CVE-2016-4580: Infoleak

Q: What is CVE-2016-4580?

CVE-2016-4580 is a vulnerability in the Linux kernel that allows attackers to obtain sensitive information from kernel stack memory.

Q: How does CVE-2016-4580 work?

CVE-2016-4580 works by exploiting a flaw in the x25_negotiate_facilities function in the Linux kernel before version 4.5.5.

Q: What is the severity of CVE-2016-4580?

The severity of CVE-2016-4580 is high.

Q: Which versions of Ubuntu are affected by CVE-2016-4580?

Versions 3.2.0-105.146, 3.13.0-91.138, 4.2.0-41.48, 4.4.0-28.47, and 4.6 of the Linux kernel in Ubuntu are affected.

Q: How can I fix CVE-2016-4580?

To fix CVE-2016-4580, you should update your Linux kernel to version 4.5.5 or later.

Published May 23, 2016

Updated

Last updated 24 July 2024

Other sources

The x25negotiatefacilities function in net/x25/x25facilities.c in t ...

— Debian

Affected Software

6 affected componentsFixes available

Linux Linux kernel<=4.5.4

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=15.10

Canonical Ubuntu Linux=16.04

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.3-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1
Upgrade
Upgrade Linux kernel to a version that resolves this vulnerability.
Fixed in 4.5.5

Event History

May 23, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

DSA-3607

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-516-1

Frequently Asked Questions

What is CVE-2016-4580?