GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
usn-3002-1
Vulnerability from osv_ubuntu
Published
2016-06-10 05:42
Modified
2026-02-10 04:41
Summary
linux-lts-wily vulnerabilities
Details

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-2117)

Jann Horn discovered that eCryptfs improperly attempted to use the mmap() handler of a lower filesystem that did not implement one, causing a recursive page fault to occur. A local unprivileged attacker could use to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-1583)

Jason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB over wifi device drivers in the Linux kernel. A remote attacker could use this to cause a denial of service (system crash) or obtain potentially sensitive information from kernel memory. (CVE-2015-4004)

Ralf Spenneberg discovered that the Linux kernel's GTCO digitizer USB device driver did not properly validate endpoint descriptors. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-2187)

Hector Marco and Ismael Ripoll discovered that the Linux kernel would improperly disable Address Space Layout Randomization (ASLR) for x86 processes running in 32 bit mode if stack-consumption resource limits were disabled. A local attacker could use this to make it easier to exploit an existing vulnerability in a setuid/setgid program. (CVE-2016-3672)

Andrey Konovalov discovered that the CDC Network Control Model USB driver in the Linux kernel did not cancel work events queued if a later error occurred, resulting in a use-after-free. An attacker with physical access could use this to cause a denial of service (system crash). (CVE-2016-3951)

It was discovered that an out-of-bounds write could occur when handling incoming packets in the USB/IP implementation in the Linux kernel. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2016-3955)

Vitaly Kuznetsov discovered that the Linux kernel did not properly suppress hugetlbfs support in X86 paravirtualized guests. An attacker in the guest OS could cause a denial of service (guest system crash). (CVE-2016-3961)

Kangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2 Support implementations in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-4485)

Kangjie Lu discovered an information leak in the routing netlink socket interface (rtnetlink) implementation in the Linux kernel. A local attacker could use this to obtain potentially sensitive information from kernel memory. (CVE-2016-4486)

Jann Horn discovered that the InfiniBand interfaces within the Linux kernel could be coerced into overwriting kernel memory. A local unprivileged attacker could use this to possibly gain administrative privileges on systems where InifiniBand related kernel modules are loaded. (CVE-2016-4565)

It was discovered that in some situations the Linux kernel did not handle propagated mounts correctly. A local unprivileged attacker could use this to cause a denial of service (system crash). (CVE-2016-4581)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-4004",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-1583",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-2117",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-2187",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3672",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3951",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3955",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-3961",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-4485",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-4486",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-4565",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2016-4581",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "block-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "block-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "block-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "block-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "block-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "crypto-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fat-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fb-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "floppy-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "input-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "input-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "input-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "input-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "input-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "irda-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "kernel-image-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.2.0-38-generic",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.2.0-38-lowlatency",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38-generic",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38-generic-lpae",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38-lowlatency",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38-powerpc-e500mc",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38-powerpc-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38-powerpc64-emb",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-headers-4.2.0-38-powerpc64-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-4.2.0-38-generic",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-4.2.0-38-generic-lpae",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-4.2.0-38-lowlatency",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-4.2.0-38-powerpc-e500mc",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-4.2.0-38-powerpc-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-4.2.0-38-powerpc64-emb",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-4.2.0-38-powerpc64-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-image-extra-4.2.0-38-generic",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-lts-wily-cloud-tools-4.2.0-38",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-lts-wily-tools-4.2.0-38",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-lts-wily-udebs-generic",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-lts-wily-udebs-generic-lpae",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-lts-wily-udebs-powerpc-e500mc",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-lts-wily-udebs-powerpc-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-lts-wily-udebs-powerpc64-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.2.0-38-generic",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.2.0-38-generic-lpae",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.2.0-38-lowlatency",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.2.0-38-powerpc-e500mc",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.2.0-38-powerpc-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.2.0-38-powerpc64-emb",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "linux-tools-4.2.0-38-powerpc64-smp",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "md-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "md-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "md-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "md-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "md-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "message-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "message-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "message-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "message-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "mouse-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "multipath-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nfs-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "parport-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "pata-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "pcmcia-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "plip-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "ppp-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "sata-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "scsi-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "serial-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "speakup-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "squashfs-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "usb-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "virtio-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.2.0-38-generic-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.2.0-38-generic-lpae-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.2.0-38-powerpc-e500mc-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.2.0-38-powerpc-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          },
          {
            "binary_name": "vlan-modules-4.2.0-38-powerpc64-smp-di",
            "binary_version": "4.2.0-38.45~14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "linux-lts-wily",
        "purl": "pkg:deb/ubuntu/linux-lts-wily@4.2.0-38.45~14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.0-38.45~14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.2.0-18.22~14.04.1",
        "4.2.0-19.23~14.04.1",
        "4.2.0-21.25~14.04.1",
        "4.2.0-22.27~14.04.1",
        "4.2.0-23.28~14.04.1",
        "4.2.0-25.30~14.04.1",
        "4.2.0-27.32~14.04.1",
        "4.2.0-30.35~14.04.1",
        "4.2.0-30.36~14.04.1",
        "4.2.0-34.39~14.04.1",
        "4.2.0-35.40~14.04.1",
        "4.2.0-36.41~14.04.1",
        "4.2.0-36.42~14.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel\u0027s GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n",
  "id": "USN-3002-1",
  "modified": "2026-02-10T04:41:00Z",
  "published": "2016-06-10T05:42:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3002-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4004"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-1583"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-2117"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-2187"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3672"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3951"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3955"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-3961"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-4485"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-4486"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-4565"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-4581"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "linux-lts-wily vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2015-4004",
    "UBUNTU-CVE-2016-1583",
    "UBUNTU-CVE-2016-2117",
    "UBUNTU-CVE-2016-2187",
    "UBUNTU-CVE-2016-3672",
    "UBUNTU-CVE-2016-3951",
    "UBUNTU-CVE-2016-3955",
    "UBUNTU-CVE-2016-3961",
    "UBUNTU-CVE-2016-4485",
    "UBUNTU-CVE-2016-4486",
    "UBUNTU-CVE-2016-4565",
    "UBUNTU-CVE-2016-4581"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.