CVE-2016-3699: linux linux_kernel

CVSS: 7.4v3.0HighModified

AliasesCGA-2225-mcx2-cgc5CGA-22jf-vf3w-prhcCGA-239q-xg32-25q7+158 more

Published 07-10-2016Last modified 06-08-2024

Vulnerability summary

CVE-2016-3699 is a high (CVSS 7.4) vulnerability in linux linux_kernel. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 41.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

40/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.4/10

010

High · v3.0 (NVD)

EPSS score

0.50%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

RHSA-2016:2574 RHSA-2016:2584 CGA-57QX-6G3M-PQ7M

Timeline

07-10-2016
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.07.4v2.06.9

EPSS trend

Probability

0.50%

Chance of exploitation in the next 30 days

Percentile

41%

Versus all other CVEs

30-day change

0.00 pp

From 0.50% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

githubUnverified
Linux
Maturity: poc

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Chainguard78 products

hyperv-daemons-6.18All versions (No fix recorded)
hyperv-daemons-genericAll versions (No fix recorded)
linux-aws-6.12All versions (No fix recorded) | < 6.12.65-r0
linux-aws-6.12-boot-installedAll versions (No fix recorded)
linux-aws-6.12-fips-boot-installedAll versions (No fix recorded)

linux-aws-6.12-headersAll versions (No fix recorded)
linux-aws-6.12-modulesAll versions (No fix recorded)
linux-aws-6.18< 6.18.10-r0 | All versions (No fix recorded)
linux-aws-6.18-boot-installedAll versions (No fix recorded)
linux-aws-6.18-fips-boot-installedAll versions (No fix recorded)
linux-aws-6.18-headersAll versions (No fix recorded)
linux-aws-6.18-modulesAll versions (No fix recorded)
linux-aws-generic< 6.18.5-r0 | All versions (No fix recorded)
linux-aws-generic-boot-installedAll versions (No fix recorded)
linux-aws-generic-fips-boot-installedAll versions (No fix recorded)
linux-aws-generic-headersAll versions (No fix recorded)
linux-aws-generic-modulesAll versions (No fix recorded)
linux-azure-6.12< 6.12.65-r1 | All versions (No fix recorded)
linux-azure-6.18All versions (No fix recorded)
linux-azure-6.18-boot-installedAll versions (No fix recorded)
linux-azure-6.18-fips-boot-installedAll versions (No fix recorded)
linux-azure-6.18-headersAll versions (No fix recorded)
linux-azure-6.18-modulesAll versions (No fix recorded)
linux-azure-generic< 6.18.5-r0 | All versions (No fix recorded)
linux-azure-generic-boot-installedAll versions (No fix recorded)
linux-azure-generic-fips-boot-installedAll versions (No fix recorded)
linux-azure-generic-headersAll versions (No fix recorded)
linux-azure-generic-modulesAll versions (No fix recorded)
linux-desktop-6.18All versions (No fix recorded)
linux-desktop-6.18-bootcAll versions (No fix recorded)
linux-desktop-6.18-bootc-boot-installedAll versions (No fix recorded)
linux-desktop-6.18-headersAll versions (No fix recorded)
linux-desktop-6.18-modulesAll versions (No fix recorded)
linux-desktop-7.2All versions (No fix recorded)
linux-desktop-7.2-bootcAll versions (No fix recorded)
linux-desktop-7.2-bootc-boot-installedAll versions (No fix recorded)
linux-desktop-7.2-headersAll versions (No fix recorded)
linux-desktop-7.2-modulesAll versions (No fix recorded)
linux-firecracker-6.18All versions (No fix recorded)
linux-gcp-6.12< 6.12.65-r0 | All versions (No fix recorded)
linux-gcp-6.18< 6.18.10-r0 | All versions (No fix recorded)
linux-gcp-6.18-boot-installedAll versions (No fix recorded)
linux-gcp-6.18-fips-boot-installedAll versions (No fix recorded)
linux-gcp-6.18-headersAll versions (No fix recorded)
linux-gcp-6.18-modulesAll versions (No fix recorded)
linux-gcp-genericAll versions (No fix recorded) | < 6.18.5-r0
linux-gcp-generic-boot-installedAll versions (No fix recorded)
linux-gcp-generic-fips-boot-installedAll versions (No fix recorded)
linux-gcp-generic-headersAll versions (No fix recorded)
linux-gcp-generic-modulesAll versions (No fix recorded)
linux-microvm-6.18All versions (No fix recorded)
linux-microvm-6.18-image-compressedAll versions (No fix recorded)
linux-microvm-6.18-image-uncompressedAll versions (No fix recorded)
linux-microvm-6.18-modulesAll versions (No fix recorded)
linux-qemu-6.12< 6.12.71-r0
linux-qemu-6.18< 6.18.10-r0
linux-qemu-generic< 6.18.5-r0 | All versions (No fix recorded)
linux-qemu-generic-bootc-boot-installed< 6.18.5-r0
linux-qemu-melange< 6.18.16-r0
linux-qemu-rc< 6.18_rc7-r2 | < 6.19_rc1-r1 | < 6.18_rc5-r1 | < 6.19_rc1-r2 | < 6.19_rc4-r0 | < 6.19_rc3-r0 | < 6.19_rc2-r0 | < 6.18_rc5-r0 | < 6.18_rc7-r3 | < 6.18_rc6-r0 | < 6.19_rc5-r0 | < 6.19_rc1-r0 | All versions (No fix recorded)
linux-qemu-rc-boot-installedAll versions (No fix recorded)
linux-qemu-rc-fips-boot-installedAll versions (No fix recorded)
linux-qemu-rc-headersAll versions (No fix recorded)
linux-qemu-rc-modulesAll versions (No fix recorded)
linux-raspberry-piAll versions (No fix recorded)
linux-raspberry-pi-4All versions (No fix recorded)
linux-raspberry-pi-4-boot-configurationAll versions (No fix recorded)
linux-raspberry-pi-4-bootcAll versions (No fix recorded)
linux-raspberry-pi-boot-configurationAll versions (No fix recorded)
linux-raspberry-pi-bootcAll versions (No fix recorded)
linux-server-7.2All versions (No fix recorded)
linux-server-7.2-bootcAll versions (No fix recorded)
linux-server-7.2-bootc-boot-installedAll versions (No fix recorded)
linux-server-7.2-headersAll versions (No fix recorded)
linux-server-7.2-modulesAll versions (No fix recorded)
linux-vmware-6.12< 6.12.71-r0
linux-vmware-6.18< 6.18.10-r0
linux-vmware-generic< 6.18.5-r0 | All versions (No fix recorded)

Show all 78

Redhat2 products

enterprise_mrg2.0
linux7.2

Linux1 product

linux_kernelna

3 vendors · 81 products

References

6 links

bugzilla.redhat.com/show_bug.cgi?id=1329653X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryVDB EntryFIX
github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76X Refsource MISCExploitEVIDENCE
www.openwall.com/lists/oss-security/2016/09/22/4Mailing ListX Refsource MLISTThird Party AdvisoryAdvisory
rhn.redhat.com/errata/RHSA-2016-2584.htmlVendor AdvisoryX Refsource REDHATAdvisory
rhn.redhat.com/errata/RHSA-2016-2574.htmlVendor AdvisoryX Refsource REDHATAdvisory
www.securityfocus.com/bid/93114VDB EntryX Refsource BIDBroken LinkWEB

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities