High severity7.8NVD Advisory· Published Dec 28, 2016· Updated Jun 17, 2026
CVE-2016-9755
CVE-2016-9755
Description
The netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows local users to cause a denial of service (integer overflow, out-of-bounds write, and GPF) or possibly have unspecified other impact via a crafted application that makes socket, connect, and writev system calls, related to net/ipv6/netfilter/nf_conntrack_reasm.c and net/ipv6/netfilter/nf_defrag_ipv6_hooks.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
7- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdPatchVendor Advisory
- www.spinics.net/lists/netdev/msg407525.htmlnvdMailing ListPatch
- www.openwall.com/lists/oss-security/2016/12/01/10nvdMailing List
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- www.securityfocus.com/bid/94626nvd
- github.com/torvalds/linux/commit/9b57da0630c9fd36ed7a20fc0f98dc82cc0777fanvd
- groups.google.com/forum/nvd
News mentions
0No linked articles in our index yet.