CVE-2016-6156

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7

Description The issue is related to a race condition in the ec device ioctl xcmd function, which can be exploited by local users to cause a denial of service through an out-of-bounds array access. This is achieved by changing a certain size value, and it is also known as a "double fetch" vulnerability.

Recommendations For Linux kernel versions prior to 4.7, update to version 4.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the ec device ioctl xcmd function to minimize the risk of exploitation.