NetSight
IP …
high7.8Public exploit code

CVE-2016-0728

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1
HpServer Migration Pack
through 7.5
LinuxLinux Kernel
from 3.8 before 3.10.95
from 3.11 before 3.12.53
from 3.13 before 3.14.59
from 3.15 before 3.16.35
from 3.17 before 3.18.26
from 3.19 before 4.1.16
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10

References