CVE-2016-4997

CVE-2016-4997 describes a local privilege escalation and denial-of-service vulnerability in the Linux kernel's netfilter subsystem, affecting versions before 4.6.3, including distributions like Canonical, Debian, and Oracle. This flaw allows a local attacker with in-container root access to trigger memory corruption by providing a crafted offset value to the compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations. With a CVSS score of 7.8 (High), the vulnerability is easily exploitable with low attack complexity and can lead to full compromise of confidentiality, integrity, and availability. While not on the KEV catalog, exploit code, including a Metasploit module, is publicly available, and it has garnered significant community discussion and media coverage, indicating its potential for active exploitation.