{"id":"CVE-2016-10044","published":"2017-02-07T07:02:00Z","modified":"2024-10-21T13:14:17Z","title":"The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which…","vendor":null,"product":null,"tier":"tail","description":{"text":"The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00301,"percentile":0.22706,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.7","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1037798","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://source.android.com/security/bulletin/2017-02-01.html","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/torvalds/linux/commit/22f6b4d34fcf039c63a94e7670e0da24f8575a5a","tags":["x_refsource_CONFIRM"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=22f6b4d34fcf039c63a94e7670e0da24f8575a5a","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/96122","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":4.5,"factors":[{"name":"EPSS percentile","points":4.54}]},"euvd":{"id":"EUVD-2016-1239","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2012-6701-family-cve-2012-6701","parents":[{"from":"CVE-2012-6701","to":"CVE-2016-10044","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["fs/aio.c"],"commits":["https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893","https://github.com/torvalds/linux/commit/22f6b4d34fcf039c63a94e7670e0da24f8575a5a"],"basis":"rarely changed file"}]},{"from":"CVE-2015-8830","to":"CVE-2016-10044","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["fs/aio.c"],"commits":["https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b","https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364","https://github.com/torvalds/linux/commit/22f6b4d34fcf039c63a94e7670e0da24f8575a5a"],"basis":"rarely changed file"}]}],"children":[{"from":"CVE-2016-10044","to":"CVE-2024-47745","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].","from":"CVE.org","in":"CVE-2024-47745"}]}]}}