CVE-2016-7117

high-risk
Published 2016-10-10

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.

Do I need to act?

!
10.6% chance of exploitation in next 30 days
EPSS score — higher than 89% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (3)

Affected Vendors

Debian Canonical Linux

References (42)

Issue Tracking http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b88a...
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2962.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0031.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0036.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0065.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0086.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0091.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0113.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0196.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0215.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0216.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0217.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0270.html
Vendor Advisory http://source.android.com/security/bulletin/2016-10-01.html
Release Notes http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2
Third Party Advisory http://www.securityfocus.com/bid/93304
Issue Tracking https://bugzilla.novell.com/show_bug.cgi?id=1003077
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1382268
Issue Tracking https://github.com/torvalds/linux/commit/34b88a68f26a75e4fded796f1a49c40f82234b7...
Issue Tracking https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7117.html
and 22 more references
52
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 11/34 · Low
Exposure 9/34 · Low