PT-2016-7833 · Linux+5 · Linux Kernel+5

Baozeng Ding · Published 2016-06-26 · Updated 2023-01-17 · CVE-2016-9806

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.6.3

Description A race condition exists in the netlink dump function, allowing local users to cause a denial of service or possibly have other unspecified impacts by making sendmsg system calls with a crafted application. This leads to a double free operation associated with a new dump that started earlier than anticipated.

Recommendations For Linux kernel versions prior to 4.6.3, update to version 4.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the netlink dump function to minimize the risk of exploitation.

Fix

DoS

Race Condition

Double Free

Weakness Enumeration

CWE-362

CWE-415

Related Identifiers

ALT-PU-2016-1641

ALT-PU-2016-1642

CESA-2017_1842

CVE-2016-9806

OPENSUSE-SU-2017_0456-1

OPENSUSE-SU-2017_0458-1

RHSA-2017:1842

RHSA-2017:2077

RHSA-2017:2669

RHSA-2017_1842

RHSA-2017_2077

SUSE-SU-2017:0230-1

SUSE-SU-2017:0231-1

SUSE-SU-2017:0233-1

SUSE-SU-2017:0234-1

SUSE-SU-2017:0235-1

SUSE-SU-2017:0244-1

SUSE-SU-2017:0245-1

SUSE-SU-2017:0246-1

SUSE-SU-2017:0247-1

SUSE-SU-2017:0248-1

SUSE-SU-2017:0249-1

SUSE-SU-2017:0267-1

SUSE-SU-2017:0268-1

SUSE-SU-2017:0303-1

SUSE-SU-2017:0407-1

SUSE-SU-2017:0464-1

SUSE-SU-2017:0471-1

SUSE-SU-2017:0575-1

SUSE-SU-2017_0303-1

USN-3168-1

USN-3168-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 332

• https://github.com/torvalds/linux/commit/92964c79b357efd980812c4de5c1fd2ec8bb5520 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1401502 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2017:0231-1 · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2077 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-9806 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0407-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9806 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0247-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3168-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0249-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-9806 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2017:0230-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0234-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0246-1 · Vendor Advisory