Every CVE Search/ Get API key

CVE-2016-10147

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of...

5.5 MediumFix available

CVE-2016-10147 is a medium vulnerability (CVSS 5.5) in Linux Kernel, published January 18, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in linux 4.8.15-1.

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.43%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Record
CVE-2016-10147
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Record
CVE-2016-10147
Updated
2026-11-02
EUVDEUVD-2016-1336 No score

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Record
EUVD-2016-1336
Updated
2026-11-03
GitHub AdvisoriesGHSA-7g63-chrj-5rq3 5.5

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of...

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Record
GHSA-7g63-chrj-5rq3
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 5.5

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Record
CVE-2016-10147
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-10147 5.5

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Record
DEBIAN-CVE-2016-10147
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2017:1842 8.6

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2017:1842
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:2077 8.6

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2017:2077
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-10147 5.5

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).

Record
UBUNTU-CVE-2016-10147
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUSN-3189-1 No score

linux, linux-raspi2, linux-snapdragon vulnerabilities

Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-10147)

Qidan He discovered that the ICMP implementation in the Linux kernel did not properly check the size of an ICMP header. A local attacker with CAP_NET_ADMIN could use this to expose sensitive information. (CVE-2016-8399)

Record
USN-3189-1
Updated
2026-11-02
OSVUSN-3189-2 No score

linux-lts-xenial vulnerabilities

USN-3189-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS.

Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-10147)

Qidan He discovered that the ICMP implementation in the Linux kernel did not properly check the size of an ICMP header. A local attacker with CAP_NET_ADMIN could use this to expose sensitive information. (CVE-2016-8399)

Record
USN-3189-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
before 4.8.15-1
4.8.15-1
linux
Debian:13
before 4.8.15-1
4.8.15-1
linux
Debian:14
before 4.8.15-1
4.8.15-1
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
Show 91 moreShow less
Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::client
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::computenode
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-kdump
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-kdump-debuginfo
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-kdump-devel
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::server
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::workstation
before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-rt
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-debuginfo
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-devel
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-kvm
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-kvm-debuginfo
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debuginfo
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-devel
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-doc
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-kvm
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-kvm-debuginfo
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-debuginfo
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-devel
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-kvm
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-kvm-debuginfo
Red Hat:rhel_extras_rt:7
before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
linux-lts-xenial
Ubuntu:14.04:LTS
before 4.4.0-62.83~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 15 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.1
4.4.0-62.83~14.04.1
linux
Ubuntu:16.04:LTS
before 4.4.0-62.83, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 35 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.80
4.4.0-62.83
linux-aws
Ubuntu:16.04:LTS
before 4.4.0-1003.12, plus listed versions
4.4.0-1001.10
4.4.0-1003.12
linux-hwe
Ubuntu:16.04:LTS
before 4.8.0-39.42~16.04.1, plus listed versions
4.8.0-36.36~16.04.1
4.8.0-39.42~16.04.1
linux-raspi2
Ubuntu:16.04:LTS
before 4.4.0-1042.49, plus listed versions
4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5
Show 14 moreShow less
4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.47
4.4.0-1042.49
linux-snapdragon
Ubuntu:16.04:LTS
before 4.4.0-1046.50, plus listed versions
4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22
Show 10 moreShow less
4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.48
4.4.0-1046.50

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 43 references. The JSON record has them.

MoveEnter Open