← Back

CVE-2016-3699

nvd nist
Published: Oct 7, 2016Modified: May 6, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.4 / Impact: 5.9
Source: NVD

Description

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

Affected (3)

Linux
1 product
Linux Kernel
Redhat
2 products
Enterprise Mrg
Linux
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
All versions
Enterprise Mrg
Version 2.0
Linux
Version 7.2

Related CWEs

CWE-264
CWE-264

References (12)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Broken Link
Source: secalert@redhat.com
Issue TrackingPatchThird Party AdvisoryVDB Entry
Source: secalert@redhat.com
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.