CWE Code: 416
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Use After Free
Summary: race condition in the l2tpv3 ip encapsulation feature in the linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the sock_zapped status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-03-07
Last Modified Date: 2018-01-05