ID:10128 - Exploit for Permissions, privileges, and access controls in Linux kernel - CVE-2016-6187

 
Main Vulnerability Database Exploits ID:10128 - Exploit for Permissions, privileges, and access controls in Linux kernel - CVE-2016-6187

ID:10128 - Exploit for Permissions, privileges, and access controls in Linux kernel - CVE-2016-6187

Published: June 28, 2024


Vulnerability identifier: #VU92453
Vulnerability risk: Low
CVE-ID: CVE-2016-6187
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to permissions, privileges, and access controls error within the apparmor_setprocattr() and aa_current_profile() functions in security/apparmor/lsm.c. A local user can execute arbitrary code.


Remediation

Install update from vendor's repository.