CVE-2016-4565

Published: May 23, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.

Affected (14)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux

1 product

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.81
Linux Linux Kernel	From 3.11 to 3.12.61
Linux Linux Kernel	From 3.13 to 3.14.76
Linux Linux Kernel	From 3.15 to 3.16.36
Linux Linux Kernel	From 3.17 to 3.18.34
Linux Linux Kernel	From 3.19 to 4.1.25
Linux Linux Kernel	From 3.3 to 3.10.103
Linux Linux Kernel	From 4.2 to 4.4.9
Linux Linux Kernel	From 4.5 to 4.5.3

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Related CWEs

CWE-264

References (106)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3

Source: security@debian.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html

Source: security@debian.org

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1489.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1581.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1617.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1640.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1657.html

Source: security@debian.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1814.html

Source: security@debian.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3607

Source: security@debian.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3

Source: security@debian.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2016/05/07/1

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: security@debian.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: security@debian.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: security@debian.org

Third Party Advisory

http://www.securityfocus.com/bid/90301

Source: security@debian.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3001-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3002-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3003-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3004-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3005-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3006-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3007-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3018-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3018-2

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3019-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3021-1

Source: security@debian.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3021-2

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1277

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1301

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1341

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2016:1406

Source: security@debian.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1310570

Source: security@debian.org

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3

Source: security@debian.org

Vendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3