CVE

Id
96626  
CVE No.
CVE-2016-9806  
Status
Candidate  
Description
Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated.  
Phase
Assigned (20161204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
801214 96626 CVE-2016-9806 MLIST:[netdev] 20160515 BUG: use-after-free in netlink_dump  View
801215 96626 CVE-2016-9806 URL:http://lists.openwall.net/netdev/2016/05/15/69  View
801216 96626 CVE-2016-9806 MLIST:[oss-security] 20161203 CVE Request: -- Linux kernel: double free in netlink_dump  View
801217 96626 CVE-2016-9806 URL:http://www.openwall.com/lists/oss-security/2016/12/03/4  View
801218 96626 CVE-2016-9806 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=92964c79b357efd980812c4de5c1fd2ec8bb5520  View
801219 96626 CVE-2016-9806 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3  View
801220 96626 CVE-2016-9806 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1401502  View
801221 96626 CVE-2016-9806 CONFIRM:https://github.com/torvalds/linux/commit/92964c79b357efd980812c4de5c1fd2ec8bb5520  View
801222 96626 CVE-2016-9806 CONFIRM:https://source.android.com/security/bulletin/2017-03-01.html  View
801223 96626 CVE-2016-9806 BID:94653  View

Related JVN