cve/2016/CVE-2016-6516.md

CVE-2016-6516

Description

Race condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (heap-based buffer overflow) or possibly gain privileges by changing a certain count value, aka a "double fetch" vulnerability.

POC

Reference

• http://www.openwall.com/lists/oss-security/2016/07/31/6

Github

• https://github.com/mudongliang/LinuxFlaw
• https://github.com/oneoy/cve-
• https://github.com/wpengfei/CVE-2016-6516-exploit