CVE-2016-10147: crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL po...

Security readout for executives and security teams

This is a local denial-of-service flaw in the Linux kernel crypto subsystem. A user or process already on the machine could trigger a kernel crash, causing service outage. The sources do not show remote code execution, privilege escalation, or active exploitation. Exposure is most likely on Linux systems running kernels before 4.8.15 or downstream vendor kernels lacking the backported fix. Practical risk requires local user or process access to the host, including potentially untrusted multi-user or workload environments. Treat as a stability risk for systems where untrusted users or workloads can run locally. It is not evidenced as internet-exploitable, but a crash on shared infrastructure can still cause operational disruption. Mitigation focus: Update to Linux kernel 4.8.15 or a vendor kernel containing the backported fix.; Apply relevant vendor advisories, including Red Hat RHSA-2017:1842 or RHSA-2017:2077 where applicable.; Prioritize shared hosts, build workers, and systems running untrusted local workloads..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.