High severity · published May 23, 2016
CVE-2016-4913
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local…
7.8
CVSS
0.5%
EPSS
No
On KEV
Description
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 3.2.81; 3.3 before 3.10.102; 3.11 before 3.12.60; 3.13 before 3.14.70; 3.15 before 3.16.36; 3.17 before 3.18.34; +3 more · source: NVD
LI
Linux · Oracle
6 · source: NVD
SL
Suse Linux Enterprise Debuginfo · Novell
11.0 · source: NVD
SL
Suse Linux Enterprise Server · Novell
11.0; 11.0 · source: NVD
SL
Suse Linux Enterprise Software Development Kit · Novell
11.0 · source: NVD
UL
Ubuntu Linux · Canonical
12.04; 14.04; 15.10; 16.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4913
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4913
Vendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3607
Vendor Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5
Mailing List
http://www.openwall.com/lists/oss-security/2016/05/18/3
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability