{"id":"CVE-2015-1350","aliases":["DEBIAN-CVE-2015-1350","DLA-772-1","EUVD-2015-1489","GHSA-m2mx-4jc6-3wh7","SUSE-SU-2017:0181-1","SUSE-SU-2017:0333-1","SUSE-SU-2017:0437-1","SUSE-SU-2017:0494-1","SUSE-SU-2017:1102-1","SUSE-SU-2017:1247-1","SUSE-SU-2017:1360-1","UBUNTU-CVE-2015-1350","USN-3361-1","USN-4904-1"],"status":"published","title":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr...","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00489,"percentile":0.42357,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-552"],"published":"2016-05-02T00:00:00Z","modified":"2026-11-06T13:48:38Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.8.11-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.8.11-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.8.11-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1090.94"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-208.240~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-208.240"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1126.140"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","fixed_in":["4.10.0-32.36~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","fixed_in":["4.4.0-1091.100"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1150.161"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1154.164"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"linux-fips","fixed_in":["4.4.0-1060.66"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-snapdragon","fixed_in":["4.15.0-1053.57"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.11-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.11-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.11-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.84-1"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1","3.2.68-1+deb7u1~bpo60+1","3.2.68-1+deb7u2","3.2.68-1+deb7u2~bpo60+1","3.2.68-1+deb7u3","3.2.68-1+deb7u3~bpo60+1","3.2.68-1+deb7u4","3.2.68-1+deb7u4~bpo60+1","3.2.68-1+deb7u5","3.2.68-1+deb7u6","3.2.68-1+deb7u6~bpo60+1","3.2.71-1","3.2.71-2","3.2.73-1","3.2.73-2","3.2.73-2+deb7u1","3.2.73-2+deb7u2","3.2.73-2+deb7u2~bpo60+1","3.2.73-2+deb7u3","3.2.78-1","3.2.81-1","3.2.81-2","3.2.82-1"],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP2_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.3"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.38-93.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.53.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.53.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.53.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.53.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.53.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.53.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.53.1"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.2"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-bigmem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-94.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.96.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-68.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-68.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-68.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-68.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kgraft-patch-SLE12_Update_21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.61-52.72.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"kgraft-patch-SLE12_Update_21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP1_Update_15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-4.