CVSS 3.0
6.2 mediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2016-2847
fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
- novell:suse_linux_enterprise_debuginfo
- novell:suse_linux_enterprise_desktop
- novell:suse_linux_enterprise_live_patching
- novell:suse_linux_enterprise_module_for_public_cloud
- novell:suse_linux_enterprise_real_time_extension
- novell:suse_linux_enterprise_server
- novell:suse_linux_enterprise_software_development_kit
- novell:suse_linux_enterprise_workstation_extension
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html