# CVEs published 2016-05-02

36 CVEs were published on May 2, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1604](https://cve.now/CVE-2003-1604.md): The redirect\_target function in net/ipv4/netfilter/ipt\_REDIRECT.c in the Linux kernel before 2.6.0 allows remote attackers to cause a denial (no CVSS)
- [CVE-2008-7316](https://cve.now/CVE-2008-7316.md): mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that (no CVSS)
- [CVE-2011-5321](https://cve.now/CVE-2011-5321.md): The tty\_open function in drivers/tty/tty\_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users (no CVSS)
- [CVE-2012-6689](https://cve.now/CVE-2012-6689.md): The netlink\_sendmsg function in net/netlink/af\_netlink.c in the Linux kernel before 3.5.5 does not validate the dst\_pid field, which allows (no CVSS)
- [CVE-2012-6701](https://cve.now/CVE-2012-6701.md): Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified o (no CVSS)
- [CVE-2014-9717](https://cve.now/CVE-2014-9717.md): fs/namespace.c in the Linux kernel before 4.0.2 processes MNT\_DETACH umount2 system calls without verifying that the MNT\_LOCKED flag is unse (no CVSS)
- [CVE-2015-1350](https://cve.now/CVE-2015-1350.md): The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing ext (no CVSS)
- [CVE-2015-1573](https://cve.now/CVE-2015-1573.md): The nft\_flush\_table function in net/netfilter/nf\_tables\_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-cha (no CVSS)
- [CVE-2015-2672](https://cve.now/CVE-2015-2672.md): The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstr\_replacement poin (no CVSS)
- [CVE-2015-2686](https://cve.now/CVE-2015-2686.md): net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which (no CVSS)
- [CVE-2015-4170](https://cve.now/CVE-2015-4170.md): Race condition in the ldsem\_cmpxchg function in drivers/tty/tty\_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users (no CVSS)
- [CVE-2015-4176](https://cve.now/CVE-2015-4176.md): fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary fil (no CVSS)
- [CVE-2015-4177](https://cve.now/CVE-2015-4177.md): The collect\_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path h (no CVSS)
- [CVE-2015-4178](https://cve.now/CVE-2015-4178.md): The fs\_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which (no CVSS)
- [CVE-2015-8019](https://cve.now/CVE-2015-8019.md): The skb\_copy\_and\_csum\_datagram\_iovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argume (no CVSS)
- [CVE-2015-8324](https://cve.now/CVE-2015-8324.md): The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allow (no CVSS)
- [CVE-2015-8746](https://cve.now/CVE-2015-8746.md): fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, (no CVSS)
- [CVE-2015-8830](https://cve.now/CVE-2015-8830.md): Integer overflow in the aio\_setup\_single\_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service (no CVSS)
- [CVE-2015-8839](https://cve.now/CVE-2015-8839.md): Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (no CVSS)
- [CVE-2016-1575](https://cve.now/CVE-2016-1575.md): The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to (no CVSS)
- [CVE-2016-1576](https://cve.now/CVE-2016-1576.md): The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to g (no CVSS)
- [CVE-2016-2053](https://cve.now/CVE-2016-2053.md): The asn1\_ber\_decoder function in lib/asn1\_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via (no CVSS)
- [CVE-2016-2070](https://cve.now/CVE-2016-2070.md): The tcp\_cwnd\_reduction function in net/ipv4/tcp\_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2016-2117](https://cve.now/CVE-2016-2117.md): The atl2\_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O (no CVSS)
- [CVE-2016-2185](https://cve.now/CVE-2016-2185.md): The ati\_remote2\_probe function in drivers/input/misc/ati\_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to (no CVSS)
- [CVE-2016-2186](https://cve.now/CVE-2016-2186.md): The powermate\_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cau (no CVSS)
- [CVE-2016-2187](https://cve.now/CVE-2016-2187.md): The gtco\_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a de (no CVSS)
- [CVE-2016-2188](https://cve.now/CVE-2016-2188.md): The iowarrior\_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause (no CVSS)
- [CVE-2016-2853](https://cve.now/CVE-2016-2853.md): The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges (no CVSS)
- [CVE-2016-2854](https://cve.now/CVE-2016-2854.md): The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privilege (no CVSS)
- [CVE-2016-3136](https://cve.now/CVE-2016-3136.md): The mct\_u232\_msr\_to\_state function in drivers/usb/serial/mct\_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers t (no CVSS)
- [CVE-2016-3137](https://cve.now/CVE-2016-3137.md): drivers/usb/serial/cypress\_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL po (no CVSS)
- [CVE-2016-3138](https://cve.now/CVE-2016-3138.md): The acm\_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a deni (no CVSS)
- [CVE-2016-3140](https://cve.now/CVE-2016-3140.md): The digi\_port\_init function in drivers/usb/serial/digi\_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers t (no CVSS)
- [CVE-2016-3689](https://cve.now/CVE-2016-3689.md): The ims\_pcu\_parse\_cdc\_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers t (no CVSS)
- [CVE-2016-3951](https://cve.now/CVE-2016-3951.md): Double free vulnerability in drivers/net/usb/cdc\_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denia (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-05-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.