{"id":"CVE-2016-4794","aliases":["DEBIAN-CVE-2016-4794","EUVD-2016-5778","GHSA-6xwx-g6w8-mw46","MGASA-2016-0271","MGASA-2016-0283","MGASA-2016-0284","RHSA-2016:2574","RHSA-2016:2584","UBUNTU-CVE-2016-4794","USN-3053-1","USN-3054-1","USN-3055-1","USN-3056-1","USN-3057-1"],"status":"published","title":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to...","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00513,"percentile":0.43997,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-05-23T00:00:00Z","modified":"2026-09-22T07:02:07Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.6.2-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.6.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.6.2-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-66.74~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-34.53~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-34.53"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1019.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1022.25"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.2-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.2-2"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.16-1.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.16-1.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-2.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-2.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-8.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.16-1.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.16-1.mga5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.el7"}]}],"bundled":34},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-514.rt56.420.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-66.74~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1","3.19.0-58.64~14.04.1","3.19.0-59.65~14.04.1","3.19.0-59.66~14.04.1","3.19.0-61.69~14.04.1","3.19.0-64.72~14.04.1","3.19.0-65.73~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1019.25"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1022.25"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-66.74~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1","3.19.0-58.64~14.04.1","3.19.0-59.65~14.04.1","3.19.0-59.66~14.04.1","3.19.0-61.69~14.04.1","3.19.0-64.72~14.04.1","3.19.0-65.73~14.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-34.53"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1019.25"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1022.25"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23"],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-3054-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://source.android.com/security/bulletin/2016-12-01.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3053-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3055-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3056-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/12/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2584.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2574.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lkml.org/lkml/2016/4/17/125","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335889","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","report"]},{"url":"http://www.ubuntu.com/usn/USN-3057-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/90625","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4794","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6xwx-g6w8-mw46"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-4794","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0271.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19055","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.14","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.15","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.16","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0283.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19056","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2016-0284.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19057","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2574","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1152231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1234586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1307091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1355654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383395","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2574.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4312","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4312","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8374","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8746","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8812","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8812","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8812","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8844","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8844","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8844","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8845","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2069","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2069","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2069","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2016/q1/194","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2117","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2384","tags":["advisory"]},{"url":"http://seclists.org/oss-sec/2016/q1/331","tags":["article"]},{"url":"https://lkml.org/lkml/2016/2/13/11","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2847","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2847","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3070","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3070","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3156","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3841","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3841","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3841","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4569","tags":["advisory"]},{"url":"http://comments.gmane.org/gmane.linux.kernel/2214250","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4578","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4578","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4794","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5412","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5412","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5828","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5828","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5828","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5829","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6136","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6198","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6327","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404939","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404733","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7915","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9794","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568821","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13167","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16597","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2584","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1280465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1280494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1303733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1304491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366057","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2584.