NetSight
critical9.8

CVE-2016-7117

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code …

Impact

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 7.0
LinuxLinux Kernel
from 2.6.33 before 3.2.80
from 3.3 before 3.4.113
from 3.5 before 3.10.102
from 3.11 before 3.12.59
from 3.13 before 3.14.67
from 3.15 before 3.16.35
CanonicalUbuntu Linux
Version 16.04

Weakness classification

References