ubuntu · CVE-2016-4486

Quick triage

Priority: medium Published: 2016-05-23 00:00:00 UTC Updated: 2025-09-25 10:10:20 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-4486 medium priority: Ubuntu including 99 source packages (linux, linux-armadaxp, …), 828 status rows across 13 suites (artful, bionic, focal, jammy, noble, plucky, precise, trusty, upstream, wily, xenial, yakkety, zesty): DNE 549, not-affected 133, released 113, ignored 33.

Description:

The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.

cvelogic Threat Intelligence