What is CVE-2016-2066?

CVE-2016-2066 is a high-severity vulnerability in Linux Kernel, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2016-06-13.

How severe is CVE-2016-2066?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2016-2066 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Privilege escalation in Linux Kernel

CVE-2016-2066

Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application that makes an ioctl call.

Vulnerability class: Privilege Escalation

EPSS: 0.014 (69.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

Public proof-of-concept exploits

thdusdl1219/CVE-Study

References

cve@mitre.org (x_refsource_CONFIRM, Broken Link)
cve@mitre.org (x_refsource_CONFIRM, Patch, Mailing List, Third Party Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2016-2066?: CVE-2016-2066 is a high-severity vulnerability in Linux Kernel, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2016-06-13.
How severe is CVE-2016-2066?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2016-2066 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.