CVE-2016-8646

 

Published at: - 28-11-2016 04:59

Last modified: - 21-09-2022 08:44

Total changes: - 2

Description

The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=1388821
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.6
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4afa5f9617927453ac04b24b584f6c718dfb4f45
• [oss-security] 20161115 CVE-2016-8646: linux kernel - oops in shash_async_export()-Mailing List, Third Party Advisory
• https://github.com/torvalds/linux/commit/4afa5f9617927453ac04b24b584f6c718dfb4f45
• 94309-
• RHSA-2017:1308-
• RHSA-2017:1298-
• RHSA-2017:1297-

 

Keywords

NVD

 

CVE-2016-8646

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures