CVE-2016-4558

CVE-2016-4558 describes a use-after-free vulnerability in the Linux kernel's BPF subsystem, affecting versions before 4.5.5, including Canonical and Ubuntu Linux distributions. This flaw, stemming from mishandled reference counts, allows a local attacker to cause a denial of service or potentially achieve other unspecified impacts. With a CVSSv3 score of 7.0 (HIGH), exploitation requires local access and high attack complexity, but can lead to high confidentiality, integrity, and availability impacts. While not listed on CISA's KEV catalog and lacking Metasploit or Nuclei exploits, an ExploitDB entry exists, though there is minimal community discussion or media coverage.