PT-2016-6969 · Linux+1 · Linux Kernel+1

Martin Prpič · Published 2016-08-06 · Updated 2025-09-29 · CVE-2016-6516

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8

Description A race condition exists in the ioctl file dedupe range function, allowing local users to cause a denial of service or possibly gain privileges by changing a certain count value. This issue is related to a "double fetch" vulnerability.

Recommendations For Linux kernel versions prior to 4.8, update to version 4.8 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Race Condition

Weakness Enumeration

CWE-119

CWE-362

Related Identifiers

ALSA-2025_16880

ALT-PU-2016-1862

ALT-PU-2017-1330

CVE-2016-6516

OPENSUSE-SU-2024:10128-1

Affected Products

Alt Linux

Linux Kernel

References · 97

• 🔥 https://github.com/wpengfei/CVE-2016-6516-exploit · Exploit
• https://github.com/torvalds/linux/commit/10eec60ce79187686e052092e5383c99b4420a20 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6516 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-6516 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6516 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=10eec60ce79187686e052092e5383c99b4420a20 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-6516 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-6516 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-6516 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6516 · Vendor Advisory
• https://suse.com/security/cve/CVE-2011-1180 · Note
• https://suse.com/security/cve/CVE-2010-2954 · Note
• https://suse.com/security/cve/CVE-2016-1583 · Note
• https://suse.com/security/cve/CVE-2011-1577 · Note