The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4580
