{"id":"CVE-2016-8666","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-8666","generatedAt":"2026-10-29T00:46:47.404Z","title":"The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated…","description":"The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.","published":"2016-10-16T21:59:16.000Z","lastModified":"2026-06-17T00:54:46.000Z","status":"Modified","sourceIdentifier":"security@opentext.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-400"],"affected":["linux/linux kernel"],"epss":{"score":0.047,"percentile":0.91756,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (4.70%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fac8e0f579695a3ecbc4d3cac369139d7f819971","source":"security@opentext.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2047.html","source":"security@opentext.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2107.html","source":"security@opentext.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2110.html","source":"security@opentext.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0004.html","source":"security@opentext.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/10/13/11","source":"security@opentext.com"},{"url":"http://www.securityfocus.com/bid/93562","source":"security@opentext.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:0372","source":"security@opentext.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa134","source":"security@opentext.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384991","source":"security@opentext.com"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1001486","source":"security@opentext.com"},{"url":"https://github.com/torvalds/linux/commit/fac8e0f579695a3ecbc4d3cac369139d7f819971","source":"security@opentext.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fac8e0f579695a3ecbc4d3cac369139d7f819971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/10/13/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:0372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1001486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/fac8e0f579695a3ecbc4d3cac369139d7f819971","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-8666","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}