CVE-2016-7917

The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (infinite loop or out-of-bounds read) by leveraging the CAP_NET_ADMIN capability.

• CWE-125
• CWE-200

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c58d6c93680f28ac58984af61d0a7ebf4319c241Issue Tracking, Patch, Third Party Advisory
• http://source.android.com/security/bulletin/2016-11-01.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94147Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/c58d6c93680f28ac58984af61d0a7ebf4319c241Issue Tracking, Patch
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c58d6c93680f28ac58984af61d0a7ebf4319c241Issue Tracking, Patch, Third Party Advisory
• http://source.android.com/security/bulletin/2016-11-01.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94147Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/c58d6c93680f28ac58984af61d0a7ebf4319c241Issue Tracking, Patch

Published

Nov 16, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7911Race condition in the get_task_ioprio function in block/iopr…7.8
• CVE-2016-7912Use-after-free vulnerability in the ffs_user_copy_worker fun…7.8
• CVE-2016-7913The xc2028_set_config function in drivers/media/tuners/tuner…7.8
• CVE-2016-7914The assoc_array_insert_into_terminal_node function in lib/as…
• CVE-2016-7915The hid_input_field function in drivers/hid/hid-core.c in th…
• CVE-2016-7916Race condition in the environ_read function in fs/proc/base.…
• CVE-2016-7919Moodle 3.1.2 allows remote attackers to obtain sensitive inf…7.5
• CVE-2016-7921Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-7922The AH parser in tcpdump before 4.9.0 has a buffer overflow …
• CVE-2016-7923The ARP parser in tcpdump before 4.9.0 has a buffer overflow…
• CVE-2016-7924The ATM parser in tcpdump before 4.9.0 has a buffer overflow…
• CVE-2016-7925The compressed SLIP parser in tcpdump before 4.9.0 has a buf…