The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6187.json"
[ { "events": [ { "introduced": "4.5" }, { "fixed": "4.6.5" } ] } ]