UBUNTU-CVE-2016-6787

Advisory lineage Upstream: 1 Downstream: 0

Upstream

CVE-2016-6787

Published: 28 Dec 2016, 07:59

Last modified:22 Apr 2026, 10:55

Vulnerability Summary

Overall Risk (default)

medium

28/100

CVSS Score

7 HIGH

3.1 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

28 Dec 2016, 07:59

Published

Vulnerability first disclosed

22 Apr 2026, 10:55

Last Modified

Vulnerability information updated

Description

kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.

CVSS Metrics

v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
v3.0•HIGH•Score: 7CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•linux
all
ubuntu•linux-azure-fde
all
ubuntu•linux-gke
all
ubuntu•linux-gkeop
all
ubuntu•linux-gkeop-5.15
all
ubuntu•linux-intel-iot-realtime
all
ubuntu•linux-raspi-realtime
all
ubuntu•linux-raspi2
all
ubuntu•linux-realtime
all
ubuntu•linux-riscv
all | all