CVE-2016-5244

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

5.52%

Published

Jun 27, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.

Weaknesses (CWE)

CWE-200

Affected Products (17)

fedoraproject · fedoravulnerable

suse · linux_enterprise_real_time_extensionvulnerable

fedoraproject · fedoravulnerable

suse · linux_enterprise_debuginfovulnerable

suse · linux_enterprise_real_time_extensionvulnerable

suse · linux_enterprise_servervulnerable

redhat · enterprise_linuxvulnerable

· suse_linux_enterprise_software_development_kit

References (20)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4116def2337991b39919f3b448326e21c40e0dbb

Patch

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html

Mailing List

KEV Catalog EPSS Scores Vendors All CVEs