CVE-2016-8399

CVE-2016-8399 is an elevation of privilege vulnerability affecting the Android kernel networking subsystem (versions 3.10 and 3.18). A local malicious application could exploit this to execute arbitrary code within the kernel context. Rated as High severity (CVSS 7.0), successful exploitation requires first compromising a privileged process and is made more difficult by compiler optimizations restricting access to the vulnerable code. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is there evidence of active exploitation or significant community discussion.