High severity7.8NVD Advisory· Published Feb 8, 2016· Updated Jun 17, 2026

CVE-2016-0728

Description

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microfocus/Server Migration Pack
cpe:2.3:a:hp:server_migration_pack:*:*:*:*:*:*:*:*
Range: <=7.5
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Google/Android24 versions
cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*+ 23 more
- cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=3.8,<3.10.95
- (no CPE)range: <4.4.1
osv-coords44 versions
pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2012 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_10&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_11&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_3&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_4&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_5&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_6&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_7&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_8&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012 pkg:rpm/suse/kgraft-patch-SLE12_Update_9&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012
< 4.8.13-1.1+ 43 more
- (no CPE)range: < 4.8.13-1.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.3
- (no CPE)range: < 3.12.51-60.25.2
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3.12.51-52.39.1
- (no CPE)range: < 3.12.51-60.25.1
- (no CPE)range: < 3-8.2
- (no CPE)range: < 3-2.1
- (no CPE)range: < 1-2.2
- (no CPE)range: < 2-2.1
- (no CPE)range: < 1-2.3
- (no CPE)range: < 5-2.1
- (no CPE)range: < 5-2.1
- (no CPE)range: < 5-2.1
- (no CPE)range: < 4-2.1
- (no CPE)range: < 4-2.1
- (no CPE)range: < 3-2.1
- (no CPE)range: < 3-2.1

Patches

Vulnerability mechanics

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-01/msg00026.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-02/msg00012.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.htmlnvdMailing ListThird Party Advisory
perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/nvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0064.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0065.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0068.htmlnvdThird Party Advisory
source.android.com/security/bulletin/2016-03-01.htmlnvdVendor Advisory
www.debian.org/security/2016/dsa-3448nvdThird Party Advisory
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1nvdVendor Advisory
www.openwall.com/lists/oss-security/2016/01/19/2nvdMailing ListThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlnvdThird Party Advisory
www.securityfocus.com/bid/81054nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034701nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2870-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-2870-2nvdThird Party Advisory
www.ubuntu.com/usn/USN-2871-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-2871-2nvdThird Party Advisory
www.ubuntu.com/usn/USN-2872-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-2872-2nvdThird Party Advisory
www.ubuntu.com/usn/USN-2872-3nvdThird Party Advisory
www.ubuntu.com/usn/USN-2873-1nvdThird Party Advisory
bto.bluecoat.com/security-advisory/sa112nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
github.com/torvalds/linux/commit/23567fd052a9abb6d67fe8e7a9ccdd9800a540f2nvdThird Party Advisory
h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplaynvdThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvdThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvdThird Party Advisory
security.netapp.com/advisory/ntap-20160211-0001/nvdThird Party Advisory
www.exploit-db.com/exploits/39277/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.003
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000