CVE-2016-10147
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of...
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
- Record
CVE-2016-10147- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
- Record
CVE-2016-10147- Updated
- 2026-11-02
EUVDEUVD-2016-1336 No score
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
- Record
EUVD-2016-1336- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7g63-chrj-5rq3
5.5
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of...
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
- Record
GHSA-7g63-chrj-5rq3- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSV
5.5
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
- Record
CVE-2016-10147- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-10147
5.5
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
- Record
DEBIAN-CVE-2016-10147- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2017:1842
8.6
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2017:1842- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2077
8.6
Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
- Record
RHSA-2017:2077- CVSS 3.0
- 8.6 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10147
5.5
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
- Record
UBUNTU-CVE-2016-10147- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUSN-3189-1 No score
linux, linux-raspi2, linux-snapdragon vulnerabilities
Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-10147)
Qidan He discovered that the ICMP implementation in the Linux kernel did not properly check the size of an ICMP header. A local attacker with CAP_NET_ADMIN could use this to expose sensitive information. (CVE-2016-8399)
- Record
USN-3189-1- Updated
- 2026-11-02
OSVUSN-3189-2 No score
linux-lts-xenial vulnerabilities
USN-3189-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS.
Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-10147)
Qidan He discovered that the ICMP implementation in the Linux kernel did not properly check the size of an ICMP header. A local attacker with CAP_NET_ADMIN could use this to expose sensitive information. (CVE-2016-8399)
- Record
USN-3189-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 4.8.15-1 | 4.8.15-1 |
linuxDebian:13 |
before 4.8.15-1 | 4.8.15-1 |
linuxDebian:14 |
before 4.8.15-1 | 4.8.15-1 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
Show 91 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debugRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-develRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-docRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perfRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perfRed Hat:enterprise_linux:7::client |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernelRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perfRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perfRed Hat:enterprise_linux:7::computenode |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-docRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernelRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debugRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perfRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perfRed Hat:enterprise_linux:7::server |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernelRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
perfRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
python-perfRed Hat:enterprise_linux:7::workstation |
before 0:3.10.0-693.el7 | 0:3.10.0-693.el7 |
kernel-rtRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-debugRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-debug-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-debug-develRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-debug-kvmRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-debug-kvm-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-debuginfo-common-x86_64Red Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-develRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-docRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-kvmRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-kvm-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-traceRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-trace-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-trace-develRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-trace-kvmRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
kernel-rt-trace-kvm-debuginfoRed Hat:rhel_extras_rt:7 |
before 0:3.10.0-693.rt56.617.el7 | 0:3.10.0-693.rt56.617.el7 |
linux-lts-xenialUbuntu:14.04:LTS |
before 4.4.0-62.83~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 15 moreShow less4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.1 |
4.4.0-62.83~14.04.1 |
linuxUbuntu:16.04:LTS |
before 4.4.0-62.83, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 35 moreShow less4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.80 |
4.4.0-62.83 |
linux-awsUbuntu:16.04:LTS |
before 4.4.0-1003.12, plus listed versions 4.4.0-1001.10 |
4.4.0-1003.12 |
linux-hweUbuntu:16.04:LTS |
before 4.8.0-39.42~16.04.1, plus listed versions 4.8.0-36.36~16.04.1 |
4.8.0-39.42~16.04.1 |
linux-raspi2Ubuntu:16.04:LTS |
before 4.4.0-1042.49, plus listed versions 4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5 Show 14 moreShow less4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.47 |
4.4.0-1042.49 |
linux-snapdragonUbuntu:16.04:LTS |
before 4.4.0-1046.50, plus listed versions 4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22 Show 10 moreShow less4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.48 |
4.4.0-1046.50 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-10147 is a medium vulnerability (CVSS 5.5) in Linux Kernel, published January 18, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in linux 4.8.15-1.
