What’s Vulnerable › Vulnerabilities

CVE-2016-3695

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-12-29 · updated 2026-06-17
• Weakness: CWE-74

Description

The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disable APEI error injection through EINJ when securelevel is set.

Affected products

• Linux kernel: all versions
• Red Hat Enterprise Linux: 7.0

References

• http://www.securityfocus.com/bid/102327
• https://bugzilla.redhat.com/show_bug.cgi?id=1322755
• https://github.com/mjg59/linux/commit/d7a6be58edc01b1c66ecd8fcc91236bfbce0a420
• http://www.securityfocus.com/bid/102327
• https://bugzilla.redhat.com/show_bug.cgi?id=1322755
• https://github.com/mjg59/linux/commit/d7a6be58edc01b1c66ecd8fcc91236bfbce0a420

Get alerted when CVE-2016-3695 or the next vulnerability affects your stack