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.4"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.74-60.64.40.1"}]}],"bundled":30},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1090.94"}]}],"versions":["4.4.0-1002.2","4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1011.11","4.4.0-1012.12","4.4.0-1014.14","4.4.0-1016.16","4.4.0-1017.17","4.4.0-1019.19","4.4.0-1022.22","4.4.0-1023.23","4.4.0-1024.25","4.4.0-1025.26","4.4.0-1027.30","4.4.0-1028.31","4.4.0-1029.32","4.4.0-1031.34","4.4.0-1032.35","4.4.0-1034.37","4.4.0-1036.39","4.4.0-1037.40","4.4.0-1038.41","4.4.0-1039.42","4.4.0-1040.43","4.4.0-1042.45","4.4.0-1044.47","4.4.0-1045.48","4.4.0-1046.50","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1052.56","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1056.60","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1060.64","4.4.0-1061.65","4.4.0-1062.66","4.4.0-1064.68","4.4.0-1065.69","4.4.0-1066.70","4.4.0-1067.71","4.4.0-1073.77","4.4.0-1074.78","4.4.0-1075.79","4.4.0-1076.80","4.4.0-1077.81","4.4.0-1078.82","4.4.0-1081.85","4.4.0-1082.86","4.4.0-1083.87","4.4.0-1085.89","4.4.0-1086.90","4.4.0-1087.91","4.4.0-1088.92"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-208.240~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1","4.4.0-89.112~14.04.1","4.4.0-91.114~14.04.1","4.4.0-92.115~14.04.1","4.4.0-93.116~14.04.1","4.4.0-96.119~14.04.1","4.4.0-97.120~14.04.1","4.4.0-98.121~14.04.1","4.4.0-101.124~14.04.1","4.4.0-103.126~14.04.1","4.4.0-104.127~14.04.1","4.4.0-108.131~14.04.1","4.4.0-109.132~14.04.1","4.4.0-111.134~14.04.1","4.4.0-112.135~14.04.1","4.4.0-116.140~14.04.1","4.4.0-119.143~14.04.1","4.4.0-121.145~14.04.1","4.4.0-124.148~14.04.1","4.4.0-127.153~14.04.1","4.4.0-128.154~14.04.1","4.4.0-130.156~14.04.1","4.4.0-131.157~14.04.1","4.4.0-133.159~14.04.1","4.4.0-134.160~14.04.1","4.4.0-135.161~14.04.1","4.4.0-137.163~14.04.1","4.4.0-138.164~14.04.1","4.4.0-139.165~14.04.1","4.4.0-140.166~14.04.1","4.4.0-141.167~14.04.1","4.4.0-142.168~14.04.1","4.4.0-143.169~14.04.2","4.4.0-144.170~14.04.1","4.4.0-146.172~14.04.1","4.4.0-148.174~14.04.1","4.4.0-150.176~14.04.1","4.4.0-151.178~14.04.1","4.4.0-154.181~14.04.1","4.4.0-157.185~14.04.1","4.4.0-159.187~14.04.1","4.4.0-161.189~14.04.1","4.4.0-164.192~14.04.1","4.4.0-165.193~14.04.1","4.4.0-166.195~14.04.1","4.4.0-168.197~14.04.1","4.4.0-169.198~14.04.1","4.4.0-170.199~14.04.1","4.4.0-171.200~14.04.1","4.4.0-173.203~14.04.1","4.4.0-174.204~14.04.1","4.4.0-176.206~14.04.1","4.4.0-177.207~14.04.1","4.4.0-178.208~14.04.1","4.4.0-179.209~14.04.1","4.4.0-184.214~14.04.1","4.4.0-185.215~14.04.1","4.4.0-186.216~14.04.1","4.4.0-187.217~14.04.1","4.4.0-189.219~14.04.1","4.4.0-190.220~14.04.1","4.4.0-193.224~14.04.1","4.4.0-194.226~14.04.1","4.4.0-197.229~14.04.1","4.4.0-198.230~14.04.1","4.4.0-200.232~14.04.1","4.4.0-201.233~14.04.1","4.4.0-203.235~14.04.1","4.4.0-204.236~14.04.1","4.4.0-206.238~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131","3.13.0-87.133","3.13.0-88.135","3.13.0-91.138","3.13.0-92.139","3.13.0-93.140","3.13.0-95.142","3.13.0-96.143","3.13.0-98.145","3.13.0-100.147","3.13.0-101.148","3.13.0-103.150","3.13.0-105.152","3.13.0-106.153","3.13.0-107.154","3.13.0-108.155","3.13.0-109.156","3.13.0-110.157","3.13.0-111.158","3.13.0-112.159","3.13.0-113.160","3.13.0-115.162","3.13.0-116.163","3.13.0-117.164","3.13.0-119.166","3.13.0-121.170","3.13.0-123.172","3.13.0-125.174","3.13.0-126.175","3.13.0-128.177","3.13.0-129.178","3.13.0-132.181","3.13.0-133.182","3.13.0-135.184","3.13.0-137.186","3.13.0-139.188","3.13.0-141.190","3.13.0-142.191","3.13.0-143.192","3.13.0-144.193","3.13.0-145.194","3.13.0-147.196","3.13.0-149.199","3.13.0-151.201","3.13.0-153.203","3.13.0-155.205","3.13.0-156.206","3.13.0-157.207","3.13.0-158.208","3.13.0-160.210","3.13.0-161.211","3.13.0-162.212","3.13.0-163.213","3.13.0-164.214","3.13.0-165.215","3.13.0-166.216","3.13.0-167.217","3.13.0-168.218","3.13.0-169.219","3.13.0-170.220","3.13.0-171.222","3.13.0-172.223","3.13.0-173.224","3.13.0-174.225","3.13.0-175.226","3.13.0-176.227","3.13.0-180.231","3.13.0-181.232","3.13.0-182.233","3