CVE-2016-7042

CVE-2016-7042 describes a denial-of-service vulnerability in the Linux kernel, specifically within the proc_keys_show function in security/keys/proc.c, affecting versions through 4.8.2. When the GCC stack protector is enabled, an incorrect buffer size for timeout data can be triggered by local users reading the /proc/keys file, leading to stack memory corruption and a system panic. This vulnerability has a CVSS v3 score of 6.2 (Medium), indicating a local attack vector with low attack complexity and no user interaction required, resulting in high availability impact. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.