CVE-2016-10044

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass…

published February 7, 2017

CVSS
—
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.4th percentile
Published
2017-02-07T07:02Z
EPSS history
Timeline
  • 07 FEB 07:02Z
    The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass…
    cvelistv5