{"action":"Upgrade linux to 4.4.2-1 or later.","affected":[{"fixed":"4.4.2-1","introduced":"0"}],"component":"linux","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["4.4.2-1"],"id":"tcs_01M5NBGED1QBSEC9P828629WFE","modified_at":"2026-09-22T07:03:03.876768214Z","published_at":"2016-04-27T17:59:07.977Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-2085","https://security-tracker.debian.org/tracker/CVE-2016-2085"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-2085#Debian:13/linux","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-2085"}],"summary":"The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing sid"}