Back to bug 1401502

Who When What Removed Added
Andrej Nemec 2016-12-05 12:58:12 UTC Blocks 1401504
Slawomir Czarko 2016-12-06 09:42:07 UTC CC slawomir
Vladis Dronov 2016-12-21 15:28:08 UTC Priority medium low
CC vdronov
Doc Text A double free vulnerability was found in netlink_dump, which could cause a denial of service or possibly other unspecified impact.
Doc Type If docs needed, set a value Bug Fix
Whiteboard impact=moderate,public=20160515,reported=20161202,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-416,rhel-5/kernel=new,rhel-6/kernel=new,rhel-7/kernel=new,rhel-7/kernel-rt=new,mrg-2/realtime-kernel=new,rhelsa-7/arm-kernel=new,fedora-all/kernel=notaffected impact=low,public=20160515,reported=20161202,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected
Severity medium low
Vladis Dronov 2016-12-21 15:31:25 UTC Depends On 1406839
Vladis Dronov 2016-12-21 15:35:22 UTC Status NEW CLOSED
Resolution --- WONTFIX
Last Closed 2016-12-21 10:35:22 UTC
Vladis Dronov 2016-12-21 15:36:24 UTC Summary CVE-2016-9806 kernel: Double-free in netlink_dump CVE-2016-9806 kernel: netlink: double-free in netlink_dump
Vladis Dronov 2017-01-18 09:12:50 UTC Whiteboard impact=low,public=20160515,reported=20161202,source=oss-security,cvss2=4.7/AV:L/AC:M/Au:N/C:N/I:N/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected impact=low,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected
Vladis Dronov 2017-01-18 09:13:08 UTC Whiteboard impact=low,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected impact=low,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected
Vladis Dronov 2017-01-18 09:13:27 UTC Whiteboard impact=low,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected impact=moderate,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected
Vladis Dronov 2017-01-18 09:13:44 UTC Severity low medium
Vladis Dronov 2017-01-18 09:14:00 UTC Priority low medium
Vladis Dronov 2017-01-18 09:15:41 UTC Whiteboard impact=moderate,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=wontfix,rhel-7/kernel-rt=wontfix,mrg-2/realtime-kernel=wontfix,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected impact=moderate,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected
Vladis Dronov 2017-01-18 09:17:16 UTC Depends On 1414291
Vladis Dronov 2017-01-18 09:18:58 UTC Depends On 1414293
Vladis Dronov 2017-01-18 09:19:10 UTC Depends On 1414294
Vladis Dronov 2017-01-31 13:10:01 UTC Status CLOSED NEW
Resolution WONTFIX ---
Keywords Reopened
Paolo Abeni 2017-04-03 16:45:22 UTC CC pabeni
Flags needinfo?(vdronov)
Christian Horn 2017-04-04 05:00:49 UTC CC chorn
Christian Horn 2017-04-04 08:49:21 UTC Priority medium high
Severity medium high
Vladis Dronov 2017-04-04 12:49:27 UTC Doc Text A double free vulnerability was found in netlink_dump, which could cause a denial of service or possibly other unspecified impact. A double free vulnerability was found in netlink_dump, which could cause a denial of service or possibly other unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.
Flags needinfo?(vdronov)
Andrej Nemec 2017-04-05 06:40:38 UTC Priority high medium
Severity high medium
PnT Account Manager 2018-02-07 23:21:52 UTC CC agordeev
PnT Account Manager 2018-07-19 06:23:02 UTC CC mguzik
PnT Account Manager 2018-08-28 22:10:46 UTC CC lwang
Eric Sammons 2019-02-08 14:58:05 UTC CC esammons
PnT Account Manager 2019-02-28 22:31:18 UTC CC jkastner
Product Security DevOps Team 2019-06-08 03:03:01 UTC Status NEW CLOSED
Resolution --- ERRATA
Last Closed 2016-12-21 15:35:22 UTC 2019-06-08 03:03:01 UTC
Product Security DevOps Team 2019-09-29 14:01:53 UTC Whiteboard impact=moderate,public=20160515,reported=20161202,source=oss-security,cvss2=6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C,cvss3=7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H,cwe=CWE-416,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,rhel-7/kernel=affected,rhel-7/kernel-rt=affected,mrg-2/realtime-kernel=affected,rhelsa-7/arm-kernel=affected,fedora-all/kernel=notaffected

Back to bug 1401502