PT-2016-5665 · Red Hat+2 · Red Hat Enterprise Mrg+3

Linn Crosetto + 1 · Published 2016-10-07 · Updated 2023-02-13 · CVE-2016-3699

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2

Description The issue allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd when the system is booted with UEFI Secure Boot enabled.

Recommendations For Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2, consider disabling UEFI Secure Boot or restricting the appending of ACPI tables to the initrd until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CESA-2016_2574

CVE-2016-3699

RHSA-2016:2574

RHSA-2016:2584

RHSA-2016_2574

RHSA-2016_2584

Affected Products

Centos

Linux Kernel

Red Hat

Red Hat Enterprise Mrg

References · 11

• 🔥 https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76 · Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=1329653 · Patch
• https://linux.oracle.com/errata/ELSA-2016-3644.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3699 · Security Note
• https://osv.dev/vulnerability/CVE-2016-3699 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2584.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-3645.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2574.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-2574.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2016/09/22/4 · Note
• http://securityfocus.com/bid/93114 · Note