CVE-2016-8658

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7.5

Description The issue is related to a stack-based buffer overflow in the brcmf cfg80211 start ap function. This function is located in the cfg80211.c file within the Linux kernel. The overflow can occur when a local user sends a command to a Netlink socket with a long SSID Information Element. This can cause a denial of service, resulting in a system crash, or potentially have other unspecified impacts.

Recommendations For Linux kernel versions prior to 4.7.5, update to version 4.7.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Netlink socket to minimize the risk of exploitation.