USN-5039-1: Linux kernel vulnerability
Andy Nguyen discovered that the netfilter subsystem in the Linux kernel
contained an out-of-bounds write in its setsockopt() implementation. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code.
Source: USN-5039-1: Linux kernel vulnerability