CVE-2016-3699

Severity: high (CVSS 7.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2016-10-07 · updated 2026-06-17
Weakness: CWE-264

Description

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

Affected products

Linux kernel: all versions
RedHat Enterprise Mrg: 2.0
RedHat Linux: 7.2

References

http://rhn.redhat.com/errata/RHSA-2016-2574.html
http://rhn.redhat.com/errata/RHSA-2016-2584.html
http://www.openwall.com/lists/oss-security/2016/09/22/4
http://www.securityfocus.com/bid/93114
https://bugzilla.redhat.com/show_bug.cgi?id=1329653
https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76
http://rhn.redhat.com/errata/RHSA-2016-2574.html
http://rhn.redhat.com/errata/RHSA-2016-2584.html
http://www.openwall.com/lists/oss-security/2016/09/22/4
http://www.securityfocus.com/bid/93114
https://bugzilla.redhat.com/show_bug.cgi?id=1329653
https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76

Get alerted when CVE-2016-3699 or the next vulnerability affects your stack