.13.0-183.234","3.13.0-184.235","3.13.0-185.236","3.13.0-186.237","3.13.0-187.238","3.13.0-188.239","3.13.0-189.240","3.13.0-190.241","3.13.0-191.242","3.13.0-192.243","3.13.0-193.244","3.13.0-194.245","3.13.0-195.246","3.13.0-196.247","3.13.0-197.248","3.13.0-198.249","3.13.0-199.250","3.13.0-200.251","3.13.0-201.252","3.13.0-202.253","3.13.0-203.254","3.13.0-204.255","3.13.0-205.256","3.13.0-206.257","3.13.0-207.258","3.13.0-208.259","3.13.0-209.260","3.13.0-210.261","3.13.0-211.262","3.13.0-212.263","3.13.0-214.265","3.13.0-215.266","3.13.0-217.268","3.13.0-218.269","3.13.0-219.270","3.13.0-220.271"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-208.240"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126","4.4.0-104.127","4.4.0-108.131","4.4.0-109.132","4.4.0-112.135","4.4.0-116.140","4.4.0-119.143","4.4.0-121.145","4.4.0-122.146","4.4.0-124.148","4.4.0-127.153","4.4.0-128.154","4.4.0-130.156","4.4.0-131.157","4.4.0-133.159","4.4.0-134.160","4.4.0-135.161","4.4.0-137.163","4.4.0-138.164","4.4.0-139.165","4.4.0-140.166","4.4.0-141.167","4.4.0-142.168","4.4.0-143.169","4.4.0-145.171","4.4.0-146.172","4.4.0-148.174","4.4.0-150.176","4.4.0-151.178","4.4.0-154.181","4.4.0-157.185","4.4.0-159.187","4.4.0-161.189","4.4.0-164.192","4.4.0-165.193","4.4.0-166.195","4.4.0-168.197","4.4.0-169.198","4.4.0-170.199","4.4.0-171.200","4.4.0-173.203","4.4.0-174.204","4.4.0-176.206","4.4.0-177.207","4.4.0-178.208","4.4.0-179.209","4.4.0-184.214","4.4.0-185.215","4.4.0-186.216","4.4.0-187.217","4.4.0-189.219","4.4.0-190.220","4.4.0-193.224","4.4.0-194.226","4.4.0-197.229","4.4.0-198.230","4.4.0-200.232","4.4.0-201.233","4.4.0-203.235","4.4.0-204.236","4.4.0-206.238"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1126.140"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59","4.4.0-1052.61","4.4.0-1054.63","4.4.0-1055.64","4.4.0-1057.66","4.4.0-1060.69","4.4.0-1061.70","4.4.0-1062.71","4.4.0-1063.72","4.4.0-1065.75","4.4.0-1066.76","4.4.0-1067.77","4.4.0-1069.79","4.4.0-1070.80","4.4.0-1072.82","4.4.0-1073.83","4.4.0-1074.84","4.4.0-1075.85","4.4.0-1077.87","4.4.0-1079.89","4.4.0-1081.91","4.4.0-1083.93","4.4.0-1084.94","4.4.0-1085.96","4.4.0-1087.98","4.4.0-1088.99","4.4.0-1090.101","4.4.0-1092.103","4.4.0-1094.105","4.4.0-1095.106","4.4.0-1096.107","4.4.0-1098.109","4.4.0-1099.110","4.4.0-1100.111","4.4.0-1101.112","4.4.0-1102.113","4.4.0-1104.115","4.4.0-1105.116","4.4.0-1106.117","4.4.0-1107.118","4.4.0-1109.120","4.4.0-1110.121","4.4.0-1111.123","4.4.0-1112.124","4.4.0-1113.126","4.4.0-1114.127","4.4.0-1117.131","4.4.0-1118.132","4.4.0-1119.133","4.4.0-1121.135","4.4.0-1122.136","4.4.0-1123.137","4.4.0-1124.138"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.0-32.36~16.04.1"}]}],"versions":["4.8.0-36.36~16.04.1","4.8.0-39.42~16.04.1","4.8.0-41.44~16.04.1","4.8.0-42.45~16.04.1","4.8.0-44.47~16.04.1","4.8.0-45.48~16.04.1","4.8.0-46.49~16.04.1","4.8.0-49.52~16.04.1","4.8.0-51.54~16.04.1","4.8.0-52.55~16.04.1","4.8.0-53.56~16.04.1","4.8.0-54.57~16.04.1","4.8.0-56.61~16.04.1","4.8.0-58.63~16.04.1","4.10.0-27.30~16.04.2","4.10.0-28.32~16.04.2","4.10.0-30.34~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1091.100"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17","4.4.0-1013.18","4.4.0-1015.20","4.4.0-1017.22","4.4.0-1019.24","4.4.0-1020.25","4.4.0-1021.26","4.4.0-1023.28","4.4.0-1026.31","4.4.0-1027.32","4.4.0-1029.34","4.4.0-1031.37","4.4.0-1032.38","4.4.0-1033.39","4.4.0-1035.41","4.4.0-1036.42","4.4.0-1037.43","4.4.0-1038.44","4.4.0-1039.45","4.4.0-1040.46","4.4.0-1041.47","4.4.0-1043.49","4.4.0-1044.50","4.4.0-1046.52","4.4.0-1047.53","4.4.0-1048.55","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1056.63","4.4.0-1058.65","4.4.0-1059.66","4.4.0-1060.67","4.4.0-1062.69","4.4.0-1063.70","4.4.0-1064.71","4.4.0-1065.72","4.4.0-1066.73","4.4.0-1068.75","4.4