CVE-2016-4486
LOWNovell Suse Linux Enterprise Software... - Information Disclosure
Title source: ruleDescription
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.
Exploits (1)
References (29)
... and 9 more
Scores
CVSS v3
3.3
EPSS
0.0052
EPSS Percentile
66.9%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (15)
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
15.10
canonical/ubuntu_linux
16.04
linux/linux_kernel
< 4.5.4
novell/suse_linux_enterprise_debuginfo
11.0 sp4
novell/suse_linux_enterprise_desktop
12.0 (2 CPE variants)
novell/suse_linux_enterprise_live_patching
12.0
novell/suse_linux_enterprise_module_for_public_cloud
12.0
novell/suse_linux_enterprise_real_time_extension
12.0 sp1
... and 5 more
Published
May 23, 2016
Tracked Since
Feb 18, 2026