CVE-2016-6136 in Google Android

Résumé (Anglaise)

Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a "double fetch" vulnerability.

Réserver

01/07/2016

Divulgation

06/08/2016

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
93491	Google Android Kernel System-Call Auditing race condition	362	Non défini	Correctif officiel	CVE-2016-6136
90643	Linux Kernel auditsc.c audit_log_single_execve_arg race condition	362	Non défini	Correctif officiel	CVE-2016-6136