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit?id=48a992727d82cb7db076fa15d372178743b1f4cd
github.com/torvalds/linux/commit/48a992727d82cb7db076fa15d372178743b1f4cd
marc.info?l=linux-crypto-vger&m=148063683310477&w=2
openwall.com/lists/oss-security/2017/01/17/13
securityfocus.com/bid/95677
bugzilla.redhat.com/show_bug.cgi?id=1404200
Show 194 moreShow less
kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15
access.redhat.com/errata/RHSA-2017:2077
access.redhat.com/errata/RHSA-2017:1842
nvd.nist.gov/vuln/detail/CVE-2016-10147
access.redhat.com/security/cve/CVE-2016-10147
github.com/advisories/GHSA-7g63-chrj-5rq3
security-tracker.debian.org/tracker/CVE-2016-10147
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=1151095
bugzilla.redhat.com/show_bug.cgi?id=1151108
bugzilla.redhat.com/show_bug.cgi?id=1178491
bugzilla.redhat.com/show_bug.cgi?id=1283257
bugzilla.redhat.com/show_bug.cgi?id=1297929
bugzilla.redhat.com/show_bug.cgi?id=1322495
bugzilla.redhat.com/show_bug.cgi?id=1323577
bugzilla.redhat.com/show_bug.cgi?id=1330000
bugzilla.redhat.com/show_bug.cgi?id=1349647
bugzilla.redhat.com/show_bug.cgi?id=1352741
bugzilla.redhat.com/show_bug.cgi?id=1356471
bugzilla.redhat.com/show_bug.cgi?id=1368577
bugzilla.redhat.com/show_bug.cgi?id=1368938
bugzilla.redhat.com/show_bug.cgi?id=1371693
bugzilla.redhat.com/show_bug.cgi?id=1371714
bugzilla.redhat.com/show_bug.cgi?id=1373966
bugzilla.redhat.com/show_bug.cgi?id=1378320
bugzilla.redhat.com/show_bug.cgi?id=1378656
bugzilla.redhat.com/show_bug.cgi?id=1383739
bugzilla.redhat.com/show_bug.cgi?id=1386286
bugzilla.redhat.com/show_bug.cgi?id=1389433
bugzilla.redhat.com/show_bug.cgi?id=1391299
bugzilla.redhat.com/show_bug.cgi?id=1393904
bugzilla.redhat.com/show_bug.cgi?id=1394089
bugzilla.redhat.com/show_bug.cgi?id=1395104
bugzilla.redhat.com/show_bug.cgi?id=1396578
bugzilla.redhat.com/show_bug.cgi?id=1396941
bugzilla.redhat.com/show_bug.cgi?id=1399830
bugzilla.redhat.com/show_bug.cgi?id=1401433
bugzilla.redhat.com/show_bug.cgi?id=1401436
bugzilla.redhat.com/show_bug.cgi?id=1401502
bugzilla.redhat.com/show_bug.cgi?id=1403145
bugzilla.redhat.com/show_bug.cgi?id=1404924
bugzilla.redhat.com/show_bug.cgi?id=1406885
bugzilla.redhat.com/show_bug.cgi?id=1412210
bugzilla.redhat.com/show_bug.cgi?id=1412234
bugzilla.redhat.com/show_bug.cgi?id=1415780
bugzilla.redhat.com/show_bug.cgi?id=1416532
bugzilla.redhat.com/show_bug.cgi?id=1417812
bugzilla.redhat.com/show_bug.cgi?id=1418962
bugzilla.redhat.com/show_bug.cgi?id=1421638
bugzilla.redhat.com/show_bug.cgi?id=1422825
bugzilla.redhat.com/show_bug.cgi?id=1424076
bugzilla.redhat.com/show_bug.cgi?id=1428353
bugzilla.redhat.com/show_bug.cgi?id=1428684
bugzilla.redhat.com/show_bug.cgi?id=1428973
bugzilla.redhat.com/show_bug.cgi?id=1430225
bugzilla.redhat.com/show_bug.cgi?id=1430347
