CVE-2016-3135: canonical ubuntu_linux Numeric Errors
Vulnerability summary
CVE-2016-3135 is a high (CVSS 7.8) Numeric Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 1.00% chance of exploitation in the next 30 days, higher than 62.2% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 27-04-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.
CVSS metrics
5 scores · 3 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
1.00%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
0.00 pp
From 1.00% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundLinux Kernel 3.10/3.18 /4.4 - Netfilter IPT_SO_SET_REPLACE Memory Corruption
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Ubuntu5 products
- linux< 4.4.0-34.53
- linux-lts-wily< 4.2.0-34.39~14.04.1
- linux-lts-xenial< 4.4.0-34.53~14.04.1
- linux-raspi2< 4.4.0-1019.25
- linux-snapdragon< 4.4.0-1022.25
Canonical1 product
- ubuntu_linuxEOL14.04 | 15.10 | 16.04
Debian1 product
- linux< 4.4.6-1
Linux1 product
- linux_kernel≥ 4.2, < 4.4.21 | ≥ 4.5, < 4.6
4 vendors · 8 products
References
24 links- github.com/torvalds/linux/commit/d157bd761585605b7882935ffb86286919f62ea1X Refsource CONFIRM
- git.kernel.org/cgit/…X Refsource CONFIRM
- bugzilla.redhat.com/show_bug.cgi?id=1317386X Refsource CONFIRM
