{"id":"CVE-2016-3135","aliases":["BELL-CVE-2016-3135","DEBIAN-CVE-2016-3135","EUVD-2016-4187","GHSA-j2qg-x8p3-53x6","UBUNTU-CVE-2016-3135","USN-2930-2","USN-3054-1","USN-3055-1","USN-3056-1","USN-3057-1","openSUSE-SU-2024:10128-1"],"status":"published","title":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux...","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01001,"percentile":0.63065,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-189"],"published":"2016-03-10T00:00:00Z","modified":"2026-09-22T07:00:22Z","exploits":[{"source":"exploitdb","id":"EDB-39545","title":"Linux Kernel 3.10/3.18 /4.4 - Netfilter IPT_SO_SET_REPLACE Memory Corruption","type":"dos","platform":"linux","date":"2016-03-09","verified":true,"url":"https://www.exploit-db.com/exploits/39545"}],"fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.4.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.4.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.4.6-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","fixed_in":["4.2.0-34.39~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-34.53~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-34.53"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1019.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1022.25"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-34.39~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1019.25"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1022.25"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-34.39~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1019.25"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1022.25"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.13-1.1"}]}],"bundled":82}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://code.google.com/p/google-security-research/issues/detail?id=758","tags":["x_refsource_MISC","x_transferred","web","report"]},{"url":"http://www.ubuntu.com/usn/USN-2930-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3054-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/d157bd761585605b7882935ffb86286919f62ea1","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://www.ubuntu.com/usn/USN-3055-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3056-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2930-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d157bd761585605b7882935ffb86286919f62ea1","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317386","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.ubuntu.com/usn/USN-3057-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/84305","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3135"},{"url":"https://github.com/advisories/GHSA-j2qg-x8p3-53x6"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-3135","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-3135","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-3135","tags":["report"]},{"url":"http://marc.info/?l=netfilter-devel\u0026m=145757136822750\u0026w=2","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/03/14/1","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2930-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2930-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2930-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3054-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3055-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3056-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3057-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-0723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2782","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5243","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9576","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-3135","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","status":"published","published":"2016-04-27T17:00:00Z","modified":"2024-08-05T23:47:57.23Z","updated_at":"2026-11-02T14:33:34.094161Z"}],"euvd":[{"id":"EUVD-2016-4187","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","status":"published","published":"2016-04-27T17:00:00Z","modified":"2024-08-05T23:47:57Z","updated_at":"2026-11-03T02:22:51.132305Z"}],"ghsa":[{"id":"GHSA-j2qg-x8p3-53x6","title":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux...","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","status":"published","published":"2022-05-17T01:09:52Z","modified":"2023-02-02T05:03:51Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:44.264716Z"}],"nvd":[{"id":"CVE-2016-3135","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","status":"published","published":"2016-04-27T17:59:23.85Z","modified":"2026-06-17T00:45:09.43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:03:23.795791Z"}],"osv":[{"id":"BELL-CVE-2016-3135","title":"CVE-2016-3135 does not affect BellSoft software","status":"withdrawn","published":"2016-04-27T17:59:00Z","modified":"2026-01-26T09:49:14.543164Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2016-3135","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","status":"published","published":"2016-04-27T17:59:23.85Z","modified":"2026-03-15T22:06:26.828483Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-3135","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","status":"published","published":"2016-04-27T17:59:23.85Z","modified":"2026-09-22T07:00:22.383303693Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-3135","description":"Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.","status":"published","published":"2016-03-10T00:00:00Z","modified":"2026-04-22T10:40:22.555806Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"openSUSE-SU-2024:10128-1","title":"kernel-debug-4.8.13-1.1 on GA media","description":"These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:10:12.688384Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"USN-2930-2","title":"linux-lts-wily vulnerabilities","description":"Ben Hawkes discovered that the Linux netfilter implementation did not\ncorrectly perform validation when handling IPT_SO_SET_REPLACE events. A\nlocal unprivileged attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code with administrative\nprivileges. (CVE-2016-3134)\n\nBen Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nRalf Spenneberg discovered that the USB driver for Clie devices in the\nLinux kernel did not properly validate the endpoints reported by the\ndevice. An attacker with physical access could cause a denial of service\n(system crash). (CVE-2015-7566)\n\nIt was discovered that a race condition existed when handling heartbeat-\ntimeout events in the SCTP implementation of the Linux kernel. A remote\nattacker could use this to cause a denial of service. (CVE-2015-8767)\n\nIt was discovered that a race condition existed in the ioctl handler for\nthe TTY driver in the Linux kernel. A local attacker could use this to\ncause a denial of service (system crash) or expose sensitive information.\n(CVE-2016-0723)\n\nAndrey Konovalov discovered that the ALSA USB MIDI driver incorrectly\nperformed a double-free. A local attacker with physical access could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code with administrative privileges. (CVE-2016-2384)\n\nDmitry Vyukov discovered that the Advanced Linux Sound Architecture (ALSA)\nframework did not verify that a FIFO was attached to a client before\nattempting to clear it. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-2543)\n\nDmitry Vyukov discovered that a race condition existed in the Advanced\nLinux Sound Architecture (ALSA) framework between timer setup and closing\nof the client, resulting in a use-after-free. A local attacker could use\nthis to cause a denial of service. (CVE-2016-2544)\n\nDmitry Vyukov discovered a race condition in the timer handling\nimplementation of the Advanced Linux Sound Architecture (ALSA) framework,\nresulting in a use-after-free. A local attacker could use this to cause a\ndenial of service (system crash). (CVE-2016-2545)\n\nDmitry Vyukov discovered race conditions in the Advanced Linux Sound\nArchitecture (ALSA) framework's timer ioctls leading to a use-after-free. A\nlocal attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2016-2546)\n\nDmitry Vyukov discovered that the Advanced Linux Sound Architecture (ALSA)\nframework's handling of high resolution timers did not properly manage its\ndata structures. A local attacker could use this to cause a denial of\nservice (system hang or crash) or possibly execute arbitrary code.\n(CVE-2016-2547, CVE-2016-2548)\n\nDmitry Vyukov discovered that the Advanced Linux Sound Architecture (ALSA)\nframework's handling of high resolution timers could lead to a deadlock\ncondition. A local attacker could use this to cause a denial of service\n(system hang). (CVE-2016-2549)\n\nRalf Spenneberg discovered that the USB driver for Treo devices in the\nLinux kernel did not properly validate the endpoints reported by the\ndevice. An attacker with physical access could cause a denial of service\n(system crash). (CVE-2016-2782)\n","status":"published","published":"2016-03-14T16:34:36Z","modified":"2026-02-10T04:40:58Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3054-1","title":"linux-lts-xenial vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:47:56Z","modified":"2026-02-10T04:41:01Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3055-1","title":"linux vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:52:53Z","modified":"2026-04-22T09:27:20.442087Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3056-1","title":"linux-raspi2 vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:55:21Z","modified":"2026-02-10T04:41:01Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3057-1","title":"linux-snapdragon vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:58:33Z","modified":"2026-02-10T04:41:01Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}