CVE-2016-7425

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.8.3

Description The issue allows local users to gain privileges or cause a denial of service due to a heap-based buffer overflow. This is caused by the arcmsr iop message xfer function in drivers/scsi/arcmsr/arcmsr hba.c not restricting a certain length field, which can be exploited via an ARCMSR MESSAGE WRITE WQBUFFER control code.

Recommendations For Linux kernel versions prior to 4.8.3, update to version 4.8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the arcmsr iop message xfer function until a patch is available.