CVE-2016-7117
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 23.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 23.56% probability · 98th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-19
- Affected
- debian/debian linux · linux/linux kernel · canonical/ubuntu linux
- Source
- security@android.com
EPSS 23.6% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b88a68f26a75e4fded796f1a49c40f82234b7dIssue Tracking, Patch, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2962.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0031.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0036.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0065.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0086.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0091.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0113.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0196.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0215.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0216.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0217.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0270.htmlThird Party Advisory
- http://source.android.com/security/bulletin/2016-10-01.htmlVendor Advisory
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2Release Notes, Vendor Advisory
- http://www.securityfocus.com/bid/93304Third Party Advisory, VDB Entry
- https://bugzilla.novell.com/show_bug.cgi?id=1003077Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1382268Issue Tracking, Third Party Advisory
- https://github.com/torvalds/linux/commit/34b88a68f26a75e4fded796f1a49c40f82234b7dIssue Tracking, Patch, Third Party Advisory
- https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7117.htmlIssue Tracking, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2016-7117Issue Tracking, Third Party Advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b88a68f26a75e4fded796f1a49c40f82234b7dIssue Tracking, Patch, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2962.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0031.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0036.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0065.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0086.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0091.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0113.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0196.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.