CVE-2016-3841

—

CVSS 3.1

7.3 high

EPSS

<1%p22

Published

Aug 6, 2016 (Aug 6, 2016)

Modified

Jun 17, 2026

Description

The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call.

Vendors: google linux
Products: android, linux kernel
Weakness: CWE-264, CWE-416
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.