.0-1069.76","4.4.0-1070.77","4.4.0-1071.78","4.4.0-1075.82","4.4.0-1076.83","4.4.0-1077.84","4.4.0-1078.85","4.4.0-1079.86","4.4.0-1080.87","4.4.0-1082.91","4.4.0-1084.93","4.4.0-1085.94","4.4.0-1087.96","4.4.0-1088.97","4.4.0-1089.98","4.4.0-1090.99"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1150.161"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73","4.4.0-1067.75","4.4.0-1069.77","4.4.0-1070.78","4.4.0-1071.79","4.4.0-1074.82","4.4.0-1075.83","4.4.0-1076.84","4.4.0-1077.85","4.4.0-1079.87","4.4.0-1080.88","4.4.0-1082.90","4.4.0-1085.93","4.4.0-1086.94","4.4.0-1087.95","4.4.0-1089.97","4.4.0-1090.98","4.4.0-1091.99","4.4.0-1092.100","4.4.0-1094.102","4.4.0-1095.103","4.4.0-1096.104","4.4.0-1098.106","4.4.0-1099.107","4.4.0-1100.108","4.4.0-1101.109","4.4.0-1102.110","4.4.0-1103.111","4.4.0-1104.112","4.4.0-1106.114","4.4.0-1107.115","4.4.0-1109.117","4.4.0-1110.118","4.4.0-1111.120","4.4.0-1114.123","4.4.0-1117.126","4.4.0-1118.127","4.4.0-1120.129","4.4.0-1122.131","4.4.0-1123.132","4.4.0-1124.133","4.4.0-1125.134","4.4.0-1126.135","4.4.0-1127.136","4.4.0-1128.137","4.4.0-1129.138","4.4.0-1130.139","4.4.0-1131.140","4.4.0-1132.141","4.4.0-1133.142","4.4.0-1134.143","4.4.0-1135.144","4.4.0-1136.145","4.4.0-1137.146","4.4.0-1138.147","4.4.0-1139.148","4.4.0-1141.151","4.4.0-1142.152","4.4.0-1143.153","4.4.0-1145.155","4.4.0-1146.156","4.4.0-1147.157","4.4.0-1148.158"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1154.164"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23","4.4.0-1022.25","4.4.0-1024.27","4.4.0-1026.29","4.4.0-1030.33","4.4.0-1032.36","4.4.0-1035.39","4.4.0-1039.43","4.4.0-1042.46","4.4.0-1044.48","4.4.0-1046.50","4.4.0-1047.51","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1051.55","4.4.0-1053.57","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1057.61","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1061.66","4.4.0-1063.68","4.4.0-1067.72","4.4.0-1069.74","4.4.0-1071.76","4.4.0-1072.77","4.4.0-1073.78","4.4.0-1076.81","4.4.0-1077.82","4.4.0-1078.83","4.4.0-1079.84","4.4.0-1081.86","4.4.0-1082.87","4.4.0-1084.89","4.4.0-1087.92","4.4.0-1088.93","4.4.0-1090.95","4.4.0-1092.97","4.4.0-1093.98","4.4.0-1094.99","4.4.0-1095.100","4.4.0-1096.101","4.4.0-1098.103","4.4.0-1099.104","4.4.0-1100.105","4.4.0-1102.107","4.4.0-1103.108","4.4.0-1104.109","4.4.0-1105.110","4.4.0-1106.111","4.4.0-1107.112","4.4.0-1108.113","4.4.0-1110.115","4.4.0-1111.116","4.4.0-1113.118","4.4.0-1114.119","4.4.0-1115.121","4.4.0-1118.124","4.4.0-1121.127","4.4.0-1122.128","4.4.0-1124.130","4.4.0-1126.132","4.4.0-1127.135","4.4.0-1128.136","4.4.0-1129.137","4.4.0-1130.138","4.4.0-1131.139","4.4.0-1132.140","4.4.0-1133.141","4.4.0-1134.142","4.4.0-1135.143","4.4.0-1136.144","4.4.0-1137.145","4.4.0-1138.146","4.4.0-1139.147","4.4.0-1140.148","4.4.0-1141.149","4.4.0-1142.151","4.4.0-1143.152","4.4.0-1145.155","4.4.0-1146.156","4.4.0-1147.157","4.4.0-1149.159","4.4.0-1150.160","4.4.0-1151.161","4.4.0-1152.162"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1060.66"}]}],"versions":["4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1008.10","4.4.0-1010.13","4.4.0-1011.14","4.4.0-1012.16","4.4.0-1013.17","4.4.0-1015.20","4.4.0-1017.22","4.4.0-1019.24","4.4.0-1021.26","4.4.0-1022.27","4.4.0-1023.28","4.4.0-1025.30","4.4.0-1026.31","4.4.0-1027.32","4.4.0-1028.33","4.4.0-1029.34","4.4.0-1031.36","4.4.0-1032.37","4.4.0-1033.38","4.4.0-1034.39","4.4.0-1041.46","4.4.0-1042.47","4.4.0-1043.48","4.4.0-1044.49","4.4.0-1045.50","4.4.0-1046.51","4.4.0-1048.53","4.4.0-1049.55","4.4.0-1051.57","4.4.0-1052.58","4.4.0-1054.60","4.4.0-1055.61","4.4.0-1056.62","4.4.0-1057.63","4.4.0-1058.64"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"linux-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.0-1001.1","4.4.0-1002.