CVE-2016-2117 PUBLISHED

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.

EPSS 0.70% · 71.9th percentile

Risk Scores

EPSS Score
0.70%
71.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-lts-wily0, 4.2.0-36.42~14.04.1, 4.2.0-36.41~14.04.1
Ubuntu:14.04:LTSlinux-lts-vivid3.19.0-56.62~14.04.1, 0, 3.19.0-18.18~14.04.1
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1013.15, 4.4.0-1012.12, 4.4.0-1013.14
Ubuntu:16.04:LTSlinux4.4.0-6.21, 4.4.0-12.28, 4.4.0-11.26
Ubuntu:16.04:LTSlinux-raspi24.3.0-1006.6, 4.4.0-1003.4, 4.4.0-1004.5
Ubuntu:14.04:LTSlinux-lts-xenial4.4.0-21.37~14.04.1, 4.4.0-14.30~14.04.2, 4.4.0-15.31~14.04.1
Ubuntu:14.04:LTSlinux3.13.0-86.130, 3.13.0-86.131, 3.13.0-76.120
Ubuntu:14.04:LTSlinux-lts-utopic3.16.0-71.92~14.04.1, 3.16.0-71.91~14.04.1, 3.16.0-70.90~14.04.1

Timeline

References

Open in Interactive Console →