VDB

CVE-2016-7912

CVE-2016-7912 PUBLISHED CVSS 7.800000190734863 HIGH

Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.

EPSS 2.11% · 81.1th percentile

Risk Scores

CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
2.11%
81.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-snapdragon0, 4.4.0-1012.12, 4.4.0-1013.14
Ubuntu:16.04:LTSlinux4.3.0-2.11, 4.4.0-7.22, 4.4.0-8.23
Ubuntu:14.04:LTSlinux-lts-xenial4.4.0-13.29~14.04.1, 4.4.0-15.31~14.04.1, 4.4.0-21.37~14.04.1
Ubuntu:16.04:LTSlinux-raspi24.2.0-1013.19, 0, 4.2.0-1014.21

Timeline

  • Nov 8, 2016 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 17, 2022 CVE Updated
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Oct 28, 2022 EPSS Score
  • Dec 20, 2022 EPSS Score
  • Feb 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›