CVE-2016-6787

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2bPatch, Vendor Advisory
http://source.android.com/security/bulletin/2016-12-01.htmlThird Party Advisory
http://www.debian.org/security/2017/dsa-3791Third Party Advisory
http://www.securityfocus.com/bid/94679Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1403842Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2bPatch, Vendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2bPatch, Vendor Advisory
http://source.android.com/security/bulletin/2016-12-01.htmlThird Party Advisory
http://www.debian.org/security/2017/dsa-3791Third Party Advisory
http://www.securityfocus.com/bid/94679Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1403842Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2bPatch, Vendor Advisory

Timeline

Published: Dec 28, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-67887.0An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code with CVE-2016-67897.8An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitr CVE-2016-67907.8An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitr CVE-2016-67917.0An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi CVE-2016-67939.1The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infi CVE-2016-67945.3When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In CVE-2016-67959.8In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a special URL which will be CVE-2016-67967.5A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to CVE-2016-67977.5The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 CVE-2016-67989.8In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the inp CVE-2016-67997.5Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to these methods (Log.v()CVE-2016-68006.1The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are rel