CVE-2016-3699

The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.

• CWE-264

• http://rhn.redhat.com/errata/RHSA-2016-2574.html
• http://rhn.redhat.com/errata/RHSA-2016-2584.html
• http://www.openwall.com/lists/oss-security/2016/09/22/4Third Party Advisory
• http://www.securityfocus.com/bid/93114Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=1329653Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76Exploit
• http://rhn.redhat.com/errata/RHSA-2016-2574.html
• http://rhn.redhat.com/errata/RHSA-2016-2584.html
• http://www.openwall.com/lists/oss-security/2016/09/22/4Third Party Advisory
• http://www.securityfocus.com/bid/93114Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=1329653Issue Tracking, Patch, Third Party Advisory, VDB Entry
• https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76Exploit

Published

Oct 7, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3693The Safemode gem before 1.2.4 for Ruby, when initialized wit…
• CVE-2016-3694Multiple SQL injection vulnerabilities in modified eCommerce…
• CVE-2016-3695The einj_error_inject function in drivers/acpi/apei/einj.c i…
• CVE-2016-3696The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows loc…
• CVE-2016-3697libcontainer/user/user.go in runC before 0.1.0, as used in D…7.8
• CVE-2016-3698libndp before 1.6, as used in NetworkManager, does not prope…
• CVE-2016-3700Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-3701Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-3702Padding oracle flaw in CloudForms Management Engine (aka CFM…
• CVE-2016-3703Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly val…
• CVE-2016-3704Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to ge…
• CVE-2016-3705The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex…