Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-6516. PoCs published by wpengfei.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2016-6516, a double-fetch vulnerability in the Linux kernel's FIDEDUPERANGE ioctl. The exploit leverages a race condition to manipulate the `dest_count` field during the ioctl call, potentially leading to privilege escalation or denial of service.
Description
Race condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (heap-based buffer overflow) or possibly gain privileges by changing a certain count value, aka a "double fetch" vulnerability.
Exploits (1)
This repository contains functional exploit code for CVE-2016-6516, a double-fetch vulnerability in the Linux kernel's FIDEDUPERANGE ioctl. The exploit leverages a race condition to manipulate the `dest_count` field during the ioctl call, potentially leading to privilege escalation or denial of service.
References (5)
Scores
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H