"digest": {
"function_hash": "279466385768514529384318608783515218051",
"length": 937.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@2117d5398c81554fbf803f5fd1dc55eb78216c0c"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9756.json"
[
{
"signature_type": "Function",
"target": {
"file": "arch/x86/kvm/emulate.c",
"function": "em_ret_far"
},
"deprecated": false,
"id": "CVE-2016-9756-011f2edb",
"signature_version": "v1",
"digest": {
"function_hash": "279466385768514529384318608783515218051",
"length": 937.0
},
"source": "https://github.com/torvalds/linux/commit/2117d5398c81554fbf803f5fd1dc55eb78216c0c"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/kvm/emulate.c",
"function": "em_jmp_far"
},
"deprecated": false,
"id": "CVE-2016-9756-606c952a",
"signature_version": "v1",
"digest": {
"function_hash": "54500272217696676354344047303964066039",
"length": 724.0
},
"source": "https://github.com/torvalds/linux/commit/2117d5398c81554fbf803f5fd1dc55eb78216c0c"
},
{
"signature_type": "Line",
"target": {
"file": "arch/x86/kvm/emulate.c"
},
"deprecated": false,
"id": "CVE-2016-9756-e46f85ba",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"316233035701761260500865024944166378434",
"58384618021752759390839249490384778696",
"154013151227986013711347860686918602770",
"246853669247514187805801401091064510244",
"176257376732945451524049547380783918658",
"330147478779475881853958969051673679723",
"181883484724314812439614164969451992211",
"264968703771706788342354962788640839211",
"141670835561970399851790316265768836794",
"125748209554311817092834068766045279608",
"146374538894211592182645731043591277870",
"89757606396848929380899039254648221530",
"152633394864260931696276582154485990279",
"286601876821145832198285473040095311673",
"220623736900144765152541906752712537409",
"128271754012371092265580397172385860752",
"303179750775853543651096648157178305912",
"135785378649634931328508968609311892811",
"221207126803833651353718716499828019024",
"162979492441780490190015929571625617721",
"270373981957232411026280435541149439948",
"65427009918668496227870141856730496876",
"5174961884009138239179628080137625585",
"316763332203463180808382349077213484425",
"71011182703717250388046693810636217599",
"180648052547852120510135917332964006370",
"255530525171830540000980836349098979482",
"78196016209269174864595206372306313126",
"116654201541404668665479634603052966536",
"286900826048736682324054602936595860523",
"41193926564129550568966618530272431629",
"63682387217908588693776368066506821967",
"96491940588557633522644200613283203253",
"69739943698153675599620731737086023555",
"110953059402525971616182052327419375854"
]
},
"source": "https://github.com/torvalds/linux/commit/2117d5398c81554fbf803f5fd1dc55eb78216c0c"
}
]