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1053.57"}]}],"versions":["4.4.0-1077.82","4.4.0-1078.83","4.4.0-1079.84","4.4.0-1081.86"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.0-27.30~16.04.2"}]}],"versions":["4.8.0-36.36~16.04.1","4.8.0-39.42~16.04.1","4.8.0-41.44~16.04.1","4.8.0-42.45~16.04.1","4.8.0-44.47~16.04.1","4.8.0-45.48~16.04.1","4.8.0-46.49~16.04.1","4.8.0-49.52~16.04.1","4.8.0-51.54~16.04.1","4.8.0-52.55~16.04.1","4.8.0-53.56~16.04.1","4.8.0-54.57~16.04.1","4.8.0-56.61~16.04.1","4.8.0-58.63~16.04.1"],"bundled":40},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1090.94"}]}],"versions":["4.4.0-1002.2","4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1011.11","4.4.0-1012.12","4.4.0-1014.14","4.4.0-1016.16","4.4.0-1017.17","4.4.0-1019.19","4.4.0-1022.22","4.4.0-1023.23","4.4.0-1024.25","4.4.0-1025.26","4.4.0-1027.30","4.4.0-1028.31","4.4.0-1029.32","4.4.0-1031.34","4.4.0-1032.35","4.4.0-1034.37","4.4.0-1036.39","4.4.0-1037.40","4.4.0-1038.41","4.4.0-1039.42","4.4.0-1040.43","4.4.0-1042.45","4.4.0-1044.47","4.4.0-1045.48","4.4.0-1046.50","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1052.56","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1056.60","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1060.64","4.4.0-1061.65","4.4.0-1062.66","4.4.0-1064.68","4.4.0-1065.69","4.4.0-1066.70","4.4.0-1067.71","4.4.0-1073.77","4.4.0-1074.78","4.4.0-1075.79","4.4.0-1076.80","4.4.0-1077.81","4.4.0-1078.82","4.4.0-1081.85","4.4.0-1082.86","4.4.0-1083.87","4.4.0-1085.89","4.4.0-1086.90","4.4.0-1087.91","4.4.0-1088.92"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-208.240~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1","4.4.0-89.112~14.04.1","4.4.0-91.114~14.04.1","4.4.0-92.115~14.04.1","4.4.0-93.116~14.04.1","4.4.0-96.119~14.04.1","4.4.0-97.120~14.04.1","4.4.0-98.121~14.04.1","4.4.0-101.124~14.04.1","4.4.0-103.126~14.04.1","4.4.0-104.127~14.04.1","4.4.0-108.131~14.04.1","4.4.0-109.132~14.04.1","4.4.0-111.134~14.04.1","4.4.0-112.135~14.04.1","4.4.0-116.140~14.04.1","4.4.0-119.143~14.04.1","4.4.0-121.145~14.04.1","4.4.0-124.148~14.04.1","4.4.0-127.153~14.04.1","4.4.0-128.154~14.04.1","4.4.0-130.156~14.04.1","4.4.0-131.157~14.04.1","4.4.0-133.159~14.04.1","4.4.0-134.160~14.04.1","4.4.0-135.161~14.04.1","4.4.0-137.163~14.04.1","4.4.0-138.164~14.04.1","4.4.0-139.165~14.04.1","4.4.0-140.166~14.04.1","4.4.0-141.167~14.04.1","4.4.0-142.168~14.04.1","4.4.0-143.169~14.04.2","4.4.0-144.170~14.04.1","4.4.0-146.172~14.04.1","4.4.0-148.174~14.04.1","4.4.0-150.176~14.04.1","4.4.0-151.178~14.04.1","4.4.0-154.181~14.04.1","4.4.0-157.185~14.04.1","4.4.0-159.187~14.04.1","4.4.0-161.189~14.04.1","4.4.0-164.192~14.04.1","4.4.0-165.193~14.04.1","4.4.0-166.195~14.04.1","4.4.0-168.197~14.04.1","4.4.0-169.198~14.04.1","4.4.0-170.199~14.04.1","4.4.0-171.200~14.04.1","4.4.0-173.203~14.04.1","4.4.0-174.204~14.04.1","4.4.0-176.206~14.04.1","4.4.0-177.207~14.04.1","4.4.0-178.208~14.04.1","4.4.0-179.209~14.04.1","4.4.0-184.214~14.04.1","4.4.0-185.215~14.04.1","4.4.0-186.216~14.04.1","4.4.0-187.217~14.04.1","4.4.0-189.219~14.04.1","4.4.0-190.220~14.04.1","4.4.0-193.224~14.04.1","4.4.0-194.226~14.04.1","4.4.0-197.229~14.04.1","4.4.0-198.230~14.04.1","4.4.0-200.232~14.04.1","4.4.0-201.233~14.04.1","4.4.0-203.235~14.04.1","4.4.0-204.236~14.04.1","4.4.0-206.238~14.