bugzilla.redhat.com/show_bug.cgi?id=1433252
bugzilla.redhat.com/show_bug.cgi?id=1433831
bugzilla.redhat.com/show_bug.cgi?id=1434327
bugzilla.redhat.com/show_bug.cgi?id=1436649
bugzilla.redhat.com/show_bug.cgi?id=1441088
bugzilla.redhat.com/show_bug.cgi?id=1443999
bugzilla.redhat.com/show_bug.cgi?id=1444493
bugzilla.redhat.com/show_bug.cgi?id=1445054
bugzilla.redhat.com/show_bug.cgi?id=1448312
bugzilla.redhat.com/show_bug.cgi?id=1450203
bugzilla.redhat.com/show_bug.cgi?id=1450972
bugzilla.redhat.com/show_bug.cgi?id=1452679
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1842.json
access.redhat.com/security/cve/CVE-2014-7970
cve.org/CVERecord?id=CVE-2014-7970
nvd.nist.gov/vuln/detail/CVE-2014-7970
access.redhat.com/security/cve/CVE-2014-7975
cve.org/CVERecord?id=CVE-2014-7975
nvd.nist.gov/vuln/detail/CVE-2014-7975
access.redhat.com/security/cve/CVE-2015-8839
cve.org/CVERecord?id=CVE-2015-8839
nvd.nist.gov/vuln/detail/CVE-2015-8839
access.redhat.com/security/cve/CVE-2015-8970
cve.org/CVERecord?id=CVE-2015-8970
nvd.nist.gov/vuln/detail/CVE-2015-8970
access.redhat.com/security/cve/CVE-2016-6213
cve.org/CVERecord?id=CVE-2016-6213
nvd.nist.gov/vuln/detail/CVE-2016-6213
access.redhat.com/security/cve/CVE-2016-7042
cve.org/CVERecord?id=CVE-2016-7042
nvd.nist.gov/vuln/detail/CVE-2016-7042
access.redhat.com/security/cve/CVE-2016-7097
cve.org/CVERecord?id=CVE-2016-7097
nvd.nist.gov/vuln/detail/CVE-2016-7097
access.redhat.com/security/cve/CVE-2016-8645
cve.org/CVERecord?id=CVE-2016-8645
nvd.nist.gov/vuln/detail/CVE-2016-8645
access.redhat.com/security/cve/CVE-2016-9576
cve.org/CVERecord?id=CVE-2016-9576
nvd.nist.gov/vuln/detail/CVE-2016-9576
access.redhat.com/security/cve/CVE-2016-9588
cve.org/CVERecord?id=CVE-2016-9588
nvd.nist.gov/vuln/detail/CVE-2016-9588
access.redhat.com/security/cve/CVE-2016-9604
cve.org/CVERecord?id=CVE-2016-9604
nvd.nist.gov/vuln/detail/CVE-2016-9604
access.redhat.com/security/cve/CVE-2016-9685
cve.org/CVERecord?id=CVE-2016-9685
nvd.nist.gov/vuln/detail/CVE-2016-9685
access.redhat.com/security/cve/CVE-2016-9806
cve.org/CVERecord?id=CVE-2016-9806
nvd.nist.gov/vuln/detail/CVE-2016-9806
access.redhat.com/security/cve/CVE-2016-10088
cve.org/CVERecord?id=CVE-2016-10088
nvd.nist.gov/vuln/detail/CVE-2016-10088
cve.org/CVERecord?id=CVE-2016-10147
access.redhat.com/security/cve/CVE-2016-10200
cve.org/CVERecord?id=CVE-2016-10200
nvd.nist.gov/vuln/detail/CVE-2016-10200
access.redhat.com/security/cve/CVE-2016-10741
cve.org/CVERecord?id=CVE-2016-10741
nvd.nist.gov/vuln/detail/CVE-2016-10741
access.redhat.com/security/cve/CVE-2017-2584
cve.org/CVERecord?id=CVE-2017-2584
nvd.nist.gov/vuln/detail/CVE-2017-2584
access.redhat.com/security/cve/CVE-2017-2596
cve.org/CVERecord?id=CVE-2017-2596
nvd.nist.gov/vuln/detail/CVE-2017-2596
access.redhat.com/security/cve/CVE-2017-2647
