Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-4578

30
FAUCET Score

CVE-2016-4578 is a local information disclosure vulnerability in the Linux kernel's ALSA timer interface, specifically affecting versions through 4.6, including distributions like Canonical, Debian, and Red Hat. It allows a local attacker to obtain sensitive information from kernel stack memory due to uninitialized data structures in sound/core/timer.c. With a CVSS score of 5.5 (Medium), this vulnerability has a low attack complexity and requires local user privileges, but can lead to high confidentiality impact. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists for a kernel pointer leak on Ubuntu 16.04, indicating proof-of-concept code is publicly available. Community discussion and media coverage for this CVE are minimal.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.6CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
12.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
14.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
15.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
16.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.5MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.20%
Probability of exploitation in next 30 days
EPSS Percentile
65.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
ExploitDB: EDB-46529 · Mar 11, 2019
This CVE's current EPSS score of 0.0120 is in the 97th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-514.rt56.420.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-514.el7
View patch
github_advisoryvendor investigatingvia nvd_reference
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: realtime-kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel

Vendor Advisories (1)

redhatCVE-2016-4578Low

kernel: Information leak in events in timer.c

May 3, 2016

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
Vendor Advisory
git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
Vendor Advisory
lists.opensuse.org / opensuse-security-announce/2016-06/msg00044.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2016-06/msg00052.html
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2016-06/msg00054.html
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2016-08/msg00000.html
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2016-08/msg00007.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2016-08/msg00044.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2016-08/msg00055.html
Mailing ListThird Party Advisory
rhn.redhat.com / errata/RHSA-2016-2574.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2016-2584.html
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party AdvisoryVDB Entry
github.com / torvalds/linux/commit/9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6
Vendor Advisory
github.com / torvalds/linux/commit/e4ec8cc8039a7063e24204299b462bd1383184a5
Vendor Advisory
exploit-db.com / exploits/46529
ExploitThird Party AdvisoryVDB Entry
debian.org / security/2016/dsa-3607
Third Party Advisory
openwall.com / lists/oss-security/2016/05/11/5
Mailing List
securityfocus.com / bid/90535
Third Party AdvisoryVDB Entry
ubuntu.com / usn/USN-3016-1
Third Party Advisory
ubuntu.com / usn/USN-3016-2
Third Party Advisory
ubuntu.com / usn/USN-3016-3
Third Party Advisory
ubuntu.com / usn/USN-3016-4
Third Party Advisory
ubuntu.com / usn/USN-3017-1
Third Party Advisory
ubuntu.com / usn/USN-3017-2
Third Party Advisory
ubuntu.com / usn/USN-3017-3
Third Party Advisory
ubuntu.com / usn/USN-3018-1
Third Party Advisory
ubuntu.com / usn/USN-3018-2
Third Party Advisory
ubuntu.com / usn/USN-3019-1
Third Party Advisory
ubuntu.com / usn/USN-3020-1
Third Party Advisory
ubuntu.com / usn/USN-3021-1
Third Party Advisory
ubuntu.com / usn/USN-3021-2
Third Party Advisory