{"id":"CVE-2016-4581","aliases":["DEBIAN-CVE-2016-4581","DSA-3607-1","EUVD-2016-5567","GHSA-m632-mj54-c945","RHSA-2016:2574","RHSA-2016:2584","UBUNTU-CVE-2016-4581","USN-2989-1","USN-3000-1","USN-3001-1","USN-3002-1","USN-3005-1","USN-3006-1","USN-3007-1"],"status":"published","title":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree...","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00553,"percentile":0.46419,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-05-23T00:00:00Z","modified":"2026-09-22T07:02:06Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.5.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.5.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.5.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-87.133"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-73.95~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-61.69~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","fixed_in":["4.2.0-38.45~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-24.43~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-24.43"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1012.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1015.18"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt25-2+deb8u2"}]}],"versions":["3.16.7-ckt11-1","3.16.7-ckt11-1+deb8u1","3.16.7-ckt11-1+deb8u2","3.16.7-ckt11-1+deb8u2~bpo70+1","3.16.7-ckt11-1+deb8u3","3.16.7-ckt11-1+deb8u3~bpo70+1","3.16.7-ckt11-1+deb8u4","3.16.7-ckt11-1+deb8u4~bpo70+1","3.16.7-ckt11-1+deb8u5","3.16.7-ckt11-1+deb8u6","3.16.7-ckt11-1+deb8u6~bpo70+1","3.16.7-ckt11-1~bpo70+1","3.16.7-ckt17-1","3.16.7-ckt20-1","3.16.7-ckt20-1+deb8u1","3.16.7-ckt20-1+deb8u2","3.16.7-ckt20-1+deb8u2~bpo70+1","3.16.7-ckt20-1+deb8u3","3.16.7-ckt20-1+deb8u3~bpo70+1","3.16.7-ckt20-1+deb8u4","3.16.7-ckt20-1+deb8u4~bpo70+1","3.16.7-ckt25-1","3.16.7-ckt25-1~bpo70+1","3.16.7-ckt25-2","3.16.7-ckt25-2+deb8u1","3.16.7-ckt25-2~bpo70+1","3.16.7-ckt9-2","3.16.7-ckt9-3","3.16.7-ckt9-3~deb8u1","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":37},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-87.133"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-73.95~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1","3.16.0-52.71~14.04.1","3.16.0-53.72~14.04.1","3.16.0-55.74~14.04.1","3.16.0-56.75~14.04.1","3.16.0-57.77~14.04.1","3.16.0-59.79~14.04.1","3.16.0-60.80~14.04.1","3.16.0-62.82~14.04.1","3.16.0-62.83~14.04.1","3.16.0-67.87~14.04.1","3.16.0-69.89~14.04.1","3.16.0-70.90~14.04.1","3.16.0-71.91~14.04.1","3.16.0-71.92~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-61.69~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1","3.19.0-58.64~14.04.1","3.19.0-59.65~14.04.1","3.19.0-59.66~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-38.45~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1","4.2.0-34.39~14.04.1","4.2.0-35.40~14.04.1","4.2.0-36.41~14.04.1","4.2.0-36.42~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-24.43~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-24.43"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1012.16"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1015.18"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-87.133"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-73.95~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1","3.16.0-52.71~14.04.1","3.16.0-53.72~14.04.1","3.16.0-55.74~14.04.1","3.16.0-56.75~14.04.1","3.16.0-57.77~14.04.1","3.16.0-59.79~14.04.1","3.16.0-60.80~14.04.1","3.16.0-62.82~14.04.1","3.16.0-62.83~14.04.1","3.16.0-67.87~14.04.1","3.16.0-69.89~14.04.1","3.16.0-70.90~14.04.1","3.16.0-71.91~14.04.1","3.16.0-71.92~14.04.1"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-61.69~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1","3.19.0-58.64~14.04.1","3.19.0-59.65~14.04.1","3.19.0-59.66~14.04.1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-38.45~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1","4.2.0-34.39~14.04.1","4.2.0-35.40~14.04.1","4.2.0-36.41~14.04.1","4.2.0-36.42~14.04.1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-24.43~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-24.43"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1012.16"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13"],"bundled":10}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"oracle","product":"linux"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-3006-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3004-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/90607","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3005-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333712","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","report"]},{"url":"http://www.debian.org/security/2016/dsa-3607","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/5ec0811d30378ae104f250bfc9b3640242d81e3f","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2989-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5ec0811d30378ae104f250bfc9b3640242d81e3f","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-3007-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/11/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4581","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2574","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4581","tags":["report"]},{"url":"https://github.com/advisories/GHSA-m632-mj54-c945"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-4581","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1152231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1234586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1307091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383395","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2574.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4312","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4312","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8374","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8746","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8812","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8812","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8812","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8844","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8844","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8844","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8845","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2069","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2069","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2016/q1/194","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2117","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2384","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2016/q1/331","tags":["article"]},{"url":"https://lkml.org/lkml/2016/2/13/11","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2847","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2847","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3070","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3156","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3841","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3841","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3841","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4569","tags":["advisory"]},{"url":"http://comments.gmane.org/gmane.linux.kernel/2214250","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4578","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4578","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4581","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4794","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5412","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5412","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5828","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5828","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5828","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5829","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6136","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6198","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6327","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404939","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404733","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7915","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9794","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568821","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13167","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16597","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1280465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1280494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366057","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2584.