Arch Linux Security Advisory ASA-201612-7 ========================================= Severity: High Date : 2016-12-06 CVE-ID : CVE-2016-8655 Package : linux-lts Type : privilege escalation Remote : No Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package linux-lts before version 4.4.36-1 is vulnerable to privilege escalation. Resolution ========== Upgrade to 4.4.36-1. # pacman -Syu "linux-lts>=4.4.36-1" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== Philip Pettersson discovered a race condition in the af_packet implementation in the Linux kernel. A local unprivileged attacker could use this to cause a denial of service (system crash) or run arbitrary code with administrative privileges. Impact ====== A local unprivileged attacker is able to crash the system or run arbitrary code with administrative privileges. References ========== https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8... http://seclists.org/oss-sec/2016/q4/607 https://access.redhat.com/security/cve/CVE-2016-8655