CVE-2016-7917: The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check...

Security readout for executives and security teams

CVE-2016-7917 is a Linux kernel flaw in netfilter batch message handling. A local user or process with CAP_NET_ADMIN could read sensitive kernel memory or crash/hang the system. The sources do not show remote exploitation or active exploitation. Exposure is most likely on Linux systems running kernels before 4.5, especially where untrusted users, services, or containers can obtain CAP_NET_ADMIN. Android is referenced through the November 2016 security bulletin, but the bundle does not define specific affected Android device models. Treat this as a targeted local-risk issue, not an internet-wide emergency. Prioritize systems with old kernels and shared, containerized, or multi-user workloads where CAP_NET_ADMIN may be exposed. Mitigation focus: Upgrade affected Linux kernels using vendor-supported security updates.; Verify whether the upstream fix commit c58d6c93680f is included.; Review Android November 2016 bulletin guidance for Android-derived systems..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.