vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2016-2143

HIGH
7.8
CVSS Score
Published: April 27, 2016 at 05:00 PM UTC
Updated: June 17, 2026 at 12:43 AM UTC
4 products affected across 4 vendorsLinux KernelDebian LinuxEnterprise Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.6%

Description

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux· Debiandrupal
95%
6.07.08.0
Linux Kernel· Linux
95%
2.6.25 ≤ v < 3.2.793.13 ≤ v < 3.16.353.17 ≤ v < 4.1.213.3 ≤ v < 3.12.584.2 ≤ v < 4.4.6
Affected range stops below 3.12.58, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.16.35, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.2.79, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.1.21, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.4.6, so it looks safe — our inference, not a vendor statement
Linux· Oracledrupal
95%
7 0
Enterprise Linux· Red Hatrpm
95%
7.0

References (13)

x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3446c13b268af86391d06611327006b059b8bab1
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2016-1539.html

CVSS

7.8HIGH[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card