CVE-2016-10150

🗓️ 06 Feb 2017 06:04:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 96 Views🌐 WEB

Use-after-free vulnerability in Linux kernel before 4.8.1

Reporter	Title	Published	Views	Family All 33
BDU FSTEC	The vulnerability of the kvm_ioctl_create_device function in the Linux operating system allows a hacker to trigger a service failure or increase their privileges.	2 Jun 201700:00	–	bdu_fstec
CNVD	Linux Kernel Denial of Service Vulnerability (CNVD-2017-01068)	25 Jan 201700:00	–	cnvd
Cvelist	CVE-2016-10150	6 Feb 201706:04	–	cvelist
Debian CVE	CVE-2016-10150	6 Feb 201706:04	–	debiancve
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1523)	14 May 201900:00	–	nessus
Tenable Nessus	Ubuntu 16.10 : linux vulnerabilities (USN-3190-1)	6 Feb 201700:00	–	nessus
Tenable Nessus	Ubuntu 16.10 : linux-raspi2 vulnerabilities (USN-3190-2)	10 Feb 201700:00	–	nessus
Tenable Nessus	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001084)	14 Jan 202600:00	–	nessus
Tenable Nessus	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001981)	15 Jan 202600:00	–	nessus
Tenable Nessus	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002086)	15 Jan 202600:00	–	nessus

NVD

Node

linux linux_kernelRange4.8.0–4.8.13

Source	Link
git	www.git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2017/01/18/10
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.13
github	www.github.com/torvalds/linux/commit/a0f1d21c1ccb1da66629627a74059dd7f5ac9c61
securityfocus	www.securityfocus.com/bid/95672

Parameter	Position	Path	Description	CWE
ioctl arguments	path	/dev/kvm	Use-after-free in kvm_ioctl_create_device in Linux kernel prior to 4.8.13 allowing crafted ioctl calls on /dev/kvm to cause DoS or privilege escalation.	CWE-416, CWE-264

17 Jun 2026 00:39Current

9High risk

Vulners AI Score9

CVSS 3.19.8

CVSS 210

EPSS0.10177