CVE-2016-9755

The netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows local users to cause a denial of service (integer overflow, out-of-bounds write, and GPF) or possibly have unspecified other impact via a crafted application that makes socket, connect, and writev system calls, related to net/ipv6/netfilter/nf_conntrack_reasm.c and net/ipv6/netfilter/nf_defrag_ipv6_hooks.c.

• CWE-787

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b57da0630c9fd36ed7a20fc0f98dc82cc0777faPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/12/01/10Mailing List
• http://www.securityfocus.com/bid/94626
• https://bugzilla.redhat.com/show_bug.cgi?id=1400904Issue Tracking
• https://github.com/torvalds/linux/commit/9b57da0630c9fd36ed7a20fc0f98dc82cc0777fa
• https://groups.google.com/forum/#%21topic/syzkaller/GFbGpX7nTEo
• https://www.spinics.net/lists/netdev/msg407525.htmlMailing List, Patch
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b57da0630c9fd36ed7a20fc0f98dc82cc0777faPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/12/01/10Mailing List
• http://www.securityfocus.com/bid/94626
• https://bugzilla.redhat.com/show_bug.cgi?id=1400904Issue Tracking
• https://github.com/torvalds/linux/commit/9b57da0630c9fd36ed7a20fc0f98dc82cc0777fa
• https://groups.google.com/forum/#%21topic/syzkaller/GFbGpX7nTEo
• https://www.spinics.net/lists/netdev/msg407525.htmlMailing List, Patch

Published

Dec 28, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9748IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sen…
• CVE-2016-9749IBM Campaign 9.1.0, 9.1.2, 10.0, and 10.1 could allow an aut…4
• CVE-2016-9750IBM QRadar 7.2 and 7.3 stores user credentials in plain in c…
• CVE-2016-9751Cross-site scripting (XSS) vulnerability in the search resul…
• CVE-2016-9752In Serendipity before 2.0.5, an attacker can bypass SSRF pro…
• CVE-2016-9754The ring_buffer_resize function in kernel/trace/ring_buffer.…7.8
• CVE-2016-9756arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 doe…
• CVE-2016-9757In the Create Tags page of the Rapid7 Nexpose version 6.4.12…
• CVE-2016-9758Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9759Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9760Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9761Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…