CVE-2016-4805

Published: May 23, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.

Affected (28)

Products: Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Workstation Extension, Suse Linux Enterprise Server, Suse Linux Enterprise Module For Public Cloud, Opensuse Leap, Suse Linux Enterprise Software Development Kit, Suse Linux Enterprise Real Time Extension, Suse Linux Enterprise Live Patching · Redhat: Enterprise Linux · Canonical: Ubuntu Linux · +2 more

Show all products

Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Workstation Extension, Suse Linux Enterprise Server, Suse Linux Enterprise Module For Public Cloud, Opensuse Leap, Suse Linux Enterprise Software Development Kit, Suse Linux Enterprise Real Time Extension, Suse Linux Enterprise Live Patching · Redhat: Enterprise Linux · Canonical: Ubuntu Linux · Linux: Linux Kernel · Oracle: Linux

Novell

8 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise Workstation Extension

Suse Linux Enterprise Server

Suse Linux Enterprise Module For Public Cloud

Opensuse Leap

Suse Linux Enterprise Software Development Kit

Suse Linux Enterprise Real Time Extension

Suse Linux Enterprise Live Patching

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Desktop	Version 12.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Workstation Extension	Version 12.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Server	Version 11.0 sp4

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Module For Public Cloud	Version 12.0

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Novell Opensuse Leap	Version 42.1

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Software Development Kit	Version 11.0 sp4

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04

Configuration J

9 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	2.6.30 ≤ version < 3.2.80
Linux Linux Kernel	3.11 ≤ version < 3.12.59
Linux Linux Kernel	3.13 ≤ version < 3.14.67
Linux Linux Kernel	3.15 ≤ version < 3.16.35
Linux Linux Kernel	3.17 ≤ version < 3.18.37
Linux Linux Kernel	3.19 ≤ version < 4.1.28
Linux Linux Kernel	3.3 ≤ version < 3.10.102
Linux Linux Kernel	4.2 ≤ version < 4.4.8
Linux Linux Kernel	4.5 ≤ version < 4.5.2

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Software Development Kit	Version 12.0

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Workstation Extension	Version 12.0 sp1

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Server	Version 12.0

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Desktop	Version 12.0 sp1

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 7.0

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Real Time Extension	Version 11.0 sp4

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Server	Version 12.0 sp1

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Real Time Extension	Version 12.0 sp1

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Software Development Kit	Version 12.0 sp1

Configuration U

1 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Live Patching	Version 12.0

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (38)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89

Source: cve@mitre.org

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

Source: cve@mitre.org

Mailing ListRelease NotesThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

Source: cve@mitre.org

Mailing ListRelease NotesThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

Source: cve@mitre.org

Mailing ListRelease NotesThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.debian.org/security/2016/dsa-3607

Source: cve@mitre.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2

Source: cve@mitre.org

Mailing ListVendor Advisory

http://www.openwall.com/lists/oss-security/2016/05/15/2

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/90605

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036763

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3021-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-3021-2

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1335803

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/1f461dcdd296eecedaffffc6bae2bfa90bd7eb89

Source: cve@mitre.org

PatchThird Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89