CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call,...

Security readout for executives and security teams

CVE-2016-4565 is a Linux kernel InfiniBand stack flaw. A local user could trigger a kernel memory write condition, causing denial of service and possibly other unspecified impact. The source bundle does not show remote exploitation or confirmed active exploitation. Exposure is most likely on Linux systems running kernels before 4.5.3 or affected vendor backports, especially where InfiniBand kernel interfaces are present. The attacker model is local user access, not unauthenticated remote access. Treat as a local kernel stability risk. It is not supported as remotely exploitable by the provided sources, but shared Linux systems with local users should be patched through normal kernel maintenance. Mitigation focus: Apply applicable vendor kernel updates from Ubuntu, SUSE, Red Hat, or Oracle advisories.; Prioritize affected systems that allow untrusted local users.; Check vendor errata because distro kernel fixes may be backported..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.