CVE-2016-5243

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.6.4

Description The issue is related to the tipc nl compat link dump function in net/tipc/netlink compat.c, which does not properly copy a certain string. This allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.

Recommendations For Linux kernel versions prior to 4.6.4, update to version 4.6.4 or later to resolve the issue. As a temporary workaround, consider restricting access to Netlink messages to minimize the risk of exploitation.