CVE-2016-2550 in Linux Kernel
Summary
The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.
Reservation
02/23/2016
Disclosure
04/27/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81089 | Linux Kernel in-flight fds resource management | 399 | Unproven | Official fix | CVE-2016-2550 |