Every CVE Search/ Get API key

CVE-2016-3699

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when...

7.4 HighFix available

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.50%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.4

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

Record
CVE-2016-3699
CVSS 3.0
7.4 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

Record
CVE-2016-3699
Updated
2026-11-02
EUVDEUVD-2016-4720 No score

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

Record
EUVD-2016-4720
Updated
2026-11-03
GitHub AdvisoriesGHSA-pv5f-x9r7-h4c8 7.4

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when...

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

Record
GHSA-pv5f-x9r7-h4c8
CVSS 3.0
7.4 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:2574 8.4

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2016:2574
CVSS 3.0
8.4 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:2584 8.4

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2016:2584
CVSS 3.0
8.4 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
Show 86 moreShow less
Affected packages
PackageAffectedFixed
kernel-debug-devel
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-devel
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-doc
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-headers
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf
Red Hat:enterprise_linux:7::client
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-devel
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-doc
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-headers
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf
Red Hat:enterprise_linux:7::computenode
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-devel
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-doc
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-headers
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-kdump
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-kdump-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-kdump-devel
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf
Red Hat:enterprise_linux:7::server
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-doc
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-headers
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
perf
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
python-perf
Red Hat:enterprise_linux:7::workstation
 before 0:3.10.0-514.el7
0:3.10.0-514.el7
kernel-rt
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-debug
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-debug-debuginfo
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-debug-devel
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-debug-kvm
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-debug-kvm-debuginfo
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-debuginfo
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-devel
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-doc
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-kvm
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-kvm-debuginfo
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-trace
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-trace-debuginfo
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-trace-devel
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-trace-kvm
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7
kernel-rt-trace-kvm-debuginfo
Red Hat:rhel_extras_rt:7
 before 0:3.10.0-514.rt56.420.el7
0:3.10.0-514.rt56.420.el7

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-3699 is a high vulnerability (CVSS 7.4) in Linux Kernel, published October 7, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. Fixed in kernel-debug-debuginfo 0:3.10.0-514.el7.

References

Show 180 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open