CVE-2016-4998

EIP tracks 1 public exploit for CVE-2016-4998. PoCs published by h00die <[email protected]>, vnik, Jesse Hertz, Tim Newsham, including Metasploit module exploits/linux/local/netfilter_priv_esc_ipv4.

AI-analyzed exploit summary This Metasploit module exploits CVE-2016-4997, a Linux kernel netfilter privilege escalation vulnerability affecting kernels before 4.6.3. It targets Ubuntu 16.04 with kernel 4.4.0-21-generic, leveraging a race condition in netfilter to escalate privileges.

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.