CVE-2016-7917

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5

Description The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service by leveraging the CAP NET ADMIN capability. This is due to the nfnetlink rcv batch function in net/netfilter/nfnetlink.c not checking whether a batch message's length field is large enough, potentially leading to an infinite loop or out-of-bounds read.

Recommendations For Linux kernel versions prior to 4.5, update to version 4.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CAP NET ADMIN capability to minimize the risk of exploitation.