CVE-2016-5243

The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows…

published June 27, 2016

CVSS
—
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.1th percentile
Published
2016-06-27T10:00Z
EPSS history
Timeline
  • 27 JUN 10:00Z
    The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows…
    cvelistv5