CVE-2016-4951
Fixed in a distro release EPSS <1%
The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a dumpit operation.
Products: linux_kernel, canonical ubuntu_linux, oracle linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.5.5-1 |
| Debian 13 | linux | 4.5.5-1 |
| Debian 14 | linux | 4.5.5-1 |
| Ubuntu 14.04 LTS | linux-lts-vivid | 3.19.0-64.72~14.04.1 |
| Ubuntu 14.04 LTS | linux-lts-wily | 4.2.0-41.48~14.04.1 |
| Ubuntu 14.04 LTS | linux-lts-xenial | 4.4.0-28.47~14.04.1 |
| Ubuntu 16.04 LTS | linux | 4.4.0-28.47 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1016.22 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1019.22 |
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 |