peter bassill · operator
$ cve CVE-2016-1583 JSON

CVE-2016-1583 EXPLOIT

7.8
HIGH · CVSS 3.1 · EPSS 1.4% (pctl 72)

Patch early

A public exploit exists.

Description

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS1.39% — more likely to be exploited than 72% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2016-06-27
Last modified2026-06-17

Affected (10)

VendorProduct
canonicalubuntu linux
debiandebian linux
linuxlinux kernel
novellsuse linux enterprise debuginfo
novellsuse linux enterprise desktop
novellsuse linux enterprise live patching
novellsuse linux enterprise module for public cloud
novellsuse linux enterprise server
novellsuse linux enterprise software development kit
novellsuse linux enterprise workstation extension

Public exploits

SourceTitleDate
exploit-dbLinux Kernel - 'ecryptfs' '/proc/$pid/environ' Local Privilege Escalation2016-06-21

References

→ the Explorer  ·  watch your stack  ·  NVD