CVE-2016-4557: Linux Kernel

High severity, CVSS 7.8. EPSS: 10.2% chance of exploitation in the next 30 days.

The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.

Affected products

• Linux Linux Kernel: from 4.4, before 4.4.11 (fixed in 4.4.11); from 4.5, before 4.5.5 (fixed in 4.5.5)

Published 2016-05-23. Last modified 2026-06-17.