CVE-2016-8650

The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.

• CWE-20
• CWE-399

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5527fffff3f002b0a6b376163613b82f69de073Issue Tracking, Patch, Vendor Advisory
• http://seclists.org/fulldisclosure/2016/Nov/76Mailing List
• http://www.openwall.com/lists/oss-security/2016/11/24/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94532
• http://www.securitytracker.com/id/1037968
• https://access.redhat.com/errata/RHSA-2017:0931
• https://access.redhat.com/errata/RHSA-2017:0932
• https://access.redhat.com/errata/RHSA-2017:0933
• https://access.redhat.com/errata/RHSA-2018:1854
• https://bugzilla.redhat.com/show_bug.cgi?id=1395187Issue Tracking
• https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-03-01.html
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5527fffff3f002b0a6b376163613b82f69de073Issue Tracking, Patch, Vendor Advisory
• http://seclists.org/fulldisclosure/2016/Nov/76Mailing List
• http://www.openwall.com/lists/oss-security/2016/11/24/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94532
• http://www.securitytracker.com/id/1037968
• https://access.redhat.com/errata/RHSA-2017:0931
• https://access.redhat.com/errata/RHSA-2017:0932
• https://access.redhat.com/errata/RHSA-2017:0933
• https://access.redhat.com/errata/RHSA-2018:1854
• https://bugzilla.redhat.com/show_bug.cgi?id=1395187Issue Tracking
• https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-03-01.html

Published

Nov 28, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8644In Moodle 2.x and 3.x, the capability to view course notes i…
• CVE-2016-8645The TCP stack in the Linux kernel before 4.8.10 mishandles s…
• CVE-2016-8646The hash_accept function in crypto/algif_hash.c in the Linux…
• CVE-2016-8647An input validation vulnerability was found in Ansible's mys…4.9
• CVE-2016-8648It was found that the Karaf container used by Red Hat JBoss …7.2
• CVE-2016-8649lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows a…
• CVE-2016-8651An input validation flaw was found in the way OpenShift 3 ha…3.1
• CVE-2016-8652The auth component in Dovecot before 2.2.27, when auth-polic…
• CVE-2016-8653It was found that the JMX endpoint of Red Hat JBoss Fuse 6, …5.3
• CVE-2016-8654A heap-buffer overflow vulnerability was found in QMFB code …7.8
• CVE-2016-8655Race condition in net/packet/af_packet.c in the Linux kernel…7.8
• CVE-2016-8656Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vul…7