FPII-2317: Elevation of privilege vulnerability in kernel security subsystem CVE-2016-4470 A-29823941
The key_reject_and_link function in the security/keys/key.c file, in the Linux kernel through 4.6.3, contains an error in which a key-lookup could fail and in an attempt to cache, the failed lookup may attempt to free memory that could still be in use, leading to a potential use-after-free vulnerability.
The fix is designed to add an additional check condition to ensure the data structure is initialized and prevents the potential use-after-free vulnerability.
Change-Id: Ia83f75010b050139b9a5868461bc75abdc0a7e87
1 file changed