{"id":"CVE-2016-2550","aliases":["DEBIAN-CVE-2016-2550","DSA-3503-1","EUVD-2016-3626","GHSA-w67r-pc7p-x294","UBUNTU-CVE-2016-2550","USN-2946-1","USN-2947-2","USN-2948-1","USN-2949-1"],"status":"published","title":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a...","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00507,"percentile":0.43506,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2016-02-24T00:00:00Z","modified":"2026-09-22T07:01:52Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.4.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.4.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.4.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-85.129"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-69.89~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-58.64~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","fixed_in":["4.2.0-35.40~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.73-2+deb7u3"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1","3.2.68-1+deb7u1~bpo60+1","3.2.68-1+deb7u2","3.2.68-1+deb7u2~bpo60+1","3.2.68-1+deb7u3","3.2.68-1+deb7u3~bpo60+1","3.2.68-1+deb7u4","3.2.68-1+deb7u4~bpo60+1","3.2.68-1+deb7u5","3.2.68-1+deb7u6","3.2.68-1+deb7u6~bpo60+1","3.2.71-1","3.2.71-2","3.2.73-1","3.2.73-2","3.2.73-2+deb7u1","3.2.73-2+deb7u2","3.2.73-2+deb7u2~bpo60+1"],"bundled":15},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt20-1+deb8u4"}]}],"versions":["3.16.7-ckt11-1","3.16.7-ckt11-1+deb8u1","3.16.7-ckt11-1+deb8u2","3.16.7-ckt11-1+deb8u2~bpo70+1","3.16.7-ckt11-1+deb8u3","3.16.7-ckt11-1+deb8u3~bpo70+1","3.16.7-ckt11-1+deb8u4","3.16.7-ckt11-1+deb8u4~bpo70+1","3.16.7-ckt11-1+deb8u5","3.16.7-ckt11-1+deb8u6","3.16.7-ckt11-1+deb8u6~bpo70+1","3.16.7-ckt11-1~bpo70+1","3.16.7-ckt17-1","3.16.7-ckt20-1","3.16.7-ckt20-1+deb8u1","3.16.7-ckt20-1+deb8u2","3.16.7-ckt20-1+deb8u2~bpo70+1","3.16.7-ckt20-1+deb8u3","3.16.7-ckt20-1+deb8u3~bpo70+1","3.16.7-ckt20-1+deb8u4~bpo70+1","3.16.7-ckt9-2","3.16.7-ckt9-3","3.16.7-ckt9-3~deb8u1","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-85.129"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-69.89~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1","3.16.0-52.71~14.04.1","3.16.0-53.72~14.04.1","3.16.0-55.74~14.04.1","3.16.0-56.75~14.04.1","3.16.0-57.77~14.04.1","3.16.0-59.79~14.04.1","3.16.0-60.80~14.04.1","3.16.0-62.82~14.04.1","3.16.0-62.83~14.04.1","3.16.0-67.87~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-58.64~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-35.40~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1","4.2.0-34.39~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-85.129"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-35.40~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1","4.2.0-34.39~14.04.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-69.89~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1","3.16.0-52.71~14.04.1","3.16.0-53.72~14.04.1","3.16.0-55.74~14.04.1","3.16.0-56.75~14.04.1","3.16.0-57.77~14.04.1","3.16.0-59.79~14.04.1","3.16.0-60.80~14.04.1","3.16.0-62.82~14.04.1","3.16.0-62.83~14.04.1","3.16.0-67.87~14.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-58.64~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1"],"bundled":4}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311517","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2949-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/23/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.debian.org/security/2016/dsa-3503","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=415e3d3e90ce9e18727e8843ae343eda5a58fad6","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://www.ubuntu.com/usn/USN-2947-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2947-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2946-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2948-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2946-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2948-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/415e3d3e90ce9e18727e8843ae343eda5a58fad6","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2550"},{"url":"https://github.com/advisories/GHSA-w67r-pc7p-x294"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-2550","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-2550","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/24/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2946-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2946-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2947-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2947-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2947-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2948-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2949-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2782","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-2550","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","status":"published","published":"2016-04-27T17:00:00Z","modified":"2024-08-05T23:32:20.927Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-3626","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","status":"published","published":"2016-04-27T17:00:00Z","modified":"2024-08-05T23:32:20Z","updated_at":"2026-11-03T02:22:52.753944Z"}],"ghsa":[{"id":"GHSA-w67r-pc7p-x294","title":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a...","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","status":"published","published":"2022-05-14T03:49:16Z","modified":"2023-02-03T05:00:39Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:52:49.982899Z"}],"nvd":[{"id":"CVE-2016-2550","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","status":"published","published":"2016-04-27T17:59:19.977Z","modified":"2026-06-17T00:44:16.86Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:03:23.795791Z"}],"osv":[{"id":"CVE-2016-2550","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","status":"published","published":"2016-04-27T17:59:19.977Z","modified":"2026-03-15T22:05:56.808749Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-2550","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","status":"published","published":"2016-04-27T17:59:19.977Z","modified":"2026-09-22T07:01:52.449836847Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-2550","description":"The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.","status":"published","published":"2016-02-24T00:00:00Z","modified":"2026-04-22T10:38:01.172003Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"DSA-3503-1","title":"linux - security update","status":"published","published":"2016-03-03T00:00:00Z","modified":"2026-03-09T01:22:15.595587Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"USN-2946-1","title":"linux vulnerabilities","description":"Venkatesh Pottem discovered a use-after-free vulnerability in the Linux\nkernel's CXGB3 driver. