CVE-2016-8655: Race Condition
A race condition vulnerability was found in packetsetring that can lead to use after free on a function pointer. This vulnerability can be used to gain kernel code execution for the local attacker capable of creating AFPACKET sockets. This issue was introduced with following commit:
https://github.com/torvalds/linux/commit/f6fb8f100b807378fda19e83e5ac6828b638603a
Other sources
Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAPNETRAW capability to change a socket version, related to the packetsetring and packetsetsockopt functions.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8655?
CVE-2016-8655 has a high severity as it can lead to kernel code execution for local attackers.
How do I fix CVE-2016-8655?
To fix CVE-2016-8655, upgrade to a patched version of the Linux kernel or apply specific updates that address this vulnerability.
Which versions are affected by CVE-2016-8655?
CVE-2016-8655 affects several versions of the Linux kernel between 3.2 and 4.4 as well as specific versions of Ubuntu Linux.
Who is impacted by CVE-2016-8655?
Local attackers who can create AF_PACKET sockets are primarily impacted by CVE-2016-8655.
Can CVE-2016-8655 be exploited remotely?
CVE-2016-8655 cannot be exploited remotely; it requires local access to the system.