CVE-2016-6156

5.1 mediumEPSS 0.3%

Medium (5.1) in linux linux kernel. EPSS 0.3% chance of exploitation in the next 30 days.

Race condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in the Linux kernel before 4.7 allows local users to cause a denial of service (out-of-bounds array access) by changing a certain size value, aka a "double fetch" vulnerability.

Severity

CVSS 3.0

5.1 medium

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2016-08-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096cdc6f52225835ff503f987a0d68ef770bb78e
http://seclists.org/bugtraq/2016/Jul/20
http://www.securityfocus.com/bid/91553
https://bugzilla.kernel.org/show_bug.cgi?id=120131
https://bugzilla.redhat.com/show_bug.cgi?id=1353490

Check your stack JSON