CVE-2016-6130 — Vulnetix

Try Vulnetix Request Demo

CVE-2016-6130 PUBLISHED

Race condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux kernel before 4.6 allows local users to obtain sensitive information from kernel memory by changing a certain length value, aka a "double fetch" vulnerability.

EPSS 0.06% · 18.7th percentile

Risk Scores

EPSS Score

0.06%

18.7th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:16.04:LTS	linux	0, 4.2.0-16.19, 4.2.0-17.21

Timeline

Jul 3, 2016 CVE Published
Jan 16, 2018 PoC Published
May 28, 2021 PoC Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Jul 29, 2022 PoC Published
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2016-6130 third-party-advisory
https://bugzilla.kernel.org/show_bug.cgi?id=116741 third-party-advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=532c34b5fbf1687df63b3fcd5b2846312ac943c6 third-party-advisory
https://ubuntu.com/security/notices/USN-3099-1 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2016-6130 third-party-advisory

Open in Interactive Console →