Description
The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.5.5-1 | — |
| Debian 13 | linux | 4.5.5-1 | — |
| Debian 12 | linux | 4.5.5-1 | — |
| Debian 8 | linux | 3.16.7-ckt25-2+deb8u2 | DSA-3607-1 |
| Debian 7 | linux | 3.2.81-1 | DLA-516-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux | 4.4.0-28.47 | USN-3016-1 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1016.22 | USN-3016-2 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1019.22 | USN-3016-3 |
| Ubuntu 14.04 LTS | linux | 3.13.0-91.138 | USN-3018-1 |
| Ubuntu 14.04 LTS | linux-lts-utopic | 3.16.0-76.98~14.04.1 | USN-3019-1 |
| Ubuntu 14.04 LTS | linux-lts-vivid | 3.19.0-64.72~14.04.1 | USN-3020-1 |
| Ubuntu 14.04 LTS | linux-lts-wily | 4.2.0-41.48~14.04.1 | USN-3017-3 |
| Ubuntu 14.04 LTS | linux-lts-xenial | 4.4.0-28.47~14.04.1 | USN-3016-4 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | kernel-docs | 3.0.101-77.2 | SUSE-SU-2016:1672-1 |
| SLES 11 SP4 | kernel-ec2 +7 | 3.0.101-77.1 | SUSE-SU-2016:1672-1 |
| SLES 11 SP3 | kernel-ec2 +7 | 3.0.101-0.47.86.1 | SUSE-SU-2016:2245-1 |
| SLES 11 SP2 | kernel-ec2 +6 | 3.0.101-0.7.53.1 | SUSE-SU-2017:0333-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 11 SP4 | kernel-ec2 +7 | 3.0.101-77.1 | SUSE-SU-2016:1672-1 |
| SLE Real Time 11 SP4 | kernel-rt +3 | 3.0.101.rt130-57.1 | SUSE-SU-2016:1985-1 |
| SUSE OpenStack Cloud 5 | kernel-ec2 +6 | 3.0.101-0.47.86.1 | SUSE-SU-2016:2245-1 |
| SUSE Manager Proxy 2.1 | kernel-ec2 +6 | 3.0.101-0.47.86.1 | SUSE-SU-2016:2245-1 |
| SUSE Manager 2.1 | kernel-ec2 +6 | 3.0.101-0.47.86.1 | SUSE-SU-2016:2245-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | kernel-ec2 +6 | 3.0.101-0.47.86.1 | SUSE-SU-2016:2245-1 |
Advisories 15
- USN-3016-1 linux vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-3018-1 linux vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-516-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3607-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-3017-3 linux-lts-wily vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3019-1 linux-lts-utopic vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3020-1 linux-lts-vivid vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3016-2 linux-raspi2 vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3016-3 linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- USN-3016-4 linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2016:1672-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0333-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:1985-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2245-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2024-0145 Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jan 17, 2024
References
- [oss-security] 20160510 CVE Request: x25: a kernel infoleak in x25_negotiate_facilities() mailing-list
- https://github.com/torvalds/linux/commit/79e48650320e6fba48369fccf13fd045315b19b8
- USN-3017-1 vendor-advisory
- SUSE-SU-2016:1985 vendor-advisory
- USN-3017-3 vendor-advisory
- USN-3018-2 vendor-advisory
- USN-3021-2 vendor-advisory
- USN-3017-2 vendor-advisory
- USN-3019-1 vendor-advisory
- openSUSE-SU-2016:1641 vendor-advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79e48650320e6fba48369fccf13fd045315b19b8
- DSA-3607 vendor-advisory
- USN-3016-2 vendor-advisory
- USN-3016-1 vendor-advisory
- SUSE-SU-2016:1672 vendor-advisory
- USN-3021-1 vendor-advisory
- USN-3018-1 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5
- 90528 vdb-entry
- USN-3016-3 vendor-advisory
- USN-3016-4 vendor-advisory
- USN-3020-1 vendor-advisory