VULNERABILITY INTELLIGENCE

CVE-2016-4913

CVSS score7.8 HIGH

EPSS probability0.51%

CISA KEVNot currently listed

Published2016-05-23

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

security@debian.org — Vendor Advisory
security@debian.org — Third Party Advisory
security@debian.org — Mailing List, Third Party Advisory
security@debian.org — Third Party Advisory
security@debian.org — Vendor Advisory
security@debian.org — Mailing List, Patch, Third Party Advisory
security@debian.org — Mailing List, Patch, Third Party Advisory
security@debian.org — Third Party Advisory
security@debian.org — Third Party Advisory
security@debian.org — Third Party Advisory, VDB Entry
security@debian.org — Third Party Advisory
security@debian.org — Third Party Advisory