CVE-2016-8655

—

CVSS 3.1

7.8 high

EPSS

11%p96

Published

Dec 8, 2016 (Dec 8, 2016)

Modified

Jun 17, 2026

Description

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.

Vendors: linux canonical
Products: linux kernel, ubuntu linux
Weakness: CWE-362, CWE-416
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.1%)

In the news5 stories

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

The Hacker NewsMay 1, 06:38 UTC · May 1, 2025Malware CVE-2016-8655 CVE-2016-5195

11-Year Old Linux Kernel Local Privilege Escalation Flaw Discovered

The Hacker NewsFeb 22, 18:08 UTC · Feb 22, 2017Vulnerability CVE-2017-6074 CVE-2016-8655

CVE-2017-6074 is a new 11-year old Linux Kernel vulnerability discoveredCVE-2017-6074 is a new 11-year old Linux Kernel vulnerability discovered

Security AffairsFeb 22, 21:46 UTC · Feb 22, 2017Vulnerability CVE-2017-6074 CVE-2016-8655

CVE-2016-8655 - A new 5-Year

Security AffairsDec 8, 07:27 UTC · Dec 8, 2016Vulnerability CVE-2016-8655

5-Year-Old Linux Kernel Local Privilege Escalation Flaw Discovered

The Hacker NewsDec 7, 16:14 UTC · Dec 7, 2016Vulnerability CVE-2016-8655