Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12
allows local users to gain privileges or cause a denial of service
(use-after-free) by leveraging the CAP_NET_RAW capability to change a
socket version, related to the packet_set_ring and packet_setsockopt
functions.

Philip Pettersson discovered a race condition in the af_packet
implementation in the Linux kernel. A local unprivileged attacker could use
this to cause a denial of service (system crash) or run arbitrary code with
administrative privileges.