First published: Fri Jun 24 2016(Updated: )
An out-of-bounds heap memory access, leading to a Denial of Service or possibly heap disclosure or further impact was found in setsockopt(). The particular setsockopt() call is normally restricted to root, however some processes with cap_sys_admin may also be able to trigger this flaw. Upstream fixes <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d04">http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d04</a> <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e94e0cfb088">http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6e94e0cfb088</a> <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bdf533de6968">http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bdf533de6968</a> Discussion on oss-sec: <a href="http://www.openwall.com/lists/oss-security/2016/06/24/5">http://www.openwall.com/lists/oss-security/2016/06/24/5</a>
Credit: secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Linux kernel | <=4.5.5 | |
Oracle Linux | =7 | |
Canonical Ubuntu Linux | =12.04 | |
Canonical Ubuntu Linux | =14.04 | |
Canonical Ubuntu Linux | =15.10 | |
Canonical Ubuntu Linux | =16.04 | |
debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.12.5-1 6.12.6-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-4998 is a vulnerability in the Linux kernel that allows local users to cause a denial of service or obtain sensitive information from kernel heap memory.
CVE-2016-4998 can result in an out-of-bounds read, leading to a denial of service or potential information disclosure.
CVE-2016-4998 affects Linux kernel versions before 4.6.
To fix the vulnerability in CVE-2016-4998, update to Linux kernel version 4.6 or later.
You can find more information about CVE-2016-4998 at the following references: [SecurityTracker](http://www.securitytracker.com/id/1036171), [SecurityFocus](http://www.securityfocus.com/bid/91451), [Debian Security Advisory](http://www.debian.org/security/2016/dsa-3607).