⌘ + K

UBUNTU-CVE-2016-4568

Dashboard / Vulnerabilities / UBUNTU-CVE-2016-4568

UBUNTU-CVE-2016-4568

Published: 23 May 2016Last Modified: 22 Apr 2026

Upstream:

Aliases:

Summary:

Details: drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a crafted number of planes in a VIDIOC_DQBUF ioctl call.

References: https://ubuntu.com/security/CVE-2016-4568, https://patchwork.linuxtv.org/patch/34284/, https://git.linuxtv.org/sailus/media_tree.git/log/?h=vb2-overwrite-fix-error-on-fixes-v2, https://ubuntu.com/security/notices/USN-3161-1, https://ubuntu.com/security/notices/USN-3161-2, https://ubuntu.com/security/notices/USN-3161-3, https://ubuntu.com/security/notices/USN-3161-4, https://www.cve.org/CVERecord?id=CVE-2016-4568

Affected packages

Package

Name: linux-lts-xenial

Purl: pkg:deb/ubuntu/[email protected]~14.04.1?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -4.4.0-57.78~14.04.1

Affected versions

4.4.0-13.29~14.04.1

4.4.0-14.30~14.04.2

4.4.0-15.31~14.04.1

4.4.0-18.34~14.04.1

4.4.0-21.37~14.04.1

4.4.0-22.39~14.04.1

4.4.0-22.40~14.04.1

4.4.0-24.43~14.04.1

4.4.0-28.47~14.04.1

4.4.0-31.50~14.04.1

4.4.0-34.53~14.04.1

4.4.0-36.55~14.04.1

4.4.0-38.57~14.04.1

4.4.0-42.62~14.04.1

4.4.0-45.66~14.04.1

4.4.0-47.68~14.04.1

4.4.0-51.72~14.04.1

4.4.0-53.74~14.04.1

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High