CVE-2016-2383: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 15.10 only
• Linux Linux Kernel: before 4.5.0 (fixed in 4.5.0); version 4.5.0 only
• Opensuse Leap: version 42.1 only

Published 2016-04-27. Last modified 2026-06-17.