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-208.240"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126","4.4.0-104.127","4.4.0-108.131","4.4.0-109.132","4.4.0-112.135","4.4.0-116.140","4.4.0-119.143","4.4.0-121.145","4.4.0-122.146","4.4.0-124.148","4.4.0-127.153","4.4.0-128.154","4.4.0-130.156","4.4.0-131.157","4.4.0-133.159","4.4.0-134.160","4.4.0-135.161","4.4.0-137.163","4.4.0-138.164","4.4.0-139.165","4.4.0-140.166","4.4.0-141.167","4.4.0-142.168","4.4.0-143.169","4.4.0-145.171","4.4.0-146.172","4.4.0-148.174","4.4.0-150.176","4.4.0-151.178","4.4.0-154.181","4.4.0-157.185","4.4.0-159.187","4.4.0-161.189","4.4.0-164.192","4.4.0-165.193","4.4.0-166.195","4.4.0-168.197","4.4.0-169.198","4.4.0-170.199","4.4.0-171.200","4.4.0-173.203","4.4.0-174.204","4.4.0-176.206","4.4.0-177.207","4.4.0-178.208","4.4.0-179.209","4.4.0-184.214","4.4.0-185.215","4.4.0-186.216","4.4.0-187.217","4.4.0-189.219","4.4.0-190.220","4.4.0-193.224","4.4.0-194.226","4.4.0-197.229","4.4.0-198.230","4.4.0-200.232","4.4.0-201.233","4.4.0-203.235","4.4.0-204.236","4.4.0-206.238"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1126.140"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59","4.4.0-1052.61","4.4.0-1054.63","4.4.0-1055.64","4.4.0-1057.66","4.4.0-1060.69","4.4.0-1061.70","4.4.0-1062.71","4.4.0-1063.72","4.4.0-1065.75","4.4.0-1066.76","4.4.0-1067.77","4.4.0-1069.79","4.4.0-1070.80","4.4.0-1072.82","4.4.0-1073.83","4.4.0-1074.84","4.4.0-1075.85","4.4.0-1077.87","4.4.0-1079.89","4.4.0-1081.91","4.4.0-1083.93","4.4.0-1084.94","4.4.0-1085.96","4.4.0-1087.98","4.4.0-1088.99","4.4.0-1090.101","4.4.0-1092.103","4.4.0-1094.105","4.4.0-1095.106","4.4.0-1096.107","4.4.0-1098.109","4.4.0-1099.110","4.4.0-1100.111","4.4.0-1101.112","4.4.0-1102.113","4.4.0-1104.115","4.4.0-1105.116","4.4.0-1106.117","4.4.0-1107.118","4.4.0-1109.120","4.4.0-1110.121","4.4.0-1111.123","4.4.0-1112.124","4.4.0-1113.126","4.4.0-1114.127","4.4.0-1117.131","4.4.0-1118.132","4.4.0-1119.133","4.4.0-1121.135","4.4.0-1122.136","4.4.0-1123.137","4.4.0-1124.138"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1091.100"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17","4.4.0-1013.18","4.4.0-1015.20","4.4.0-1017.22","4.4.0-1019.24","4.4.0-1020.25","4.4.0-1021.26","4.4.0-1023.28","4.4.0-1026.31","4.4.0-1027.32","4.4.0-1029.34","4.4.0-1031.37","4.4.0-1032.38","4.4.0-1033.39","4.4.0-1035.41","4.4.0-1036.42","4.4.0-1037.43","4.4.0-1038.44","4.4.0-1039.45","4.4.0-1040.46","4.4.0-1041.47","4.4.0-1043.49","4.4.0-1044.50","4.4.0-1046.52","4.4.0-1047.53","4.4.0-1048.55","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1056.63","4.4.0-1058.65","4.4.0-1059.66","4.4.0-1060.67","4.4.0-1062.69","4.4.0-1063.70","4.4.0-1064.71","4.4.0-1065.72","4.4.0-1066.73","4.4.0-1068.75","4.4.0-1069.76","4.4.0-1070.77","4.4.0-1071.78","4.4.0-1075.82","4.4.0-1076.83","4.4.0-1077.84","4.4.0-1078.85","4.4.0-1079.86","4.4.0-1080.87","4.4.0-1082.91","4.4.0-1084.93","4.4.0-1085.94","4.4.0-1087.96","4.4.0-1088.97","4.4.0-1089.98","4.4.0-1090.99"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1150.161"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73","4.4.0-1067.75","4.4.0-1069.77","4.4.0-1070.78","4.4.0-1071.79","4.4.0-1074.82","4.4.0-1075.83","4.4.0-1076.84","4.4.0-1077.85","4.4.0-1079.87","4.4.0-1080.88","4.4.0-1082.90","4.4.0-1085.93","4.4.0-1086.94","4.4.0-1087.95","4.4.0-1089.97","4.4.0-1090.98","4.4.0-1091.99","4.4.0-1092.100","4.4.0-1094.102","4.4.0-1095.103","4.4.0-1096.104","4.4.0-1098.106","4.4.0-1099.107","4.4.0-1100.108","4.4.0-1101.109","4.4.0-1102.110","4.4.0-1103.111","4.4.0-1104.112","4.4.0-1106.114","4.4.0-1107.115","4.4.0-1109.117","4.4.0-1110.118","4.4.0-1111.120","4.4.0-1114.123","4.4.0-1117.126","4.4.0-1118.127","4.4.0-1120.129","4.4.0-1122.131","4.4.0-1123.132","4.4.0-1124.133","4.4.0-1125.134","4.4.0-1126.135","4.4.0-1127.136","4.4.0-1128.137","4.4.0-1129.138","4.4.0-1130.139","4.4.0-1131.140","4.4.0-1132.141","4.4.0-1133.142","4.4.0-1134.143","4.4.0-1135.144","4.4.0-1136.145","4.4.0-1137.146","4.4.0-1138.147","4.4.0-1139.148","4.4.0-1141.151","4.4.0-1142.152","4.4.0-1143.153","4.4.0-1145.155","4.4.0-1146.156","4.4.0-1147.157","4.4.0-1148.158"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1154.164"}]}],"versions":["4.4.0-1012.12","4.4.0-1013.14","4.4.0-1013.15","4.4.0-1015.18","4.4.0-1019.22","4.4.0-1020.23","4.4.0-1022.25","4.4.0-1024