CVE
- Id
- 93862
- CVE No.
- CVE-2016-7042
- Status
- Candidate
- Description
- The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allows local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file.
- Phase
- Assigned (20160823)
- Votes
- None (candidate not yet proposed)
- Comments