$ cve CVE-2016-9793 JSON

CVE-2016-9793 EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 1.6% (pctl 75)

Patch early

A public exploit exists.

Description

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	1.57% — more likely to be exploited than 75% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2016-12-28
Last modified	2026-06-17

Affected (1)

Vendor	Product
linux	linux kernel

Public exploits

Source	Title	Date
exploit-db	Linux Kernel 3.11 < 4.8 0 - 'SO_SNDBUFFORCE' / 'SO_RCVBUFFORCE' Local Privilege Escalation	2017-03-22

References

→ the Explorer · watch your stack · NVD