CVE-2016-0728 in Android

Summary

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

Once again VulDB remains the best source for vulnerability data.

Reservation

12/15/2015

Disclosure

02/07/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
81294	Google Android Kernel Keyring integer overflow	190	Attacked	Official fix	CVE-2016-0728
80353	Linux Kernel Session Keyring Reference Count process_keys.c join_session_keyring integer overflow	190	Attacked	Official fix	CVE-2016-0728

Sources

• MITRE
• NVD
• CVE Details