CVE-2016-2117: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days.

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only; version 16.04 only
• Linux Linux Kernel: up to and including 4.5.2
• Oracle Vm Server: version 3.3 only; version 3.4 only

Published 2016-05-02. Last modified 2026-06-17.