Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-4470

20
FAUCET Score

CVE-2016-4470 is a denial-of-service vulnerability in the Linux kernel (through version 4.6.3), affecting products from vendors like Novell, Oracle, and Red Hat. The flaw stems from an uninitialized data structure in the key_reject_and_link function, allowing local users to crash the system via a crafted keyctl request2 command. With a CVSS score of 5.5 (Medium), it requires local access and has a high impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
3.3CPE matchmatch criteria
cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*
3.4CPE matchmatch criteria
cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*
5.0CPE matchmatch criteria
cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
6CPE matchmatch criteria
cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
7CPE matchmatch criteria
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.5MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.58%
Probability of exploitation in next 30 days
EPSS Percentile
44.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0058 is in the 94th percentile among its peer group of 15,938 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (11)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: kernel-rt-1:3.10.0-327.rt56.194.el6rt
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-327.28.2.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.1 Extended Update SupportFixed in: kernel-0:3.10.0-229.40.1.ael7b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel-0:2.6.32-642.6.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: kernel-0:2.6.32-358.75.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.5 Advanced Update SupportFixed in: kernel-0:2.6.32-431.74.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.6 Extended Update SupportFixed in: kernel-0:2.6.32-504.54.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.7 Extended Update SupportFixed in: kernel-0:2.6.32-573.35.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-327.28.2.rt56.234.el7_2
View patch
github_advisoryvendor investigatingvia nvd_reference
View patch
oraclevendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2016-4470Important

kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path

Jun 15, 2016

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
Vendor Advisory
lists.opensuse.org / opensuse-security-announce/2016-08/msg00000.html
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2016-08/msg00003.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00007.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00008.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00009.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00012.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00013.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00014.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00015.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00016.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00017.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00018.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00019.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00020.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00021.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00022.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00023.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00026.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00027.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00044.html
lists.opensuse.org / opensuse-security-announce/2016-08/msg00055.html
rhn.redhat.com / errata/RHSA-2016-1532.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2016-1539.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2016-1541.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2016-1657.html
rhn.redhat.com / errata/RHSA-2016-2006.html
rhn.redhat.com / errata/RHSA-2016-2074.html
rhn.redhat.com / errata/RHSA-2016-2076.html
rhn.redhat.com / errata/RHSA-2016-2128.html
rhn.redhat.com / errata/RHSA-2016-2133.html
bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party AdvisoryVDB Entry
github.com / torvalds/linux/commit/38327424b40bcebe2de92d07312c89360ac9229a
Vendor Advisory
debian.org / security/2016/dsa-3607
openwall.com / lists/oss-security/2016/06/15/11
oracle.com / technetwork/topics/security/linuxbulletinjul2016-3090544.html
Third Party Advisory
oracle.com / technetwork/topics/security/linuxbulletinoct2016-3090545.html
oracle.com / technetwork/topics/security/ovmbulletinjul2016-3090546.html
Vendor Advisory
securitytracker.com / id/1036763
ubuntu.com / usn/USN-3049-1
ubuntu.com / usn/USN-3050-1
ubuntu.com / usn/USN-3051-1
ubuntu.com / usn/USN-3052-1
ubuntu.com / usn/USN-3053-1
ubuntu.com / usn/USN-3054-1
ubuntu.com / usn/USN-3055-1
ubuntu.com / usn/USN-3056-1
ubuntu.com / usn/USN-3057-1