google android CVE-2016-0728 vulnerability in Google and Other Products
Published on February 8, 2016

product logo product logo product logo product logo product logo
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2016-0728

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2016-0728 are published in these products:

Google Android
 
HP Server Migration Pack
 
Linux Kernel
 
Debian Linux
 
Canonical Ubuntu Linux
 

Exploit Probability

EPSS
50.48%
Percentile
97.78%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.