UBUNTU-CVE-2016-8658

Advisory lineage Upstream: 1 Downstream: 5
Upstream
CVE-2016-8658
Published: 16 Oct 2016, 00:00
Last modified:22 Apr 2026, 11:01

Vulnerability Summary

Overall Risk (default)
low
24/100
CVSS Score
6.1 MEDIUM
3.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Oct 2016, 00:00
Published
Vulnerability first disclosed
22 Apr 2026, 11:01
Last Modified
Vulnerability information updated

Description

Stack-based buffer overflow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a long SSID Information Element in a command to a Netlink socket.

CVSS Metrics

  • v3.0•MEDIUM•Score: 6.1CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected Systems

  • ubuntu•linux

    < 3.13.0-103.150 | < 4.4.0-51.72

  • ubuntu•linux-lts-vivid

    < 3.19.0-75.83~14.04.1

  • ubuntu•linux-lts-xenial

    < 4.4.0-51.72~14.04.1

  • ubuntu•linux-raspi2

    < 4.4.0-1038.45

  • ubuntu•linux-snapdragon

    < 4.4.0-1042.46

References (13)