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-4794","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3053-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3054-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3055-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3056-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3057-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-1237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3135","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-4794","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","status":"published","published":"2016-05-23T10:00:00Z","modified":"2024-08-06T00:39:26.265Z","updated_at":"2026-11-02T14:33:35.149563Z"}],"euvd":[{"id":"EUVD-2016-5778","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","status":"published","published":"2016-05-23T10:00:00Z","modified":"2024-08-06T00:39:26Z","updated_at":"2026-11-03T02:22:44.916959Z"}],"ghsa":[{"id":"GHSA-6xwx-g6w8-mw46","title":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to...","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","status":"published","published":"2022-05-14T03:56:53Z","modified":"2023-02-03T05:00:52Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:52:51.988629Z"}],"nvd":[{"id":"CVE-2016-4794","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","status":"published","published":"2016-05-23T10:59:12.427Z","modified":"2026-06-17T00:48:14.013Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:25.366449Z"}],"osv":[{"id":"CVE-2016-4794","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","status":"published","published":"2016-05-23T10:59:12.427Z","modified":"2026-04-16T06:24:15.430294121Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"DEBIAN-CVE-2016-4794","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","status":"published","published":"2016-05-23T10:59:12.427Z","modified":"2026-09-22T07:02:07.085258429Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"RHSA-2016:2574","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:11:47Z","modified":"2026-06-29T10:14:20Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2584","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T14:37:33Z","modified":"2026-06-29T10:14:22Z","cvss":[{"version":"3.0","score":8.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-4794","description":"Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.","status":"published","published":"2016-05-23T00:00:00Z","modified":"2026-04-22T10:46:42.650248Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"MGASA-2016-0271","title":"Updated kernel packages fix security vulnerability","description":"This update is based on the upstream 4.4.16 kernel and fixes at least theese\nsecurity issues:\n\nnfsd in the Linux kernel through 4.6.3 allows local users to bypass intended\nfile-permission restrictions by setting a POSIX ACL, related to nfs2acl.c,\nnfs3acl.c, and nfs4acl.c. (CVE-2016-1237).\n\nThe ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux\nkernel before 4.6.3 allows  local users to gain privileges or cause a denial\nof service (stack memory consumption) via vectors involving crafted mmap\ncalls for /proc pathnames, leading to recursive pagefault handling\n(CVE-2016-1583). \n\nThe key_reject_and_link function in security/keys/key.c in the Linux kernel\nthrough 4.6.3 does not ensure that a certain data structure is initialized,\nwhich allows local users to cause a denial of service (system crash) via\nvectors involving a crafted keyctl request2 command (CVE-2016-4470).\n\nUse-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6\nallows local users to cause a denial of service (BUG) or possibly have\nunspecified other impact via crafted use of the mmap and bpf system calls\n(CVE-2016-4794).\n\nThe tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel\nthrough 4.6 does not verify socket existence, which allows local users to\ncause a denial of service (NULL pointer dereference and system crash) or\npossibly have unspecified other impact via a dumpit operation\n(CVE-2016-4951).\n\nThe compat IPT_SO_SET_REPLACE setsockopt implementation in the netfilter\nsubsystem in the Linux kernel before 4.6.3 allows local users to gain\nprivileges or cause a denial of service (memory corruption) by leveraging\nin-container root access to provide a crafted offset value that triggers\nan unintended decrement. (CVE-2016-4997).\n\nThe IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem\nin the Linux kernel before 4.6 allows local users to cause a denial of\nservice (out-of-bounds read) or possibly obtain sensitive information from\nkernel heap memory by leveraging in-container root access to provide a\ncrafted offset value that leads to crossing a ruleset blob boundary\n(CVE-2016-4998).\n\nA flaw was found in the implementation of the Linux kernel handling of\nnetworking challenge ack where an attacker is able to determine the\nshared counter. This may allow an attacker to inject or take over a TCP\nconnection between a server and client without having to be a traditional\nMan In the Middle (MITM) style attack (CVE-2016-5696).\n\nMultiple heap-based buffer overflows in the hiddev_ioctl_usage function in\ndrivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local\nusers to cause a denial of service or possibly have unspecified other impact\nvia a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call\n(CVE-2016-5829).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2016-07-31T20:39:13Z","modified":"2026-04-16T06:25:24.30681096Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2016-0283","title":"Updated kernel-tmb packages fix security vulnerabilities","description":"This update is based on the upstream 4.4.16 kernel and fixes at least theese\nsecurity issues:\n\nnfsd in the Linux kernel through 4.6.3 allows local users to bypass intended\nfile-permission restrictions by setting a POSIX ACL, related to nfs2acl.c,\nnfs3acl.c, and nfs4acl.c. (CVE-2016-1237).