CVE-2016-4578: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only; version 16.04 only
• Debian Debian Linux: version 8.0 only
• Linux Linux Kernel: up to and including 4.6
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.1 only
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Server Aus: version 7.3 only; version 7.4 only; version 7.6 only
• Red Hat Enterprise Linux Server Eus: version 7.3 only; version 7.4 only; version 7.5 only; version 7.6 only
• Red Hat Enterprise Linux Server Tus: version 7.3 only; version 7.6 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2016-05-23. Last modified 2026-06-17.