NetSight
IP …
high7.8Public exploit code

CVE-2016-8655

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free)…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2 before 3.2.85
from 3.3 before 3.10.106
from 3.11 before 3.12.69
from 3.13 before 3.16.40
from 3.17 before 3.18.46
from 3.19 before 4.1.37
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 16.10

Weakness classification

CWE-362CWE-416

References