CVE-2016-5728: Race Condition
Published Jun 27, 2016
·Updated
Last updated 24 July 2024
Other sources
Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (memory corruption and system crash) by changing a certain header, aka a "double fetch" vulnerability.
Affected Software
3 affected componentsFixes available
Debian Debian Linux=8.0
Linux Linux kernel<=4.6
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Remediation
Event History
Jun 27, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:20 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:16 AM
RemedyDescriptionSeverityAffected Software
Mar 31, 2025
Data Sourced
via Debian·03:30 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this race condition in the Linux kernel?
The vulnerability ID for this race condition in the Linux kernel is CVE-2016-5728.
2
What is the severity of CVE-2016-5728?
The severity of CVE-2016-5728 is high.
3
Which versions of the Linux kernel are affected by CVE-2016-5728?
Versions of the Linux kernel before 4.6.1 are affected by CVE-2016-5728.
4
How can a local user exploit this vulnerability?
A local user can exploit this vulnerability by changing a certain header in the MIC VOP driver in the Linux kernel.
5
How do I fix CVE-2016-5728?
To fix CVE-2016-5728, update the Linux kernel to version 4.6.1 or later.