CVE-2016-0723

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1

Description A race condition in the tty ioctl function in drivers/tty/tty io.c may allow local users to obtain sensitive information from kernel memory or cause a denial of service, such as a use-after-free condition and system crash, by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.

Recommendations For Linux kernel versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the tty ioctl function to minimize the risk of exploitation.