# CVEs published 2016-12-28

13 CVEs were published on December 28, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6704](https://cve.now/CVE-2012-6704.md): The sock\_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk\_sndbuf and sk\_rcvbuf, which (no CVSS)
- [CVE-2016-6213](https://cve.now/CVE-2016-6213.md): fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to (no CVSS)
- [CVE-2016-6786](https://cve.now/CVE-2016-6786.md): kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows lo (no CVSS)
- [CVE-2016-6787](https://cve.now/CVE-2016-6787.md): kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows lo (no CVSS)
- [CVE-2016-9576](https://cve.now/CVE-2016-9576.md): The blk\_rq\_map\_user\_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which (no CVSS)
- [CVE-2016-9588](https://cve.now/CVE-2016-9588.md): arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of s (no CVSS)
- [CVE-2016-9685](https://cve.now/CVE-2016-9685.md): Multiple memory leaks in error paths in fs/xfs/xfs\_attr\_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of servi (no CVSS)
- [CVE-2016-9755](https://cve.now/CVE-2016-9755.md): The netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows local users to cause a denial of service (in (no CVSS)
- [CVE-2016-9756](https://cve.now/CVE-2016-9756.md): arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows (no CVSS)
- [CVE-2016-9777](https://cve.now/CVE-2016-9777.md): KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to g (no CVSS)
- [CVE-2016-9793](https://cve.now/CVE-2016-9793.md): The sock\_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk\_sndbuf and sk\_rcvbuf, whi (no CVSS)
- [CVE-2016-9794](https://cve.now/CVE-2016-9794.md): Race condition in the snd\_pcm\_period\_elapsed function in sound/core/pcm\_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows lo (no CVSS)
- [CVE-2016-9806](https://cve.now/CVE-2016-9806.md): Race condition in the netlink\_dump function in net/netlink/af\_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a denia (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-12-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.