CVE-2016-8655: Race Condition

Published Nov 30, 2016
·
Updated

A race condition vulnerability was found in packetsetring that can lead to use after free on a function pointer. This vulnerability can be used to gain kernel code execution for the local attacker capable of creating AFPACKET sockets. This issue was introduced with following commit:

https://github.com/torvalds/linux/commit/f6fb8f100b807378fda19e83e5ac6828b638603a

Other sources

Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAPNETRAW capability to change a socket version, related to the packetsetring and packetsetsockopt functions.

MITRE

Affected Software

14 affected componentsFixes available
Linux Linux Kernel>=3.2<3.2.85
Linux Linux Kernel>=3.3<3.10.106
Linux Linux Kernel>=3.11<3.12.69
Linux Linux Kernel>=3.13<3.16.40
Linux Linux Kernel>=3.17<3.18.46
Linux Linux Kernel>=3.19<4.1.37
Linux Linux Kernel>=4.2<4.4.38
Linux Linux Kernel>=4.5<4.8.14
Ubuntu Linux=12.04
Ubuntu Linux=14.04
Ubuntu Linux=16.04
Ubuntu Linux=16.10
Google Android
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1

Event History

Nov 30, 2016
Data Sourced
via Red Hat·10:02 AM
DescriptionSeverityAffected Software
Dec 8, 2016
CVE Published
via MITRE·08:08 AM
Data Sourced
via MITRE·08:08 AM
Description
Apr 28, 2025
Data Sourced
via Debian·03:32 AM
DescriptionAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2016-8655?

CVE-2016-8655 has a high severity as it can lead to kernel code execution for local attackers.

2

How do I fix CVE-2016-8655?

To fix CVE-2016-8655, upgrade to a patched version of the Linux kernel or apply specific updates that address this vulnerability.

3

Which versions are affected by CVE-2016-8655?

CVE-2016-8655 affects several versions of the Linux kernel between 3.2 and 4.4 as well as specific versions of Ubuntu Linux.

4

Who is impacted by CVE-2016-8655?

Local attackers who can create AF_PACKET sockets are primarily impacted by CVE-2016-8655.

5

Can CVE-2016-8655 be exploited remotely?

CVE-2016-8655 cannot be exploited remotely; it requires local access to the system.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203