← Back to CVEs

CVE-2016-9191

N/A

Description

The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity.

CVE Details

CVSS v3.1 ScoreN/A

Published11/28/2016

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

linux:linux_kernel

Weaknesses (CWE)

CWE-20CWE-399

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93362fa47fe98b62e4a34ab408c4a418432e7939(cve@mitre.org)

http://www.debian.org/security/2017/dsa-3791(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2016/11/05/4(cve@mitre.org)

http://www.securityfocus.com/bid/94129(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=1392439(cve@mitre.org)

https://github.com/torvalds/linux/commit/93362fa47fe98b62e4a34ab408c4a418432e7939(cve@mitre.org)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03802en_us(cve@mitre.org)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93362fa47fe98b62e4a34ab408c4a418432e7939(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2017/dsa-3791(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2016/11/05/4(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/94129(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=1392439(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/torvalds/linux/commit/93362fa47fe98b62e4a34ab408c4a418432e7939(af854a3a-2127-422b-91ae-364da2661108)

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03802en_us(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.