# CVEs published 2016-04-27 28 CVEs were published on April 27, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2015-1339](https://cve.now/CVE-2015-1339.md): Memory leak in the cuse\_channel\_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of se (no CVSS) - [CVE-2015-7515](https://cve.now/CVE-2015-7515.md): The aiptek\_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a d (no CVSS) - [CVE-2015-8812](https://cve.now/CVE-2015-8812.md): drivers/infiniband/hw/cxgb3/iwch\_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attack (no CVSS) - [CVE-2015-8816](https://cve.now/CVE-2015-8816.md): The hub\_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structu (no CVSS) - [CVE-2015-8844](https://cve.now/CVE-2015-8844.md): The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, wh (no CVSS) - [CVE-2015-8845](https://cve.now/CVE-2015-8845.md): The tm\_reclaim\_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that T (no CVSS) - [CVE-2016-0774](https://cve.now/CVE-2016-0774.md): The (1) pipe\_read and (2) pipe\_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+de (no CVSS) - [CVE-2016-2069](https://cve.now/CVE-2016-2069.md): Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggering access to a paging (no CVSS) - [CVE-2016-2085](https://cve.now/CVE-2016-2085.md): The evm\_verify\_hmac function in security/integrity/evm/evm\_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it (no CVSS) - [CVE-2016-2143](https://cve.now/CVE-2016-2143.md): The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local u (no CVSS) - [CVE-2016-2184](https://cve.now/CVE-2016-2184.md): The create\_fixed\_stream\_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically (no CVSS) - [CVE-2016-2383](https://cve.now/CVE-2016-2383.md): The adjust\_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, (no CVSS) - [CVE-2016-2384](https://cve.now/CVE-2016-2384.md): Double free vulnerability in the snd\_usbmidi\_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate (no CVSS) - [CVE-2016-2543](https://cve.now/CVE-2016-2543.md): The snd\_seq\_ioctl\_remove\_events function in sound/core/seq/seq\_clientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment (no CVSS) - [CVE-2016-2544](https://cve.now/CVE-2016-2544.md): Race condition in the queue\_delete function in sound/core/seq/seq\_queue.c in the Linux kernel before 4.4.1 allows local users to cause a den (no CVSS) - [CVE-2016-2545](https://cve.now/CVE-2016-2545.md): The snd\_timer\_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, wh (no CVSS) - [CVE-2016-2546](https://cve.now/CVE-2016-2546.md): sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service ( (no CVSS) - [CVE-2016-2547](https://cve.now/CVE-2016-2547.md): sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer instances, which allows lo (no CVSS) - [CVE-2016-2548](https://cve.now/CVE-2016-2548.md): sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to c (no CVSS) - [CVE-2016-2549](https://cve.now/CVE-2016-2549.md): sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial (no CVSS) - [CVE-2016-2550](https://cve.now/CVE-2016-2550.md): The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by levera (no CVSS) - [CVE-2016-2782](https://cve.now/CVE-2016-2782.md): The treo\_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denia (no CVSS) - [CVE-2016-2847](https://cve.now/CVE-2016-2847.md): fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of se (no CVSS) - [CVE-2016-3134](https://cve.now/CVE-2016-3134.md): The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileg (no CVSS) - [CVE-2016-3135](https://cve.now/CVE-2016-3135.md): Integer overflow in the xt\_alloc\_table\_info function in net/netfilter/x\_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allow (no CVSS) - [CVE-2016-3139](https://cve.now/CVE-2016-3139.md): The wacom\_probe function in drivers/input/tablet/wacom\_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause (no CVSS) - [CVE-2016-3156](https://cve.now/CVE-2016-3156.md): The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a de (no CVSS) - [CVE-2016-3672](https://cve.now/CVE-2016-3672.md): The arch\_pick\_mmap\_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base addre (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-04-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.