CVE-2016-2782: linux linux_kernel NULL Pointer Dereference

EPSS trend

Probability

1.65%

Chance of exploitation in the next 30 days

Percentile

76%

Versus all other CVEs

30-day change

0.00 pp

From 1.65% on 18-09-2026

18-09-202618-10-2026

EPSS score

1.65%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
exploit-databasedoslinuxUnverified
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - visor 'treo_attach' Nullpointer Dereference
Maturity: poc

References

33 links

lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2930-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-2967-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
git.kernel.org/cgit/…X Refsource CONFIRMIssue TrackingPatchVendor Advisory
github.com/torvalds/linux/commit/cac9b50b0d75a1d50d6c056ff65c005f3224c8e0X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
www.ubuntu.com/usn/USN-2930-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.exploit-db.com/exploits/39539/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2967-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2930-3Vendor AdvisoryX Refsource UBUNTUThird Party Advisory

Show all 33 references

www.openwall.com/lists/oss-security/2016/02/28/9Mailing ListX Refsource MLISTThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.ubuntu.com/usn/USN-2929-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-2932-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2948-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1312670X Refsource CONFIRMExploitIssue TrackingThird Party Advisory
www.ubuntu.com/usn/USN-2929-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-2948-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
ubuntu.com/security/CVE-2016-2782REPORT
ubuntu.com/security/notices/USN-2932-1Advisory
ubuntu.com/security/notices/USN-2930-1Advisory
ubuntu.com/security/notices/USN-2930-2Advisory
ubuntu.com/security/notices/USN-2929-2Advisory
ubuntu.com/security/notices/USN-2929-1Advisory
ubuntu.com/security/notices/USN-2930-3Advisory
ubuntu.com/security/notices/USN-2948-1Advisory
ubuntu.com/security/notices/USN-2967-2Advisory
ubuntu.com/security/notices/USN-2967-1Advisory
www.cve.org/CVERecord?id=CVE-2016-2782REPORT
security-tracker.debian.org/tracker/CVE-2016-2782Advisory

Related vulnerabilities

CVE-2018-5390a10networksadvanced_core_operating_system+10071.11%8y ago06-08-2018 20:00Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.CVE-2018-10195debianlrzsz+130.39%5y ago02-06-2021 13:54lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.CVE-2013-2728adobeadobe_air+95.32%13y ago16-05-2013 10:00Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.CVE-2013-2729adobeacrobat+7KEV66.55%13y ago16-05-2013 10:00Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.CVE-2013-2555adobeair+88.46%13y ago11-03-2013 10:00Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.CVE-2013-1690canonicalubuntu_linux+14KEV69.02%13y ago26-06-2013 01:00Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.

All vulnerabilities inlinux_kernel linux_enterprise_debuginfo linux_enterprise_desktop linux_enterprise_module_for_public_cloud linux_enterprise_real_time_extension

CVE-2016-2782: linux linux_kernel NULL Pointer Dereference

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References