We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 85b2264 commit 2dad2c4Copy full SHA for 2dad2c4
cpp/ql/src/experimental/Security/CVE/cve-2016-6480.ql
@@ -1,3 +1,19 @@
1
+/**
2
+ * @name Linux kernel double-fetch vulnerability detection
3
+ * @description Double-fetch is a very common vulnerability pattern
4
+ * in linux kernel, attacker can exploit double-fetch
5
+ * issues to obatain root privilege.
6
+ * Double-fetch is caused by fetching data from user
7
+ * mode by calling copy_from_user twice, CVE-2016-6480
8
+ * is quite a good example for your information.
9
+ * @kind problem
10
+ * @id cpp/linux-kernel-double-fetch-vulnerability
11
+ * @problem.severity warning
12
+ * @security-severity 7.5
13
+ * @tags security
14
+ * external/cwe/cwe-362
15
+ */
16
+
17
import cpp
18
19
class CopyFromUserFunctionCall extends FunctionCall{
0 commit comments