Medium severity6.8NVD Advisory· Published Apr 27, 2016· Updated Jun 17, 2026
CVE-2016-0774
CVE-2016-0774
Description
The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
93- osv-coords88 versionspkg:apk/chainguard/hyperv-daemonspkg:apk/chainguard/hyperv-daemons-6.18pkg:apk/chainguard/hyperv-daemons-genericpkg:apk/chainguard/linuxpkg:apk/chainguard/linux-aws-6.12pkg:apk/chainguard/linux-aws-6.12-boot-installedpkg:apk/chainguard/linux-aws-6.12-fips-boot-installedpkg:apk/chainguard/linux-aws-6.12-headerspkg:apk/chainguard/linux-aws-6.12-modulespkg:apk/chainguard/linux-aws-6.18pkg:apk/chainguard/linux-aws-6.18-boot-installedpkg:apk/chainguard/linux-aws-6.18-fips-boot-installedpkg:apk/chainguard/linux-aws-6.18-headerspkg:apk/chainguard/linux-aws-6.18-modulespkg:apk/chainguard/linux-aws-genericpkg:apk/chainguard/linux-aws-generic-boot-configurationpkg:apk/chainguard/linux-aws-generic-boot-installedpkg:apk/chainguard/linux-aws-generic-fips-boot-installedpkg:apk/chainguard/linux-aws-generic-headerspkg:apk/chainguard/linux-aws-generic-modulespkg:apk/chainguard/linux-azure-6.12pkg:apk/chainguard/linux-azure-6.18pkg:apk/chainguard/linux-azure-6.18-boot-installedpkg:apk/chainguard/linux-azure-6.18-fips-boot-installedpkg:apk/chainguard/linux-azure-6.18-headerspkg:apk/chainguard/linux-azure-6.18-modulespkg:apk/chainguard/linux-azure-genericpkg:apk/chainguard/linux-azure-generic-boot-configurationpkg:apk/chainguard/linux-azure-generic-boot-installedpkg:apk/chainguard/linux-azure-generic-fips-boot-installedpkg:apk/chainguard/linux-azure-generic-headerspkg:apk/chainguard/linux-azure-generic-modulespkg:apk/chainguard/linux-boot-configurationpkg:apk/chainguard/linux-boot-installedpkg:apk/chainguard/linux-gcp-6.12pkg:apk/chainguard/linux-gcp-6.18pkg:apk/chainguard/linux-gcp-6.18-boot-installedpkg:apk/chainguard/linux-gcp-6.18-fips-boot-installedpkg:apk/chainguard/linux-gcp-6.18-headerspkg:apk/chainguard/linux-gcp-6.18-modulespkg:apk/chainguard/linux-gcp-genericpkg:apk/chainguard/linux-gcp-generic-boot-installedpkg:apk/chainguard/linux-gcp-generic-fips-boot-installedpkg:apk/chainguard/linux-gcp-generic-headerspkg:apk/chainguard/linux-gcp-generic-modulespkg:apk/chainguard/linux-modulespkg:apk/chainguard/linux-qemu-6.12pkg:apk/chainguard/linux-qemu-6.18pkg:apk/chainguard/linux-qemu-genericpkg:apk/chainguard/linux-qemu-generic-bootc-boot-installedpkg:apk/chainguard/linux-qemu-melangepkg:apk/chainguard/linux-qemu-rcpkg:apk/chainguard/linux-qemu-rc-boot-installedpkg:apk/chainguard/linux-qemu-rc-fips-boot-installedpkg:apk/chainguard/linux-qemu-rc-headerspkg:apk/chainguard/linux-qemu-rc-modulespkg:apk/chainguard/linux-vmware-6.12pkg:apk/chainguard/linux-vmware-6.18pkg:apk/chainguard/linux-vmware-genericpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2012pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_3&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_10&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_11&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_12&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_4&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_6&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_7&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_8&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012pkg:rpm/suse/kgraft-patch-SLE12_Update_9&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012
< 0+ 87 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 6.18.5-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.2
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.2
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 3.12.55-52.42.1
- (no CPE)range: < 4-11.2
- (no CPE)range: < 4-2.1
- (no CPE)range: < 3-2.1
- (no CPE)range: < 2-2.1
- (no CPE)range: < 4-2.1
- (no CPE)range: < 3-2.1
- (no CPE)range: < 1-2.1
- (no CPE)range: < 6-2.1
- (no CPE)range: < 6-2.1
- (no CPE)range: < 5-2.1
- (no CPE)range: < 5-2.1
- (no CPE)range: < 4-2.1
- (no CPE)range: < 4-2.1
Patches
Vulnerability mechanics
References
24- lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0494.htmlnvd
- rhn.redhat.com/errata/RHSA-2016-0617.htmlnvd
- source.android.com/security/bulletin/2016-05-01.htmlnvd
- www.debian.org/security/2016/dsa-3503nvd
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlnvd
- www.securityfocus.com/bid/84126nvd
- www.ubuntu.com/usn/USN-2967-1nvd
- www.ubuntu.com/usn/USN-2967-2nvd
- www.ubuntu.com/usn/USN-2968-1nvd
- www.ubuntu.com/usn/USN-2968-2nvd
- bugzilla.redhat.com/show_bug.cginvd
- security-tracker.debian.org/tracker/CVE-2016-0774nvd
News mentions
0No linked articles in our index yet.