CVE-2016-9644: The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 con...

Security readout for executives and security teams

This is an old Linux kernel local privilege escalation. A user who can run a crafted application on an affected x86 system may gain root access, especially on systems without SMEP. It is not a remote internet-facing bug by itself, but it can turn a low-privileged foothold into full host control. Likely exposure is older x86 Linux systems running kernel 4.4.22 through 4.4.28, particularly non-SMEP platforms. The source bundle does not provide complete vendor or CPE coverage, so distro-specific exposure must be verified against vendor advisories. Prioritize remediation where affected kernels run on shared, multi-user, or already-exposed systems. Business urgency is lower than a remote code execution issue, but successful exploitation can grant full host control after any local foothold. Mitigation focus: Inventory systems running Linux kernel 4.4.22 through 4.4.28.; Review Ubuntu USN-3146-1, USN-3146-2, or your distro advisory for fixed kernels.; Prioritize non-SMEP x86 hosts and multi-user systems..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.