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2015-8812)\n\nXiaofei Rex Guo discovered a timing side channel vulnerability in the Linux\nExtended Verification Module (EVM). An attacker could use this to affect\nsystem integrity. (CVE-2016-2085)\n\nDavid Herrmann discovered that the Linux kernel incorrectly accounted file\ndescriptors to the original opener for in-flight file descriptors sent over\na unix domain socket. A local attacker could use this to cause a denial of\nservice (resource exhaustion). (CVE-2016-2550)\n\nIt was discovered that the Linux kernel did not enforce limits on the\namount of data allocated to buffer pipes. A local attacker could use this\nto cause a denial of service (resource exhaustion). (CVE-2016-2847)\n","status":"published","published":"2016-04-06T06:38:00Z","modified":"2026-04-22T09:23:36.783718Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2947-2","title":"linux-lts-wily vulnerabilities","description":"Ralf Spenneberg discovered that the usbvision driver in the Linux kernel\ndid not properly validate the interfaces and endpoints reported by the\ndevice. An attacker with physical access could cause a denial of service\n(system crash). (CVE-2015-7833)\n\nVenkatesh Pottem discovered a use-after-free vulnerability in the Linux\nkernel's CXGB3 driver. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2015-8812)\n\nXiaofei Rex Guo discovered a timing side channel vulnerability in the Linux\nExtended Verification Module (EVM). An attacker could use this to affect\nsystem integrity. (CVE-2016-2085)\n\nIt was discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel did not correctly compute branch offsets\nfor backward jumps after ctx expansion. A local attacker could use this to\ncause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2016-2383)\n\nDavid Herrmann discovered that the Linux kernel incorrectly accounted file\ndescriptors to the original opener for in-flight file descriptors sent over\na unix domain socket. A local attacker could use this to cause a denial of\nservice (resource exhaustion). (CVE-2016-2550)\n\nIt was discovered that the Linux kernel did not enforce limits on the\namount of data allocated to buffer pipes. A local attacker could use this\nto cause a denial of service (resource exhaustion). (CVE-2016-2847)\n","status":"published","published":"2016-04-06T06:59:29Z","modified":"2026-02-10T04:40:58Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2948-1","title":"linux-lts-utopic vulnerabilities","description":"Ralf Spenneberg discovered that the USB driver for Clie devices in the\nLinux kernel did not properly validate the endpoints reported by the\ndevice. An attacker with physical access could cause a denial of service\n(system crash). (CVE-2015-7566)\n\nRalf Spenneberg discovered that the usbvision driver in the Linux kernel\ndid not properly validate the interfaces and endpoints reported by the\ndevice. An attacker with physical access could cause a denial of service\n(system crash). (CVE-2015-7833)\n\nVenkatesh Pottem discovered a use-after-free vulnerability in the Linux\nkernel's CXGB3 driver. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2015-8812)\n\nIt was discovered that a race condition existed in the ioctl handler for\nthe TTY driver in the Linux kernel. A local attacker could use this to\ncause a denial of service (system crash) or expose sensitive information.\n(CVE-2016-0723)\n\nXiaofei Rex Guo discovered a timing side channel vulnerability in the Linux\nExtended Verification Module (EVM). An attacker could use this to affect\nsystem integrity. (CVE-2016-2085)\n\nDavid Herrmann discovered that the Linux kernel incorrectly accounted file\ndescriptors to the original opener for in-flight file descriptors sent over\na unix domain socket. A local attacker could use this to cause a denial of\nservice (resource exhaustion). (CVE-2016-2550)\n\nRalf Spenneberg discovered that the USB driver for Treo devices in the\nLinux kernel did not properly validate the endpoints reported by the\ndevice. An attacker with physical access could cause a denial of service\n(system crash). (CVE-2016-2782)\n\nIt was discovered that the Linux kernel did not enforce limits on the\namount of data allocated to buffer pipes. A local attacker could use this\nto cause a denial of service (resource exhaustion). (CVE-2016-2847)\n","status":"published","published":"2016-04-06T07:35:26Z","modified":"2026-02-10T04:40:58Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2949-1","title":"linux-lts-vivid vulnerabilities","description":"Venkatesh Pottem discovered a use-after-free vulnerability in the Linux\nkernel's CXGB3 driver. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2015-8812)\n\nXiaofei Rex Guo discovered a timing side channel vulnerability in the Linux\nExtended Verification Module (EVM). An attacker could use this to affect\nsystem integrity. (CVE-2016-2085)\n\nDavid Herrmann discovered that the Linux kernel incorrectly accounted file\ndescriptors to the original opener for in-flight file descriptors sent over\na unix domain socket. A local attacker could use this to cause a denial of\nservice (resource exhaustion). (CVE-2016-2550)\n\nIt was discovered that the Linux kernel did not enforce limits on the\namount of data allocated to buffer pipes. A local attacker could use this\nto cause a denial of service (resource exhaustion). (CVE-2016-2847)\n","status":"published","published":"2016-04-06T07:53:51Z","modified":"2026-02-10T04:40:58Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}