cve/cves/2016/CVE-2016-6828.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-23 16:35:19 +00:00

Files

T

0xMarcio dbe6530b3c Track PoC releases independently and expand verified sources

2026-10-07 01:24:44 +02:00

828 B

Raw Permalink Blame History

CVE-2016-6828

Description

The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option.

POC

Reference

http://www.openwall.com/lists/oss-security/2016/08/15/1

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/40731

828 B Raw Permalink Blame History