CVE-2016-0728
CVE-2016-0728
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.
Affected products
n/a · n/apublic PoCs found — 14
githubgithub.com/nardholio/cve-2016-0728★ 22githubgithub.com/bittorrent3389/cve-2016-0728★ 7githubgithub.com/neuschaefer/cve-2016-0728-testbed★ 5githubgithub.com/kennetham/cve_2016_0728★ 3githubgithub.com/sugarvillela/CVE★ 1githubgithub.com/idl3r/cve-2016-0728★ 1githubgithub.com/th30d00r/Linux-Vulnerability-CVE-2016-0728-and-Exploit★ 0githubgithub.com/googleweb/CVE-2016-0728★ 0githubgithub.com/sibilleg/exploit_cve-2016-0728★ 0githubgithub.com/hal0taso/CVE-2016-0728★ 0githubgithub.com/sidrk01/cve-2016-0728★ 0exploitdbwww.exploit-db.com/exploits/40003unverifiedexploitdbwww.exploit-db.com/exploits/39277unverifiedcve_referencewww.exploit-db.com/exploits/39277/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23567fd052a9abb6d67fe8e7a9ccdd9800a540f2http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-02/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html