CVE-2016-9191

—

CVSS 3.0

5.5 medium

EPSS

<1%p36

Published

Nov 28, 2016 (Nov 28, 2016)

Modified

Jun 17, 2026

Description

The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity.

Vendors: linux
Products: linux kernel
Weakness: CWE-20, CWE-399
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.