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-4581","tags":["report"]},{"url":"https://marc.info/?l=linux-fsdevel\u0026m=146246187014403\u0026w=2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2989-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2998-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3000-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3001-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3002-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3003-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3004-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3005-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3006-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3007-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-4004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8839","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4558","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-4581","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","status":"published","published":"2016-05-23T10:00:00Z","modified":"2024-08-06T00:32:25.822Z","updated_at":"2026-11-02T14:33:35.149563Z"}],"euvd":[{"id":"EUVD-2016-5567","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","status":"published","published":"2016-05-23T10:00:00Z","modified":"2024-08-06T00:32:25Z","updated_at":"2026-11-03T02:22:45.901874Z"}],"ghsa":[{"id":"GHSA-m632-mj54-c945","title":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree...","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","status":"published","published":"2022-05-13T01:29:42Z","modified":"2023-02-10T05:06:43Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2016-4581","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","status":"published","published":"2016-05-23T10:59:11.083Z","modified":"2026-06-17T00:47:50.013Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:25.366449Z"}],"osv":[{"id":"CVE-2016-4581","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","status":"published","published":"2016-05-23T10:59:11.083Z","modified":"2026-03-15T22:22:14.289717Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"DEBIAN-CVE-2016-4581","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","status":"published","published":"2016-05-23T10:59:11.083Z","modified":"2026-09-22T07:02:06.312703175Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"RHSA-2016:2574","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:11:47Z","modified":"2026-06-29T10:14:20Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2584","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:37:33Z","modified":"2026-06-29T10:14:22Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-4581","description":"fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.","status":"published","published":"2016-05-23T00:00:00Z","modified":"2026-04-22T10:44:48.564059Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"DSA-3607-1","title":"linux - security update","status":"published","published":"2016-06-28T00:00:00Z","modified":"2026-03-09T01:21:44.956801Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"USN-2989-1","title":"linux vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nAndy Lutomirski discovered a race condition in the Linux kernel's\ntranslation lookaside buffer (TLB) handling of flush events. A local\nattacker could use this to cause a denial of service or possibly leak\nsensitive information. (CVE-2016-2069)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-01T05:51:19Z","modified":"2026-04-22T09:25:19.084718Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3000-1","title":"linux-lts-utopic vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nMCT USB RS232 Converter device driver in the Linux kernel did not properly\nvalidate USB device descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3136)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nCypress M8 USB device driver in the Linux kernel did not properly validate\nUSB device descriptors. An attacker with physical access could use this to\ncause a denial of service (system crash). (CVE-2016-3137)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nLinux kernel's USB driver for Digi AccelePort serial converters did not\nproperly validate USB device descriptors. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3140)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nIt was discovered that the Linux kernel's USB driver for IMS Passenger\nControl Unit devices did not properly validate the device's interfaces. An\nattacker with physical access could use this to cause a denial of service\n(system crash). (CVE-2016-3689)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T05:36:46Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3001-1","title":"linux-lts-vivid vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T05:40:07Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3002-1","title":"linux-lts-wily vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T05:42:32Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3005-1","title":"linux-lts-xenial vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nMultiple race conditions where discovered in the Linux kernel's ext4 file\nsystem. A local user could exploit this flaw to cause a denial of service\n(disk corruption) by writing to a page that is associated with a different\nusers file after unsynchronized hole punching and page-fault handling.\n(CVE-2015-8839)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel could overflow reference counters on\nsystems with more than 32GB of physical ram and with RLIMIT_MEMLOCK set to\ninfinite. A local unprivileged attacker could use to create a use-after-\nfree situation, causing a denial of service (system crash) or possibly gain\nadministrative privileges. (CVE-2016-4558)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T06:53:57Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3006-1","title":"linux vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nMultiple race conditions where discovered in the Linux kernel's ext4 file\nsystem. A local user could exploit this flaw to cause a denial of service\n(disk corruption) by writing to a page that is associated with a different\nusers file after unsynchronized hole punching and page-fault handling.\n(CVE-2015-8839)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel could overflow reference counters on\nsystems with more than 32GB of physical ram and with RLIMIT_MEMLOCK set to\ninfinite. A local unprivileged attacker could use to create a use-after-\nfree situation, causing a denial of service (system crash) or possibly gain\nadministrative privileges. (CVE-2016-4558)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T06:56:35Z","modified":"2026-04-22T09:25:11.180153Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3007-1","title":"linux-raspi2 vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nMultiple race conditions where discovered in the Linux kernel's ext4 file\nsystem. A local user could exploit this flaw to cause a denial of service\n(disk corruption) by writing to a page that is associated with a different\nusers file after unsynchronized hole punching and page-fault handling.\n(CVE-2015-8839)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel could overflow reference counters on\nsystems with more than 32GB of physical ram and with RLIMIT_MEMLOCK set to\ninfinite. A local unprivileged attacker could use to create a use-after-\nfree situation, causing a denial of service (system crash) or possibly gain\nadministrative privileges. (CVE-2016-4558)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T06:58:42Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}
