mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 19:17:37 +02:00
18 lines
722 B
Markdown
18 lines
722 B
Markdown
### [CVE-2016-9754](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9754)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculations, which allows local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
No PoCs from references.
|
|
|
|
#### Github
|
|
- https://github.com/thdusdl1219/CVE-Study
|
|
|