CVE-2016-8655

HIGH

7.8

CVSS Score

Published: December 8, 2016 at 08:08 AM UTC

Updated: June 17, 2026 at 12:54 AM UTC

2 products affected across 2 vendorsLinux KernelUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 11%

Description

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

12.04 14.04 16.04 16.10

Linux Kernel · Linux

95%

3.11 ≤ v < 3.12.693.13 ≤ v < 3.16.403.17 ≤ v < 3.18.463.19 ≤ v < 4.1.373.2 ≤ v < 3.2.853.3 ≤ v < 3.10.1064.2 ≤ v < 4.4.384.5 ≤ v < 4.8.14

Affected range stops below 3.10.106, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.12.69, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.16.40, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.46, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.2.85, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.1.37, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.38, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.8.14, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references