vulnerability

Red Hat: CVE-2016-6136: Moderate: kernel security and bug fix update (RHSA-2017:0307)

Severity
2
CVSS
(AV:L/AC:M/Au:N/C:N/I:P/A:N)
Published
Aug 6, 2016
Added
Nov 4, 2016
Modified
Jul 9, 2025

Description

Race condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a "double fetch" vulnerability.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-kernel

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.