CVE-2016-8655
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.1%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 11.13% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362, CWE-416
- Affected
- linux/linux kernel · canonical/ubuntu linux
- Source
- secalert@redhat.com
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=84ac7260236a49c79eede91617700174c2c19b0cPatch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.htmlMailing List, Third Party Advisory
- http://packetstormsecurity.com/files/140063/Linux-Kernel-4.4.0-AF_PACKET-Race-Condition-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
- http://rhn.redhat.com/errata/RHSA-2017-0386.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0387.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0402.htmlThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/12/06/1Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/94692Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037403Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037968Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-3149-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-3149-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-3150-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-3150-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-3151-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-3151-2Third Party Advisory
- http://www.ubuntu.com/usn/USN-3151-3Third Party Advisory
- http://www.ubuntu.com/usn/USN-3151-4Third Party Advisory
- http://www.ubuntu.com/usn/USN-3152-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-3152-2Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1400019Issue Tracking, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.