PT-2016-7227
CVE-2016-7117
·
Published
2016-04-21
·
Updated
2023-01-19
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.5.2
Description
The issue is related to a use-after-free vulnerability in the
sys recvmmsg function, located in the net/socket.c file of the Linux kernel. This vulnerability can be exploited by remote attackers to execute arbitrary code through vectors involving a recvmmsg system call that is mishandled during error processing.Recommendations
For Linux kernel versions prior to 4.5.2, update to version 4.5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the recvmmsg system call to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