CVE-2016-2143: Debian Linux

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.

Affected products

• Debian Debian Linux: version 6.0 only; version 7.0 only; version 8.0 only
• Linux Linux Kernel: from 2.6.25, before 3.2.79 (fixed in 3.2.79); from 3.3, before 3.12.58 (fixed in 3.12.58); from 3.13, before 3.16.35 (fixed in 3.16.35); from 3.17, before 4.1.21 (fixed in 4.1.21); from 4.2, before 4.4.6 (fixed in 4.4.6)
• Oracle Linux: version 7 only
• Red Hat Enterprise Linux: version 7.0 only

Published 2016-04-27. Last modified 2026-06-17.