Vulnerability Database

299,759

Total vulnerabilities in the database

CVE-2016-9793

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option.

  • Published: Dec 28, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-9793
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
linux / linux_kernel 3.13 3.16.40
linux / linux_kernel 3.17 3.18.52
linux / linux_kernel 4.5 4.8.14
linux / linux_kernel 4.2 4.4.38
linux / linux_kernel 3.5 3.12.69
linux / linux_kernel 3.19 4.1.50