vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2016-8399

HIGH
7
CVSS Score
Published: January 12, 2017 at 03:00 PM UTC
Updated: June 17, 2026 at 12:54 AM UTC
2 products affected across 2 vendorsLinux KernelAndroid

Using Android by Google Inc.?

Get instant alerts when new vulnerabilities affect Android - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7
Exploit prediction
EPSS 2%

Description

An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and current compiler optimizations restrict access to the vulnerable code. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31349935.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
3.19 ≤ v < 4.1.374.2 ≤ v < 4.4.384.5 ≤ v < 4.8.14
Affected range stops below 4.1.37, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.4.38, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.8.14, so it looks safe — our inference, not a vendor statement
Android· Google
60%
Kernel-3.10Kernel-3.18

References (7)

Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2017-0817.html
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/94708
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:0869
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:2930
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:2931
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://source.android.com/security/bulletin/2016-12-01.html
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://support.f5.com/csp/article/K23030550?utm_source=f5support&amp%3Butm_medium=RSS

CVSS

7HIGH[email protected]
Attack Vector
LOCAL
Complexity
HIGH
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-284

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card