CVE-2016-7117

Critical

Published: 10/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the __sys_recvmmsg function in the Linux kernel before version 4.5.2 allows remote attackers to execute arbitrary code via mishandled error processing during a recvmmsg system call.

Risk Assessment

An attacker can exploit this vulnerability to execute code remotely, posing a serious threat to the integrity and confidentiality of the system.

Recommendation

It is recommended to update the Linux kernel to version 4.5.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.