cve.org/CVERecord?id=CVE-2017-2647
nvd.nist.gov/vuln/detail/CVE-2017-2647
access.redhat.com/security/cve/CVE-2017-2671
cve.org/CVERecord?id=CVE-2017-2671
nvd.nist.gov/vuln/detail/CVE-2017-2671
access.redhat.com/security/cve/CVE-2017-5551
cve.org/CVERecord?id=CVE-2017-5551
nvd.nist.gov/vuln/detail/CVE-2017-5551
access.redhat.com/security/cve/CVE-2017-5970
cve.org/CVERecord?id=CVE-2017-5970
nvd.nist.gov/vuln/detail/CVE-2017-5970
access.redhat.com/security/cve/CVE-2017-6001
cve.org/CVERecord?id=CVE-2017-6001
nvd.nist.gov/vuln/detail/CVE-2017-6001
access.redhat.com/security/cve/CVE-2017-6951
cve.org/CVERecord?id=CVE-2017-6951
nvd.nist.gov/vuln/detail/CVE-2017-6951
access.redhat.com/security/cve/CVE-2017-7187
cve.org/CVERecord?id=CVE-2017-7187
nvd.nist.gov/vuln/detail/CVE-2017-7187
access.redhat.com/security/cve/CVE-2017-7495
cve.org/CVERecord?id=CVE-2017-7495
nvd.nist.gov/vuln/detail/CVE-2017-7495
seclists.org/oss-sec/2017/q2/259
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=06bd3c36a733ac27962fea7d6f47168841376824
access.redhat.com/security/cve/CVE-2017-7616
cve.org/CVERecord?id=CVE-2017-7616
nvd.nist.gov/vuln/detail/CVE-2017-7616
access.redhat.com/security/cve/CVE-2017-7889
cve.org/CVERecord?id=CVE-2017-7889
nvd.nist.gov/vuln/detail/CVE-2017-7889
access.redhat.com/security/cve/CVE-2017-8797
cve.org/CVERecord?id=CVE-2017-8797
nvd.nist.gov/vuln/detail/CVE-2017-8797
access.redhat.com/security/cve/CVE-2017-8890
cve.org/CVERecord?id=CVE-2017-8890
nvd.nist.gov/vuln/detail/CVE-2017-8890
access.redhat.com/security/cve/CVE-2017-9074
cve.org/CVERecord?id=CVE-2017-9074
nvd.nist.gov/vuln/detail/CVE-2017-9074
access.redhat.com/security/cve/CVE-2017-9075
cve.org/CVERecord?id=CVE-2017-9075
nvd.nist.gov/vuln/detail/CVE-2017-9075
access.redhat.com/security/cve/CVE-2017-9076
cve.org/CVERecord?id=CVE-2017-9076
nvd.nist.gov/vuln/detail/CVE-2017-9076
access.redhat.com/security/cve/CVE-2017-9077
cve.org/CVERecord?id=CVE-2017-9077
nvd.nist.gov/vuln/detail/CVE-2017-9077
access.redhat.com/security/cve/CVE-2017-9242
cve.org/CVERecord?id=CVE-2017-9242
nvd.nist.gov/vuln/detail/CVE-2017-9242
access.redhat.com/security/cve/CVE-2017-1000253
cve.org/CVERecord?id=CVE-2017-1000253
nvd.nist.gov/vuln/detail/CVE-2017-1000253
qualys.com/2017/09/26/cve-2017-1000253/cve-2017-1000253.txt
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2017-1000379
cve.org/CVERecord?id=CVE-2017-1000379
nvd.nist.gov/vuln/detail/CVE-2017-1000379
qualys.com/2017/06/19/stack-clash/stack-clash.txt
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2077.json
ubuntu.com/security/CVE-2016-10147
ubuntu.com/security/notices/USN-3189-1
ubuntu.com/security/notices/USN-3189-2
ubuntu.com/security/notices/USN-3190-1
ubuntu.com/security/notices/USN-3190-2
ubuntu.com/security/CVE-2016-8399
Left out here: 43 references. The JSON record has them.