# CVEs published 2016-12-28

13 CVEs were published on December 28, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6704](https://cve.now/CVE-2012-6704.md): The sock\_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk\_sndbuf and sk\_rcvbuf… (no CVSS)
- [CVE-2016-6213](https://cve.now/CVE-2016-6213.md): fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users… (no CVSS)
- [CVE-2016-6786](https://cve.now/CVE-2016-6786.md): kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows… (no CVSS)
- [CVE-2016-6787](https://cve.now/CVE-2016-6787.md): kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows… (no CVSS)
- [CVE-2016-9576](https://cve.now/CVE-2016-9576.md): The blk\_rq\_map\_user\_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator… (no CVSS)
- [CVE-2016-9588](https://cve.now/CVE-2016-9588.md): arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of… (no CVSS)
- [CVE-2016-9685](https://cve.now/CVE-2016-9685.md): Multiple memory leaks in error paths in fs/xfs/xfs\_attr\_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of… (no CVSS)
- [CVE-2016-9755](https://cve.now/CVE-2016-9755.md): The netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows local users to cause a denial of service… (no CVSS)
- [CVE-2016-9756](https://cve.now/CVE-2016-9756.md): arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which… (no CVSS)
- [CVE-2016-9777](https://cve.now/CVE-2016-9777.md): KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to… (no CVSS)
- [CVE-2016-9793](https://cve.now/CVE-2016-9793.md): The sock\_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk\_sndbuf and sk\_rcvbuf… (no CVSS)
- [CVE-2016-9794](https://cve.now/CVE-2016-9794.md): Race condition in the snd\_pcm\_period\_elapsed function in sound/core/pcm\_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows… (no CVSS)
- [CVE-2016-9806](https://cve.now/CVE-2016-9806.md): Race condition in the netlink\_dump function in net/netlink/af\_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-12-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.