CVE-2016-4998

CVE-2016-4998 is an out-of-bounds read vulnerability in the Linux kernel's netfilter subsystem, specifically affecting the IPT_SO_SET_REPLACE setsockopt implementation. This flaw impacts various Linux distributions, including Canonical, Oracle, and generic Linux kernels before version 4.6. A local attacker with in-container root access can trigger a denial of service or potentially extract sensitive information from kernel memory by providing a malformed offset. The vulnerability carries a CVSS score of 7.1 (HIGH), indicating a high severity due to its low attack complexity and potential for both confidentiality and availability impacts. While requiring local access, the exploit does not necessitate user interaction. Although not listed on the CISA KEV catalog, a Metasploit module exists for privilege escalation, suggesting exploitability. Community discussion is minimal, with only one mention, and there is no media coverage, indicating a relatively low public profile despite the availability of exploit code.