imPC@ndo IT

Tracker / CVE-2016-7912

CVE-2016-7912

High 7.8

Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.

Affected products and versions

linux linux_kernel · 3.15 → 3.16.40
linux linux_kernel · 3.17 → 4.1.24
linux linux_kernel · 4.2 → 4.4.9
linux linux_kernel · 4.5 → 4.5.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References