VIR Vulnerability Intelligence Relay

CVE-2016-2549

medium
Published 2016-04-27 · Modified 2026-05-06
CVSS v3
6.2
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2
2.1
VIR risk
6.2

Description

sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call.

Predictions

Exploit likelihood
62%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2016-2549

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2ba1fe7a06d3624f9a7586d672b55f08f7c670f3

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed4.4.2-1
debian debianbullseyefixed4.4.2-1
debian debianforkyfixed4.4.2-1
debian debiansidfixed4.4.2-1
debian debiantrixiefixed4.4.2-1
linux linux-kernelaffected

References

CWEs

CWE-20

Verify integrity in audit chain (admin only). AS-IS.