CVE-2016-8660

MEDIUM

Linux Kernel < 4.8.2 - Denial of Service in XFS Seek Hole/Data Implementation

Title source: llm

Description

The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/93558

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2016/10/13/8

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1384851

Scores

CVSS v3 5.5

EPSS 0.0034

EPSS Percentile 26.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-19

Status published

Products (1)

linux/linux_kernel < 4.8.2

Published Oct 16, 2016

Tracked Since Feb 18, 2026