CVE-2016-4805: canonical ubuntu_linux Use After Free
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2016-4805DEBIAN-CVE-2016-4805
Published 23-05-2016Last modified 06-08-2024
Vulnerability summary
CVE-2016-4805 is a high (CVSS 7.8) Use After Free vulnerability in canonical ubuntu_linux. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 41.4% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (NVD)EPSS score
0.50%
0%100%
Low · +0.02 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 8 · Related 7Timeline
- 23-05-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.
CVSS metrics
5 scores · 3 sources · 3 versionsHigh 7.8Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.8Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
High 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
0.50%
Chance of exploitation in the next 30 days
Percentile
41%
Versus all other CVEs
30-day change
+0.02 pp
From 0.48% on 18-09-2026
18-09-202618-10-2026
EPSS score0.50%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Novell8 products
- opensuse_leap42.1
- suse_linux_enterprise_desktop12.0 | 12.0:sp1
- suse_linux_enterprise_live_patching12.0
- suse_linux_enterprise_module_for_public_cloud12.0
- suse_linux_enterprise_real_time_extension11.0:sp4 | 12.0:sp1
Ubuntu6 products
- linux< 3.13.0-86.130 | < 4.4.0-22.39
- linux-lts-vivid< 3.19.0-59.65~14.04.1
- linux-lts-wily< 4.2.0-36.41~14.04.1
- linux-lts-xenial< 4.4.0-22.39~14.04.1
- linux-raspi2< 4.4.0-1010.12
Canonical1 product
- ubuntu_linuxEOL12.04
Debian1 product
- linux< 4.5.2-1
Linux1 product
- linux_kernel≥ 2.6.30, < 3.2.80 | ≥ 3.3, < 3.10.102 | ≥ 3.11, < 3.12.59 | ≥ 3.13, < 3.14.67 | ≥ 3.15, < 3.16.35 | ≥ 3.17, < 3.18.37 | ≥ 3.19, < 4.1.28 | ≥ 4.2, < 4.4.8 | ≥ 4.5, < 4.5.2
Oracle1 product
- linuxEOL6
Redhat1 product
- enterprise_linuxEOL6.0 | 7.0
7 vendors · 19 products
References
25 links- lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.htmlVendor AdvisoryX Refsource SUSEMailing ListRelease NotesThird Party Advisory
- www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlX Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- github.com/torvalds/linux/commit/1f461dcdd296eecedaffffc6bae2bfa90bd7eb89X Refsource CONFIRMPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 25 references
- www.openwall.com/lists/oss-security/2016/05/15/2Mailing ListX Refsource MLISTPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.htmlVendor AdvisoryX Refsource SUSEMailing ListRelease NotesThird Party Advisory
- www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.htmlX Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListRelease NotesThird Party Advisory