CVE-2016-9806

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.6.3

Description A race condition exists in the netlink dump function, allowing local users to cause a denial of service or possibly have other unspecified impacts by making sendmsg system calls with a crafted application. This leads to a double free operation associated with a new dump that started earlier than anticipated.

Recommendations For Linux kernel versions prior to 4.6.3, update to version 4.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the netlink dump function to minimize the risk of exploitation.