CVE-2016-9806

Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "3.12"
            },
            {
                "fixed": "3.12.62"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "3.13"
            },
            {
                "fixed": "3.14.73"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "3.15"
            },
            {
                "fixed": "3.16.37"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "3.17"
            },
            {
                "fixed": "3.18.37"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "3.19"
            },
            {
                "fixed": "4.1.28"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.2"
            },
            {
                "fixed": "4.4.14"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "4.5"
            },
            {
                "fixed": "4.6.3"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9806.json"