Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAPNETRAW capability to change a socket version, related to the packetsetring and packetsetsockopt functions.
[
{
"id": "CVE-2016-8655-163e04c7",
"signature_version": "v1",
"digest": {
"function_hash": "118493288703868582311868516679568091438",
"length": 4071.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@84ac7260236a49c79eede91617700174c2c19b0c",
"signature_type": "Function",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_setsockopt"
}
},
{
"id": "CVE-2016-8655-6d9fb928",
"signature_version": "v1",
"digest": {
"function_hash": "168391981781812897637243088094471848400",
"length": 3197.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@84ac7260236a49c79eede91617700174c2c19b0c",
"signature_type": "Function",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
}
},
{
"id": "CVE-2016-8655-bc102c87",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"181138238253593667745880515590749917846",
"246108124440558820131596381755216129156",
"138879693278934267254353011131884986829",
"267202527911194640037222306114722634423",
"311796720547089213610156242325754259513",
"245228454999140904836815204045166523705",
"181090900963946958370396300284403398580",
"69262930232529606613473130957636482797",
"121390998257607051231867813834664718095",
"233159563621480334496843418248043142262",
"152997993493944897824426868823147161417",
"59314483064278528117392519630715953281",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273",
"256161678533305441568934265996722564445",
"60694324537982241763838164688833717830",
"230093130711226449098259043615603467581",
"287024278795819199845908861451476409731",
"181163185600503106577096509738598189270",
"118718850051732060655510315306967289439",
"188048609111178625289975179642247014152",
"219918282878851027268229204332272135243",
"88905362348608002184385645111088121019",
"123514983309888675872669847170367223956",
"86586749978390136745885043013670523424",
"306826330664168965309147457325072648544",
"93937516555573768906982637924574255124",
"240894796540615228570731438920408101816",
"123630893940014694020920663064138072003",
"294054917878118713623289298972952488586"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@84ac7260236a49c79eede91617700174c2c19b0c",
"signature_type": "Line",
"target": {
"file": "net/packet/af_packet.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8655.json"
[
{
"id": "CVE-2016-8655-00fd1cb3",
"signature_version": "v1",
"digest": {
"function_hash": "118493288703868582311868516679568091438",
"length": 4071.0
},
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/84ac7260236a49c79eede91617700174c2c19b0c",
"signature_type": "Function",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_setsockopt"
}
},
{
"id": "CVE-2016-8655-1f00bcf3",
"signature_version": "v1",
"digest": {
"function_hash": "168391981781812897637243088094471848400",
"length": 3197.0
},
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/84ac7260236a49c79eede91617700174c2c19b0c",
"signature_type": "Function",
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
}
},
{
"id": "CVE-2016-8655-d0da840c",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"181138238253593667745880515590749917846",
"246108124440558820131596381755216129156",
"138879693278934267254353011131884986829",
"267202527911194640037222306114722634423",
"311796720547089213610156242325754259513",
"245228454999140904836815204045166523705",
"181090900963946958370396300284403398580",
"69262930232529606613473130957636482797",
"121390998257607051231867813834664718095",
"233159563621480334496843418248043142262",
"152997993493944897824426868823147161417",
"59314483064278528117392519630715953281",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273",
"256161678533305441568934265996722564445",
"60694324537982241763838164688833717830",
"230093130711226449098259043615603467581",
"287024278795819199845908861451476409731",
"181163185600503106577096509738598189270",
"118718850051732060655510315306967289439",
"188048609111178625289975179642247014152",
"219918282878851027268229204332272135243",
"88905362348608002184385645111088121019",
"123514983309888675872669847170367223956",
"86586749978390136745885043013670523424",
"306826330664168965309147457325072648544",
"93937516555573768906982637924574255124",
"240894796540615228570731438920408101816",
"123630893940014694020920663064138072003",
"294054917878118713623289298972952488586"
]
},
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/84ac7260236a49c79eede91617700174c2c19b0c",
"signature_type": "Line",
"target": {
"file": "net/packet/af_packet.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8655.json"