p PatchFirst

CVE-2016-4558

CVE-2016-4558

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted application on (1) a system with more than 32 Gb of memory, related to the program reference count or (2) a 1 Tb system, related to the map reference count.

CVSS 7.0 · High · EPSS 0.9% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.5.3-1

    Update to 4.5.3-1

  • linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.5.3-1

    Update to 4.5.3-1

  • linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.5.3-1

    Update to 4.5.3-1

  • linux-lts-xenial Ubuntu:14.04:LTS

    Versions
    • 4.4.0-13.29~14.04.1
    • 4.4.0-14.30~14.04.2
    • 4.4.0-15.31~14.04.1
    • 4.4.0-18.34~14.04.1
    • 4.4.0-21.37~14.04.1
    • 4.4.0-22.39~14.04.1
    • 4.4.0-22.40~14.04.1
    Affected ranges
    • ECOSYSTEM: < 4.4.0-24.43~14.04.1

    Update to 4.4.0-24.43~14.04.1

  • linux Ubuntu:16.04:LTS

    Versions
    • 4.2.0-16.19
    • 4.2.0-17.21
    • 4.2.0-19.23
    • 4.3.0-1.10
    • 4.3.0-2.11
    • 4.3.0-5.16
    • 4.3.0-6.17
    • 4.3.0-7.18
    • 4.4.0-2.16
    • 4.4.0-4.19
    • 4.4.0-6.21
    • 4.4.0-7.22
    • 4.4.0-8.23
    • 4.4.0-9.24
    • 4.4.0-10.25
    • 4.4.0-11.26
    • 4.4.0-12.28
    • 4.4.0-13.29
    • 4.4.0-14.30
    • 4.4.0-15.31
    • 4.4.0-16.32
    • 4.4.0-17.33
    • 4.4.0-18.34
    • 4.4.0-21.37
    • 4.4.0-22.39
    • 4.4.0-22.40
    Affected ranges
    • ECOSYSTEM: < 4.4.0-24.43

    Update to 4.4.0-24.43

  • linux-raspi2 Ubuntu:16.04:LTS

    Versions
    • 4.2.0-1013.19
    • 4.2.0-1014.21
    • 4.3.0-1006.6
    • 4.4.0-1003.4
    • 4.4.0-1004.5
    • 4.4.0-1009.10
    • 4.4.0-1010.12
    • 4.4.0-1010.13
    Affected ranges
    • ECOSYSTEM: < 4.4.0-1012.16

    Update to 4.4.0-1012.16

  • linux-snapdragon Ubuntu:16.04:LTS

    Versions
    • 4.4.0-1012.12
    • 4.4.0-1013.14
    • 4.4.0-1013.15
    Affected ranges
    • ECOSYSTEM: < 4.4.0-1015.18

    Update to 4.4.0-1015.18

Original sources

Check your server →