\n\nThe ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux\nkernel before 4.6.3 allows  local users to gain privileges or cause a denial\nof service (stack memory consumption) via vectors involving crafted mmap\ncalls for /proc pathnames, leading to recursive pagefault handling\n(CVE-2016-1583). \n\nThe key_reject_and_link function in security/keys/key.c in the Linux kernel\nthrough 4.6.3 does not ensure that a certain data structure is initialized,\nwhich allows local users to cause a denial of service (system crash) via\nvectors involving a crafted keyctl request2 command (CVE-2016-4470).\n\nUse-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6\nallows local users to cause a denial of service (BUG) or possibly have\nunspecified other impact via crafted use of the mmap and bpf system calls\n(CVE-2016-4794).\n\nThe tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel\nthrough 4.6 does not verify socket existence, which allows local users to\ncause a denial of service (NULL pointer dereference and system crash) or\npossibly have unspecified other impact via a dumpit operation\n(CVE-2016-4951).\n\nThe compat IPT_SO_SET_REPLACE setsockopt implementation in the netfilter\nsubsystem in the Linux kernel before 4.6.3 allows local users to gain\nprivileges or cause a denial of service (memory corruption) by leveraging\nin-container root access to provide a crafted offset value that triggers\nan unintended decrement. (CVE-2016-4997).\n\nThe IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem\nin the Linux kernel before 4.6 allows local users to cause a denial of\nservice (out-of-bounds read) or possibly obtain sensitive information from\nkernel heap memory by leveraging in-container root access to provide a\ncrafted offset value that leads to crossing a ruleset blob boundary\n(CVE-2016-4998).\n\nA flaw was found in the implementation of the Linux kernel handling of\nnetworking challenge ack where an attacker is able to determine the\nshared counter. This may allow an attacker to inject or take over a TCP\nconnection between a server and client without having to be a traditional\nMan In the Middle (MITM) style attack (CVE-2016-5696).\n\nMultiple heap-based buffer overflows in the hiddev_ioctl_usage function in\ndrivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local\nusers to cause a denial of service or possibly have unspecified other impact\nvia a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call\n(CVE-2016-5829).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2016-08-31T15:32:33Z","modified":"2026-04-16T06:23:29.057382783Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2016-0284","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This update is based on the upstream 4.4.16 kernel and fixes at least theese\nsecurity issues:\n\nnfsd in the Linux kernel through 4.6.3 allows local users to bypass intended\nfile-permission restrictions by setting a POSIX ACL, related to nfs2acl.c,\nnfs3acl.c, and nfs4acl.c. (CVE-2016-1237).\n\nThe ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux\nkernel before 4.6.3 allows  local users to gain privileges or cause a denial\nof service (stack memory consumption) via vectors involving crafted mmap\ncalls for /proc pathnames, leading to recursive pagefault handling\n(CVE-2016-1583). \n\nThe key_reject_and_link function in security/keys/key.c in the Linux kernel\nthrough 4.6.3 does not ensure that a certain data structure is initialized,\nwhich allows local users to cause a denial of service (system crash) via\nvectors involving a crafted keyctl request2 command (CVE-2016-4470).\n\nUse-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6\nallows local users to cause a denial of service (BUG) or possibly have\nunspecified other impact via crafted use of the mmap and bpf system calls\n(CVE-2016-4794).\n\nThe tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel\nthrough 4.6 does not verify socket existence, which allows local users to\ncause a denial of service (NULL pointer dereference and system crash) or\npossibly have unspecified other impact via a dumpit operation\n(CVE-2016-4951).\n\nThe compat IPT_SO_SET_REPLACE setsockopt implementation in the netfilter\nsubsystem in the Linux kernel before 4.6.3 allows local users to gain\nprivileges or cause a denial of service (memory corruption) by leveraging\nin-container root access to provide a crafted offset value that triggers\nan unintended decrement. (CVE-2016-4997).\n\nThe IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem\nin the Linux kernel before 4.6 allows local users to cause a denial of\nservice (out-of-bounds read) or possibly obtain sensitive information from\nkernel heap memory by leveraging in-container root access to provide a\ncrafted offset value that leads to crossing a ruleset blob boundary\n(CVE-2016-4998).\n\nMultiple heap-based buffer overflows in the hiddev_ioctl_usage function in\ndrivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local\nusers to cause a denial of service or possibly have unspecified other impact\nvia a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call\n(CVE-2016-5829).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2016-08-31T15:32:33Z","modified":"2026-04-16T06:24:34.677678636Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"USN-3053-1","title":"linux-lts-vivid vulnerabilities","description":"A missing permission check when settings ACLs was discovered in nfsd. A\nlocal user could exploit this flaw to gain access to any file by setting an\nACL. (CVE-2016-1237)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:42:07Z","modified":"2026-02-10T04:41:01Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3054-1","title":"linux-lts-xenial vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:47:56Z","modified":"2026-02-10T04:41:01Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3055-1","title":"linux vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:52:53Z","modified":"2026-04-22T09:27:20.442087Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3056-1","title":"linux-raspi2 vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:55:21Z","modified":"2026-02-10T04:41:01Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3057-1","title":"linux-snapdragon vulnerabilities","description":"Ben Hawkes discovered an integer overflow in the Linux netfilter\nimplementation. On systems running 32 bit kernels, a local unprivileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code with administrative privileges.\n(CVE-2016-3135)\n\nIt was discovered that the keyring implementation in the Linux kernel did\nnot ensure a data structure was initialized before referencing it after an\nerror condition occurred. A local attacker could use this to cause a denial\nof service (system crash). (CVE-2016-4470)\n\nSasha Levin discovered that a use-after-free existed in the percpu\nallocator in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code with\nadministrative privileges. (CVE-2016-4794)\n\nKangjie Lu discovered an information leak in the netlink implementation of\nthe Linux kernel. A local attacker could use this to obtain sensitive\ninformation from kernel memory. (CVE-2016-5243)\n","status":"published","published":"2016-08-10T10:58:33Z","modified":"2026-02-10T04:41:01Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}