CVE-2016-4805

HIGH 7.8CVE-2016-4805 · Published 23/05/2016 · updated 17/06/2026

In short

CVE-2016-4805 is a HIGH (CVSS 7.8) vulnerability affecting suse linux enterprise live patching (novell), suse linux enterprise module for public cloud (novell), suse linux enterprise software development kit (novell).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 42.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
suse linux enterprise live patching novell	`= 12.0`	No fix yet
suse linux enterprise module for public cloud novell	`= 12.0`	No fix yet
suse linux enterprise software development kit novell	`= 11.0= 12.0`	No fix yet
suse linux enterprise workstation extension novell	`= 12.0`	No fix yet

Description

Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit · Patch
lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html · Mailing List
debian.org/security/2016/dsa-3607 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free