Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-2545

20
FAUCET Score

CVE-2016-2545 describes a denial-of-service vulnerability in the Linux kernel, specifically within the snd_timer_interrupt function in sound/core/timer.c, affecting versions prior to 4.4.1. This flaw stems from improper linked list maintenance, allowing a local attacker to trigger a race condition and system crash through a crafted ioctl call. The vulnerability has a CVSS v3 score of 5.1 (Medium), indicating a local attack vector with high attack complexity and a high impact on availability. While it can lead to a system crash, it does not compromise confidentiality or integrity. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and limited interest in its exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.4CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.1MEDIUM

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.4
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.35%
Probability of exploitation in next 30 days
EPSS Percentile
27.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0035 is in the 33rd percentile among its peer group of 1,595 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

github_advisorypatch availablevia nvd_reference
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt
redhatend of lifevia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: realtime-kernel

Vendor Advisories (1)

redhatCVE-2016-2545Low

kernel: sound: use-after-free in snd_timer_interrupt

Jan 19, 2016

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
PatchVendor Advisory
lists.opensuse.org / opensuse-security-announce/2016-03/msg00094.html
lists.opensuse.org / opensuse-security-announce/2016-04/msg00045.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00038.html
bugzilla.redhat.com / show_bug.cgi
github.com / torvalds/linux/commit/ee8413b01045c74340aa13ad5bdf905de32be736
PatchVendor Advisory
debian.org / security/2016/dsa-3503
kernel.org / pub/linux/kernel/v4.x/ChangeLog-4.4.1
openwall.com / lists/oss-security/2016/01/19/1
Patch
securityfocus.com / bid/83381
securitytracker.com / id/1035296
ubuntu.com / usn/USN-2929-1
ubuntu.com / usn/USN-2929-2
ubuntu.com / usn/USN-2930-1
ubuntu.com / usn/USN-2930-2
ubuntu.com / usn/USN-2930-3
ubuntu.com / usn/USN-2931-1
ubuntu.com / usn/USN-2932-1
ubuntu.com / usn/USN-2967-1
ubuntu.com / usn/USN-2967-2