CVE-2016-4565: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only; version 16.04 only
• Debian Debian Linux: version 8.0 only
• Linux Linux Kernel: before 3.2.81 (fixed in 3.2.81); from 3.3, before 3.10.103 (fixed in 3.10.103); from 3.11, before 3.12.61 (fixed in 3.12.61); from 3.13, before 3.14.76 (fixed in 3.14.76); from 3.15, before 3.16.36 (fixed in 3.16.36); from 3.17, before 3.18.34 (fixed in 3.18.34); …

Published 2016-05-23. Last modified 2026-06-17.