CVE-2016-7097

CVE-2016-7097 is a medium-severity vulnerability affecting the Linux kernel through version 4.8.2, where the filesystem implementation incorrectly preserves the setgid bit during a setxattr call. This flaw allows a local attacker with low privileges to potentially gain group privileges by exploiting a setgid program with restricted execute permissions. The attack requires local access and has low complexity, with potential impacts on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.