CVE-2016-8645

—

CVSS 3.0

5.5 medium

EPSS

<1%p39

Published

Nov 28, 2016 (Nov 28, 2016)

Modified

Jun 17, 2026

Description

The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c.

Vendors: linux
Products: linux kernel
Weakness: CWE-284
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.