What’s Vulnerable › Vulnerabilities

CVE-2016-4913

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-05-23 · updated 2026-06-17
• Weakness: CWE-200

Description

The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.

Affected products

• Canonical Ubuntu Linux: 12.04, 14.04, 15.10, 16.04
• Linux kernel: before 3.2.81; from 3.3 before 3.10.102; from 3.11 before 3.12.60; from 3.13 before 3.14.70; from 3.15 before 3.16.36; from 3.17 before 3.18.34 — fixed in 3.10.102, 3.12.60, 3.14.70, 3.16.36, 3.18.34, 3.2.81
• Novell Suse Linux Enterprise Debuginfo: 11.0-sp4
• Novell Suse Linux Enterprise Server: 11.0-extra, 11.0-sp4
• Novell Suse Linux Enterprise Software Development Kit: 11.0-sp4
• Oracle Corporation Oracle Linux: 6

How to fix

Upgrade to a fixed version: Linux kernel 3.10.102, 3.12.60, 3.14.70, 3.16.36. Check the vendor advisory for mitigations.

References

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
• http://www.debian.org/security/2016/dsa-3607
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5
• http://www.openwall.com/lists/oss-security/2016/05/18/3
• http://www.openwall.com/lists/oss-security/2016/05/18/5
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
• http://www.securityfocus.com/bid/90730
• http://www.ubuntu.com/usn/USN-3016-1
• http://www.ubuntu.com/usn/USN-3016-2

Get alerted when CVE-2016-4913 or the next vulnerability affects your stack