VYPR
Get started
← All advisories
High severity7.5NVD Advisory· Published May 2, 2016· Updated May 6, 2026

CVE-2016-2117

CVE-2016-2117

Description

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.

Affected products

7
  • Oracle Corporation/Vm Server2 versions
    cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*
    • cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*
  • Canonical (company)/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
  • Linux/Kernel
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Range: <=4.5.2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

20

News mentions

0

No linked articles in our index yet.