Security Advisory

CVE-2016-3134

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-04-27 17:00:00
Last updated 2024-08-05 23:47:57
Assigner microfocus
State PUBLISHED

Description

The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.