.27","4.4.0-1026.29","4.4.0-1030.33","4.4.0-1032.36","4.4.0-1035.39","4.4.0-1039.43","4.4.0-1042.46","4.4.0-1044.48","4.4.0-1046.50","4.4.0-1047.51","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1051.55","4.4.0-1053.57","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1057.61","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1061.66","4.4.0-1063.68","4.4.0-1067.72","4.4.0-1069.74","4.4.0-1071.76","4.4.0-1072.77","4.4.0-1073.78","4.4.0-1076.81","4.4.0-1077.82","4.4.0-1078.83","4.4.0-1079.84","4.4.0-1081.86","4.4.0-1082.87","4.4.0-1084.89","4.4.0-1087.92","4.4.0-1088.93","4.4.0-1090.95","4.4.0-1092.97","4.4.0-1093.98","4.4.0-1094.99","4.4.0-1095.100","4.4.0-1096.101","4.4.0-1098.103","4.4.0-1099.104","4.4.0-1100.105","4.4.0-1102.107","4.4.0-1103.108","4.4.0-1104.109","4.4.0-1105.110","4.4.0-1106.111","4.4.0-1107.112","4.4.0-1108.113","4.4.0-1110.115","4.4.0-1111.116","4.4.0-1113.118","4.4.0-1114.119","4.4.0-1115.121","4.4.0-1118.124","4.4.0-1121.127","4.4.0-1122.128","4.4.0-1124.130","4.4.0-1126.132","4.4.0-1127.135","4.4.0-1128.136","4.4.0-1129.137","4.4.0-1130.138","4.4.0-1131.139","4.4.0-1132.140","4.4.0-1133.141","4.4.0-1134.142","4.4.0-1135.143","4.4.0-1136.144","4.4.0-1137.145","4.4.0-1138.146","4.4.0-1139.147","4.4.0-1140.148","4.4.0-1141.149","4.4.0-1142.151","4.4.0-1143.152","4.4.0-1145.155","4.4.0-1146.156","4.4.0-1147.157","4.4.0-1149.159","4.4.0-1150.160","4.4.0-1151.161","4.4.0-1152.162"],"bundled":11}],"products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_mrg"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185139","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://www.securityfocus.com/bid/76075","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://marc.info/?l=linux-kernel\u0026m=142153722930533\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory","advisory","article","evidence"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/24/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1350"},{"url":"https://github.com/advisories/GHSA-m2mx-4jc6-3wh7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1350","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170181-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000118","tags":["report"]},{"url":"https://bugzilla.suse.com/1000189","tags":["report"]},{"url":"https://bugzilla.suse.com/1000287","tags":["report"]},{"url":"https://bugzilla.suse.com/1000304","tags":["report"]},{"url":"https://bugzilla.suse.com/1000433","tags":["report"]},{"url":"https://bugzilla.suse.com/1000776","tags":["report"]},{"url":"https://bugzilla.suse.com/1001169","tags":["report"]},{"url":"https://bugzilla.suse.com/1001171","tags":["report"]},{"url":"https://bugzilla.suse.com/1001310","tags":["report"]},{"url":"https://bugzilla.suse.com/1001462","tags":["report"]},{"url":"https://bugzilla.suse.com/1001486","tags":["report"]},{"url":"https://bugzilla.suse.com/1001888","tags":["report"]},{"url":"https://bugzilla.suse.com/1002322","tags":["report"]},{"url":"https://bugzilla.suse.com/1002770","tags":["report"]},{"url":"https://bugzilla.suse.com/1002786","tags":["report"]},{"url":"https://bugzilla.suse.com/1003068","tags":["report"]},{"url":"https://bugzilla.suse.com/1003566","tags":["report"]},{"url":"https://bugzilla.suse.com/1003581","tags":["report"]},{"url":"https://bugzilla.suse.com/1003606","tags":["report"]},{"url":"https://bugzilla.suse.com/1003813","tags":["report"]},{"url":"https://bugzilla.suse.com/1003866","tags":["report"]},{"url":"https://bugzilla.suse.com/1003964","tags":["report"]},{"url":"https://bugzilla.suse.com/1004048","tags":["report"]},{"url":"https://bugzilla.suse.com/1004052","tags":["report"]},{"url":"https://bugzilla.suse.com/1004252","tags":["report"]},{"url":"https://bugzilla.suse.com/1004365","tags":["report"]},{"url":"https://bugzilla.suse.com/1004517","tags":["report