ID:9912 - Exploit for Use-after-free in Linux kernel - CVE-2016-4558

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to a use-after-free error within the replace_map_fd_with_map_ptr() function in kernel/bpf/verifier.c, within the __bpf_map_get(), bpf_map_get_with_uref(), __bpf_prog_get() and bpf_prog_get() functions in kernel/bpf/syscall.c, within the bpf_any_get() and bpf_obj_do_get() functions in kernel/bpf/inode.c. A local user can execute arbitrary code.

Remediation