CVE-2016-3699
Fixed in a distro release EPSS <1%
The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.
Products: linux_kernel, redhat enterprise_mrg, redhat linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | hyperv-daemons-6.18 | 0 |
| Chainguard | linux-aws-6.12 | 0 |
| Chainguard | linux-aws-6.12 | 6.12.65-r0 |
| Chainguard | linux-aws-6.12-boot-installed | 0 |
| Chainguard | linux-aws-6.12-fips-boot-installed | 0 |
| Chainguard | linux-aws-6.12-headers | 0 |
| Chainguard | linux-aws-6.12-modules | 0 |
| Chainguard | linux-aws-6.18 | 6.18.10-r0 |
| Chainguard | linux-aws-6.18 | 0 |
| Chainguard | linux-aws-6.18-boot-installed | 0 |
| Chainguard | linux-aws-6.18-fips-boot-installed | 0 |
| Chainguard | linux-aws-6.18-headers | 0 |
| Chainguard | linux-aws-6.18-modules | 0 |
| Chainguard | linux-aws-generic-boot-installed | 0 |
| Chainguard | linux-aws-generic-modules | 0 |
| Chainguard | linux-azure-6.12 | 6.12.65-r1 |
| Chainguard | linux-azure-6.12 | 0 |
| Chainguard | linux-azure-6.18 | 0 |
| Chainguard | linux-azure-6.18-boot-installed | 0 |
| Chainguard | linux-azure-6.18-fips-boot-installed | 0 |
| Chainguard | linux-azure-6.18-headers | 0 |
| Chainguard | linux-azure-6.18-modules | 0 |
| Chainguard | linux-azure-generic-modules | 0 |
| Chainguard | linux-desktop-6.18 | no fix |
| Chainguard | linux-desktop-6.18-bootc | no fix |
| Chainguard | linux-desktop-6.18-bootc-boot-installed | no fix |
| Chainguard | linux-desktop-6.18-headers | no fix |
| Chainguard | linux-desktop-6.18-modules | no fix |
| Chainguard | linux-desktop-7.2 | no fix |
| Chainguard | linux-desktop-7.2-bootc | no fix |
| Chainguard | linux-desktop-7.2-bootc-boot-installed | no fix |
| Chainguard | linux-desktop-7.2-headers | no fix |
| Chainguard | linux-desktop-7.2-modules | no fix |
| Chainguard | linux-firecracker-6.18 | no fix |
| Chainguard | linux-gcp-6.12 | 6.12.65-r0 |
| Chainguard | linux-gcp-6.12 | 0 |
| Chainguard | linux-gcp-6.18 | 0 |
| Chainguard | linux-gcp-6.18 | 6.18.10-r0 |
| Chainguard | linux-gcp-6.18-boot-installed | 0 |
| Chainguard | linux-gcp-6.18-fips-boot-installed | 0 |
| Chainguard | linux-gcp-6.18-headers | 0 |
| Chainguard | linux-gcp-6.18-modules | 0 |
| Chainguard | linux-gcp-generic-modules | 0 |
| Chainguard | linux-microvm-6.18 | no fix |
| Chainguard | linux-microvm-6.18-image-compressed | no fix |
| Chainguard | linux-microvm-6.18-image-uncompressed | no fix |
| Chainguard | linux-microvm-6.18-loadpin-test | no fix |
| Chainguard | linux-microvm-6.18-modules | no fix |
| Chainguard | linux-microvm-7.3 | no fix |
| Chainguard | linux-microvm-7.3-image-compressed | no fix |
| Chainguard | linux-microvm-7.3-image-uncompressed | no fix |
| Chainguard | linux-microvm-7.3-modules | no fix |
| Chainguard | linux-qemu-6.12 | 6.12.71-r0 |
| Chainguard | linux-qemu-6.18 | 6.18.10-r0 |
| Chainguard | linux-qemu-generic | 0 |
| Chainguard | linux-qemu-generic | 6.18.5-r0 |
| Chainguard | linux-qemu-melange | 6.18.16-r0 |
| Chainguard | linux-qemu-rc | 6.19_rc5-r0 |
| Chainguard | linux-qemu-rc | 6.19_rc1-r0 |
| Chainguard | linux-qemu-rc | 6.18_rc7-r2 |
| Chainguard | linux-qemu-rc | 6.19_rc2-r0 |
| Chainguard | linux-qemu-rc | 6.19_rc1-r2 |
| Chainguard | linux-qemu-rc | 6.18_rc5-r0 |
| Chainguard | linux-qemu-rc | 6.18_rc6-r0 |
| Chainguard | linux-qemu-rc | 6.19_rc1-r1 |
| Chainguard | linux-qemu-rc | 6.18_rc7-r3 |
| Chainguard | linux-qemu-rc | 6.18_rc5-r1 |
| Chainguard | linux-qemu-rc | 6.19_rc3-r0 |
| Chainguard | linux-qemu-rc | 6.19_rc4-r0 |
| Chainguard | linux-qemu-rc | 0 |
| Chainguard | linux-qemu-rc-boot-installed | 0 |
| Chainguard | linux-qemu-rc-fips-boot-installed | 0 |
| Chainguard | linux-qemu-rc-headers | 0 |
| Chainguard | linux-qemu-rc-modules | 0 |
| Chainguard | linux-raspberry-pi | no fix |
| Chainguard | linux-raspberry-pi-4 | no fix |
| Chainguard | linux-raspberry-pi-4-boot-configuration | no fix |
| Chainguard | linux-raspberry-pi-4-bootc | no fix |
| Chainguard | linux-raspberry-pi-boot-configuration | no fix |
| Chainguard | linux-raspberry-pi-bootc | no fix |
| Chainguard | linux-server-7.2 | no fix |
| Chainguard | linux-server-7.2-bootc | no fix |
| Chainguard | linux-server-7.2-bootc-boot-installed | no fix |
| Chainguard | linux-server-7.2-headers | no fix |
| Chainguard | linux-server-7.2-modules | no fix |
| Chainguard | linux-vmware-6.12 | 6.12.71-r0 |
| Chainguard | linux-vmware-6.18 | 6.18.10-r0 |
| Red Hat Enterprise Linux 7 | kernel | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-abi-whitelists | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-bootwrapper | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-debuginfo | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debug-devel | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64 | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-ppc64le | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-s390x | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-debuginfo-common-x86_64 | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-devel | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-doc | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-headers | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-debuginfo | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-kdump-devel | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-debuginfo | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | kernel-tools-libs-devel | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | perf | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | perf-debuginfo | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | python-perf | 0:3.10.0-514.el7 |
| Red Hat Enterprise Linux 7 | python-perf-debuginfo | 0:3.10.0-514.el7 |
| Red Hat rhel extras rt 7 | kernel-rt | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-debuginfo | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-devel | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debug-kvm-debuginfo | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-debuginfo-common-x86_64 | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-devel | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-doc | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-kvm-debuginfo | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-debuginfo | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-devel | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm | 0:3.10.0-514.rt56.420.el7 |
| Red Hat rhel extras rt 7 | kernel-rt-trace-kvm-debuginfo | 0:3.10.0-514.rt56.420.el7 |