CVE-2016-4470

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

Published: Jun 27, 2016
Updated: Nov 9, 2025
CVE: CVE-2016-4470
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.9
AV:L/AC:L/Au:N/C:N/I:N/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
oracle / vm_server	3.4	3.4.x
oracle / vm_server	3.3	3.3.x
oracle / linux	5.0	5.0.x
oracle / linux	6	6.x
oracle / linux	7	7.x
linux / linux_kernel	-	4.6.3.x
novell / suse_linux_enterprise_real_time_extension	12.0-sp1	12.0-sp1.x
redhat / enterprise_linux_desktop	7.0	7.0.x
redhat / enterprise_linux_server_aus	7.2	7.2.x
redhat / enterprise_linux_workstation	7.0	7.0.x
redhat / enterprise_linux	6.0	6.0.x
redhat / enterprise_linux_server	7.0	7.0.x
redhat / enterprise_linux_hpc_node	7.0	7.0.x
redhat / enterprise_linux_server_eus	7.2	7.2.x
redhat / enterprise_linux_hpc_node_eus	7.0	7.0.x
redhat / enterprise_linux_for_real_time	7.0	7.0.x
redhat / enterprise_mrg	2.0	2.0.x

Vulnerability Database

309,961

CVE-2016-4470

Deep Security Visibility Without the Complexity