UBUNTU-CVE-2016-4568
Advisory lineage Upstream: 1 Downstream: 4
Upstream
Downstream
Published: 23 May 2016, 00:00
Last modified:22 Apr 2026, 10:44
Vulnerability Summary
Overall Risk (default)
medium
31/100 CVSS Score
7.8 HIGH
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
23 May 2016, 00:00
Published
Vulnerability first disclosed
22 Apr 2026, 10:44
Last Modified
Vulnerability information updated
Description
drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a crafted number of planes in a VIDIOC_DQBUF ioctl call.
CVSS Metrics
- v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- ubuntu•linux
< 4.4.0-57.78
- ubuntu•linux-lts-xenial
< 4.4.0-57.78~14.04.1
- ubuntu•linux-raspi2
< 4.4.0-1038.45
- ubuntu•linux-snapdragon
< 4.4.0-1042.46
References (8)
- https://ubuntu.com/security/CVE-2016-4568
- https://patchwork.linuxtv.org/patch/34284/
- https://git.linuxtv.org/sailus/media_tree.git/log/?h=vb2-overwrite-fix-error-on-fixes-v2
- https://ubuntu.com/security/notices/USN-3161-1
- https://ubuntu.com/security/notices/USN-3161-2
- https://ubuntu.com/security/notices/USN-3161-3
- https://ubuntu.com/security/notices/USN-3161-4
- https://www.cve.org/CVERecord?id=CVE-2016-4568