CVE-2016-9604 Privilege escalation in security
Root users can bypass module signature verification by joining internal keyrings, allowing them to load unsigned kernel modules.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9604?
CVE-2016-9604 is a medium-severity vulnerability in Linux kernel, published on 11 Jul 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
Which versions are affected by CVE-2016-9604?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2016-9604?
Apply the vendor's patch.
Is CVE-2016-9604 being exploited?
There is no known exploitation of CVE-2016-9604 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2016-9604, GHSA-8qc8-27v8-7664, UBUNTU-CVE-2016-9604.