CVE-2016-10229

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-358

Affected software

No affected versions have been published.

Timeline

Published
Apr 4, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-10238.8Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attCVE-2016-102309.8A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. RefCVE-2016-102317.8An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-339669CVE-2016-102327.8An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. ReCVE-2016-102339.8An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. ReCVE-2016-102345.5An information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions: Android kernel. Android ID: A-34390017. RefeCVE-2016-102357.5A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. ReferenceCVE-2016-102363.3An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android ID: A-33280689. RefeCVE-2016-102377.8If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android CVE-2016-102387.8In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.CVE-2016-102397.8In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper inputCVE-2016-10248.8Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows att
CVE-2016-10229: Critical severity, CVSS 9.8 | Vulnix