VYPR
← All advisories
High severity7.1NVD Advisory· Published Jul 3, 2016· Updated Jun 17, 2026

CVE-2016-4998

CVE-2016-4998

Description

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
  • Linux/Kernel2 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=4.5.5
    • (no CPE)range: <4.6
  • Oracle Corporation/Linux
    cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
    Range: < 4.8.13-1.1

Patches

Vulnerability mechanics

References

27

News mentions

0

No linked articles in our index yet.