CVE-2016-8645: Medium severity linux kernel vulnerability
It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG() statement in tcpcollapse() function after making a number of certain syscalls leading to a possible system crash.
Other sources
It was discovered that the Linux kernel since, at least, v4.0 till v4.9-rc1 can hit BUG() statement in tcpcollapse() function after making a number of certain syscalls leading to a possible system crash.
Discussion at stable@:
http://www.spinics.net/lists/stable/msg150470.html
Discussion at netdev@:
http://www.spinics.net/lists/netdev/msg403701.html
http://marc.info/?l=linux-netdev&m=147878925724283&w=2
http://marc.info/?t=147878927800005&r=1&w=2 # the whole thread
A proposed patch:
http://marc.info/?l=linux-netdev&m=147881188232264&w=2 # patch v1
http://marc.info/?t=147881111500001&r=1&w=2&n=2 # the whole thread
http://marc.info/?l=linux-netdev&m=147881236332369&w=2 # patch v2
http://marc.info/?t=147881240700003&r=1&w=2 # the whole thread
http://www.spinics.net/lists/netdev/msg403787.html
http://www.spinics.net/lists/netdev/msg403789.html # patch v2
An upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac6e780070e30e4c35bd395acfe9191e6268bdd3
CVE-ID assignment:
http://seclists.org/oss-sec/2016/q4/397
— Red Hat
The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcpipv4.c and net/ipv6/tcpipv6.c.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2016-8645.
What software is affected by this vulnerability?
The Linux kernel versions before 4.8.10 are affected by this vulnerability.
What is the severity rating of CVE-2016-8645?
The severity rating of CVE-2016-8645 is medium with a CVSS score of 6.2.
How does this vulnerability impact the system?
This vulnerability allows local users to cause a denial of service (system crash) via a crafted application.
Are there any references for this vulnerability?
Yes, you can find more information about CVE-2016-8645 at the following references: [1](http://www.spinics.net/lists/stable/msg150470.html), [2](http://www.spinics.net/lists/netdev/msg403701.html), and [3](http://marc.info/?l=linux-netdev&m=147878925724283&w=2).