CVE-2016-2383

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1b14d27ed0965838350f1377ff97c93ee383492Patch, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/14/1Mailing List, Third Party Advisory
http://www.ubuntu.com/usn/USN-2947-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2947-2Third Party Advisory
http://www.ubuntu.com/usn/USN-2947-3Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1308452Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/a1b14d27ed0965838350f1377ff97c93ee383492Patch, Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1b14d27ed0965838350f1377ff97c93ee383492Patch, Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/14/1Mailing List, Third Party Advisory
http://www.ubuntu.com/usn/USN-2947-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2947-2Third Party Advisory
http://www.ubuntu.com/usn/USN-2947-3Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1308452Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/a1b14d27ed0965838350f1377ff97c93ee383492Patch, Third Party Advisory

Timeline

Published: Apr 27, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-23844.6Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate CVE-2016-23859.8Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 CVE-2016-23869.8SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands v CVE-2016-23876.1Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attacker CVE-2016-23885.3The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted CVE-2016-23897.5Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 fo CVE-2016-23905.9The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake err CVE-2016-23915.0The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a de CVE-2016-23926.5The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuratio CVE-2016-23937.8Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, whi CVE-2016-23969.9The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remo CVE-2016-23979.8The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers