[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-USN-3016-4":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":46,"duplicates":47,"related":48,"reserved_at":9,"published_at":57,"modified_at":58,"state":9,"summary":59,"references_raw":61,"kevs":101,"epss":9,"epss_history":102,"metrics":103,"affected":104},"USN-3016-4","linux-lts-xenial vulnerabilities\n\nUSN-3016-1 fixed vulnerabilities in the Linux kernel for Ubuntu\n16.04 LTS. This update provides the corresponding updates for the\nLinux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for\nUbuntu 14.04 LTS.\n\nJesse Hertz and Tim Newsham discovered that the Linux netfilter\nimplementation did not correctly perform validation when handling 32 bit\ncompatibility IPT_SO_SET_REPLACE events on 64 bit platforms. A local\nunprivileged attacker could use this to cause a denial of service (system\ncrash) or execute arbitrary code with administrative privileges.\n(CVE-2016-4997)\n\nKangjie Lu discovered an information leak in the core USB implementation in\nthe Linux kernel. A local attacker could use this to obtain potentially\nsensitive information from kernel memory. (CVE-2016-4482)\n\nKangjie Lu discovered an information leak in the timer handling\nimplementation in the Advanced Linux Sound Architecture (ALSA) subsystem of\nthe Linux kernel. A local attacker could use this to obtain potentially\nsensitive information from kernel memory. (CVE-2016-4569, CVE-2016-4578)\n\nKangjie Lu discovered an information leak in the X.25 Call Request handling\nin the Linux kernel. A local attacker could use this to obtain potentially\nsensitive information from kernel memory. (CVE-2016-4580)\n\nIt was discovered that an information leak exists in the Rock Ridge\nimplementation in the Linux kernel. A local attacker who is able to mount a\nmalicious iso9660 file system image could exploit this flaw to obtain\npotentially sensitive information from kernel memory. (CVE-2016-4913)\n\nBaozeng Ding discovered that the Transparent Inter-process Communication\n(TIPC) implementation in the Linux kernel did not verify socket existence\nbefore use in some situations. A local attacker could use this to cause a\ndenial of service (system crash). (CVE-2016-4951)\n\nJesse Hertz and Tim Newsham discovered that the Linux netfilter\nimplementation did not correctly perform validation when handling\nIPT_SO_SET_REPLACE events. A local unprivileged attacker could use this to\ncause a denial of service (system crash) or obtain potentially sensitive\ninformation from kernel memory. (CVE-2016-4998)\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40,42,44],{"_key":15},"CVE-2016-4482",{"_key":17},"CVE-2016-4569",{"_key":19},"CVE-2016-4578",{"_key":21},"CVE-2016-4580",{"_key":23},"CVE-2016-4913",{"_key":25},"CVE-2016-4951",{"_key":27},"CVE-2016-4997",{"_key":29},"CVE-2016-4998",{"_key":31},"UBUNTU-CVE-2016-4482",{"_key":33},"UBUNTU-CVE-2016-4569",{"_key":35},"UBUNTU-CVE-2016-4578",{"_key":37},"UBUNTU-CVE-2016-4580",{"_key":39},"UBUNTU-CVE-2016-4913",{"_key":41},"UBUNTU-CVE-2016-4951",{"_key":43},"UBUNTU-CVE-2016-4997",{"_key":45},"UBUNTU-CVE-2016-4998",[],[],[49,50,51,52,53,54,55,56],{"_key":37},{"_key":41},{"_key":43},{"_key":31},{"_key":33},{"_key":35},{"_key":39},{"_key":45},"2016-06-27T20:55:14.870307Z","2026-02-04T04:37:10.805476Z",{"cisa_kev":60,"cisa_ransomware":60,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[62,68,73,77,81,85,89,93,97],{"url":63,"sources":64,"tags":66},"https://ubuntu.com/security/notices/USN-3016-4",[65],"osv_ubuntu",[67],"Advisory",{"url":69,"sources":70,"tags":71},"https://ubuntu.com/security/CVE-2016-4482",[65],[72],"REPORT",{"url":74,"sources":75,"tags":76},"https://ubuntu.com/security/CVE-2016-4569",[65],[72],{"url":78,"sources":79,"tags":80},"https://ubuntu.com/security/CVE-2016-4578",[65],[72],{"url":82,"sources":83,"tags":84},"https://ubuntu.com/security/CVE-2016-4580",[65],[72],{"url":86,"sources":87,"tags":88},"https://ubuntu.com/security/CVE-2016-4913",[65],[72],{"url":90,"sources":91,"tags":92},"https://ubuntu.com/security/CVE-2016-4951",[65],[72],{"url":94,"sources":95,"tags":96},"https://ubuntu.com/security/CVE-2016-4997",[65],[72],{"url":98,"sources":99,"tags":100},"https://ubuntu.com/security/CVE-2016-4998",[65],[72],[],[],[],[105],{"ecosystem":106,"name":107,"vendor":108,"product":107,"cpe_part":9,"purl_type":109,"purl_namespace":108,"purl_name":107,"source":9,"versions":110},"Ubuntu","linux-lts-xenial","ubuntu","deb",[111],{"version":112,"is_range":113,"range_type":114,"version_start":9,"version_start_type":9,"version_end":115,"version_end_type":116,"fixed_in":9},"lt4_4_0_28_47~14_04_1",true,"ecosystem","4.4.0-28.47~14.04.1","excluding"]