DEBIAN-CVE-2016-4578

Advisory lineage Upstream: 1 Downstream: 2
Upstream
CVE-2016-4578
Published: 23 May 2016, 10:59
Last modified:28 Apr 2026, 20:15

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
3.0 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 May 2016, 10:59
Published
Vulnerability first disclosed
28 Apr 2026, 20:15
Last Modified
Vulnerability information updated

Description

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Systems

  • debian•linux

    < 4.5.5-1 | < 4.5.5-1 | < 4.5.5-1 | < 4.5.5-1

References (1)