CVE-2016-7042: The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compile...

Security readout for executives and security teams

This is a local denial-of-service flaw in the Linux kernel. On affected builds, a local user reading the kernel keys listing can corrupt stack memory and trigger a kernel panic, taking the system down. The bundle does not show remote exploitation or data theft. Exposure is most relevant to Linux or Android systems using affected kernel builds, especially multi-user hosts where untrusted local users can read /proc/keys. The provided affected-product metadata is incomplete, so validate against vendor kernel advisories rather than product names alone. Handle through normal kernel patch management, with higher urgency for shared Linux systems. The business risk is availability disruption, not confirmed remote compromise. Lack of CVSS and KEV evidence lowers emergency priority but does not remove patching need. Mitigation focus: Apply vendor kernel security updates for affected Linux or Android builds.; Prioritize multi-user systems and hosts running untrusted local workloads.; Use vendor advisories to confirm fixed package versions or backports..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.