CVE-2016-7913: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days.

The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only
• Linux Linux Kernel: before 3.10.106 (fixed in 3.10.106); from 3.11, before 3.12.70 (fixed in 3.12.70); from 3.13, before 3.18.51 (fixed in 3.18.51); from 3.19, before 4.1.41 (fixed in 4.1.41); from 4.2, before 4.4.65 (fixed in 4.4.65); from 4.5, before 4.6 (fixed in 4.6)

Published 2016-11-16. Last modified 2026-06-17.