[Secure-testing-commits] r46804 - data/CVE

[Paul Wise]

Author: pabs
Date: 2016-12-06 05:26:16 +0000 (Tue, 06 Dec 2016)
New Revision: 46804

Modified:
   data/CVE/list
Log:
New Linux local root exploit

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-06 05:19:45 UTC (rev 46803)
+++ data/CVE/list	2016-12-06 05:26:16 UTC (rev 46804)
@@ -9401,8 +9401,11 @@
 CVE-2016-8656
 	RESERVED
 	NOT-FOR-US: Red Hat JBoss; jbossas init script
-CVE-2016-8655
+CVE-2016-8655 [af_packet.c race condition (local root)]
 	RESERVED
+	- linux <unfixed>
+	NOTE: http://seclists.org/oss-sec/2016/q4/607
+	NOTE: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=84ac7260236a49c79eede91617700174c2c19b0c
 CVE-2016-8654 [Heap-based buffer overflow in QMFB code in JPC codec]
 	RESERVED
 	- jasper <removed>