Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated.
[
{
"deprecated": false,
"target": {
"function": "netlink_dump",
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@92964c79b357efd980812c4de5c1fd2ec8bb5520",
"digest": {
"function_hash": "208845534133943298604940698083177019185",
"length": 1452.0
},
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2016-9806-0b07325f"
},
{
"deprecated": false,
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@92964c79b357efd980812c4de5c1fd2ec8bb5520",
"digest": {
"line_hashes": [
"156820561133827173690397006175048778599",
"78964678769591804880590655485125569539",
"77775780293534684024255715371560591451",
"189376656304950960865211819701688050974",
"67121965961181373510610120988585933383",
"71799986851193751403400038962666020233",
"225479893256424079842892842971941804515",
"153441558958738656993617790412333237582",
"317718586849593900935286056680092893859",
"159084378361116136188738128955883595351",
"285446662596660446312232089356704442003"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2016-9806-57e2681a"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9806.json"
[
{
"deprecated": false,
"target": {
"function": "netlink_dump",
"file": "net/netlink/af_netlink.c"
},
"source": "https://github.com/torvalds/linux/commit/92964c79b357efd980812c4de5c1fd2ec8bb5520",
"digest": {
"function_hash": "208845534133943298604940698083177019185",
"length": 1452.0
},
"signature_type": "Function",
"signature_version": "v1",
"id": "CVE-2016-9806-11c89a43"
},
{
"deprecated": false,
"target": {
"file": "net/netlink/af_netlink.c"
},
"source": "https://github.com/torvalds/linux/commit/92964c79b357efd980812c4de5c1fd2ec8bb5520",
"digest": {
"line_hashes": [
"156820561133827173690397006175048778599",
"78964678769591804880590655485125569539",
"77775780293534684024255715371560591451",
"189376656304950960865211819701688050974",
"67121965961181373510610120988585933383",
"71799986851193751403400038962666020233",
"225479893256424079842892842971941804515",
"153441558958738656993617790412333237582",
"317718586849593900935286056680092893859",
"159084378361116136188738128955883595351",
"285446662596660446312232089356704442003"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1",
"id": "CVE-2016-9806-e12f375c"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9806.json"