CVE-2016-7117 Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system c...
CriticalCVSS 9.8
EPSS 23.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.5.2-1 | 4.5.2-1 |
| debian/linux(Debian:13) | < 4.5.2-1 | 4.5.2-1 |
| debian/linux(Debian:14) | < 4.5.2-1 | 4.5.2-1 |
| debian linux | = 7.0 | No fix listed |
| Linux kernel | >= 2.6.33, < 3.2.80 | 3.2.80 |
| Linux kernel | >= 3.3, < 3.4.113 | 3.4.113 |
| Linux kernel | >= 3.5, < 3.10.102 | 3.10.102 |
| Linux kernel | >= 3.11, < 3.12.59 | 3.12.59 |
| Linux kernel | >= 3.13, < 3.14.67 | 3.14.67 |
| Linux kernel | >= 3.15, < 3.16.35 | 3.16.35 |
| Linux kernel | >= 3.17, < 3.18.37 | 3.18.37 |
| Linux kernel | >= 3.19, < 4.1.28 | 4.1.28 |
| Linux kernel | >= 4.2.0, < 4.4.8 | 4.4.8 |
| Linux kernel | >= 4.5.0, < 4.5.2 | 4.5.2 |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
References
- Debian Security Tracker CVE-2016-7117 issue-tracking third-party-advisory vendor-advisory
- git.kernel.org issue-tracking patch vendor-advisory
- RHSA-2016:2962 third-party-advisory vendor-advisory
- RHSA-2017:0031 third-party-advisory vendor-advisory
- RHSA-2017:0036 third-party-advisory vendor-advisory
- RHSA-2017:0065 third-party-advisory vendor-advisory
- RHSA-2017:0086 third-party-advisory vendor-advisory
- RHSA-2017:0091 third-party-advisory vendor-advisory
- RHSA-2017:0113 third-party-advisory vendor-advisory
- RHSA-2017:0196 third-party-advisory vendor-advisory
- RHSA-2017:0215 third-party-advisory vendor-advisory
- RHSA-2017:0216 third-party-advisory vendor-advisory
- RHSA-2017:0217 third-party-advisory vendor-advisory
- RHSA-2017:0270 third-party-advisory vendor-advisory
- source.android.com vendor-advisory
- www.kernel.org release-notes vendor-advisory
- 93304 third-party-advisory vdb-entry
- bugzilla.novell.com issue-tracking third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com issue-tracking patch third-party-advisory
- people.canonical.com issue-tracking third-party-advisory