"]},{"url":"https://bugzilla.suse.com/1005169","tags":["report"]},{"url":"https://bugzilla.suse.com/1005327","tags":["report"]},{"url":"https://bugzilla.suse.com/1005545","tags":["report"]},{"url":"https://bugzilla.suse.com/1005666","tags":["report"]},{"url":"https://bugzilla.suse.com/1005745","tags":["report"]},{"url":"https://bugzilla.suse.com/1005895","tags":["report"]},{"url":"https://bugzilla.suse.com/1005917","tags":["report"]},{"url":"https://bugzilla.suse.com/1005921","tags":["report"]},{"url":"https://bugzilla.suse.com/1005923","tags":["report"]},{"url":"https://bugzilla.suse.com/1005925","tags":["report"]},{"url":"https://bugzilla.suse.com/1005929","tags":["report"]},{"url":"https://bugzilla.suse.com/1006103","tags":["report"]},{"url":"https://bugzilla.suse.com/1006175","tags":["report"]},{"url":"https://bugzilla.suse.com/1006267","tags":["report"]},{"url":"https://bugzilla.suse.com/1006528","tags":["report"]},{"url":"https://bugzilla.suse.com/1006576","tags":["report"]},{"url":"https://bugzilla.suse.com/1006804","tags":["report"]},{"url":"https://bugzilla.suse.com/1006809","tags":["report"]},{"url":"https://bugzilla.suse.com/1006827","tags":["report"]},{"url":"https://bugzilla.suse.com/1006915","tags":["report"]},{"url":"https://bugzilla.suse.com/1006918","tags":["report"]},{"url":"https://bugzilla.suse.com/1007197","tags":["report"]},{"url":"https://bugzilla.suse.com/1007615","tags":["report"]},{"url":"https://bugzilla.suse.com/1007653","tags":["report"]},{"url":"https://bugzilla.suse.com/1007955","tags":["report"]},{"url":"https://bugzilla.suse.com/1008557","tags":["report"]},{"url":"https://bugzilla.suse.com/1008979","tags":["report"]},{"url":"https://bugzilla.suse.com/1009062","tags":["report"]},{"url":"https://bugzilla.suse.com/1009969","tags":["report"]},{"url":"https://bugzilla.suse.com/1010040","tags":["report"]},{"url":"https://bugzilla.suse.com/1010158","tags":["report"]},{"url":"https://bugzilla.suse.com/1010444","tags":["report"]},{"url":"https://bugzilla.suse.com/1010478","tags":["report"]},{"url":"https://bugzilla.suse.com/1010507","tags":["report"]},{"url":"https://bugzilla.suse.com/1010665","tags":["report"]},{"url":"https://bugzilla.suse.com/1010690","tags":["report"]},{"url":"https://bugzilla.suse.com/1010970","tags":["report"]},{"url":"https://bugzilla.suse.com/1011176","tags":["report"]},{"url":"https://bugzilla.suse.com/1011250","tags":["report"]},{"url":"https://bugzilla.suse.com/1011913","tags":["report"]},{"url":"https://bugzilla.suse.com/1012060","tags":["report"]},{"url":"https://bugzilla.suse.com/1012094","tags":["report"]},{"url":"https://bugzilla.suse.com/1012452","tags":["report"]},{"url":"https://bugzilla.suse.com/1012767","tags":["report"]},{"url":"https://bugzilla.suse.com/1012829","tags":["report"]},{"url":"https://bugzilla.suse.com/1012992","tags":["report"]},{"url":"https://bugzilla.suse.com/1013001","tags":["report"]},{"url":"https://bugzilla.suse.com/1013479","tags":["report"]},{"url":"https://bugzilla.suse.com/1013531","tags":["report"]},{"url":"https://bugzilla.suse.com/1013700","tags":["report"]},{"url":"https://bugzilla.suse.com/1014120","tags":["report"]},{"url":"https://bugzilla.suse.com/1014392","tags":["report"]},{"url":"https://bugzilla.suse.com/1014701","tags":["report"]},{"url":"https://bugzilla.suse.com/1014710","tags":["report"]},{"url":"https://bugzilla.suse.com/1015212","tags":["report"]},{"url":"https://bugzilla.suse.com/1015359","tags":["report"]},{"url":"https://bugzilla.suse.com/1015367","tags":["report"]},{"url":"https://bugzilla.suse.com/1015416","tags":["report"]},{"url":"https://bugzilla.suse.com/799133","tags":["report"]},{"url":"https://bugzilla.suse.com/914939","tags":["report"]},{"url":"https://bugzilla.suse.com/922634","tags":["report"]},{"url":"https://bugzilla.suse.com/963609","tags":["report"]},{"url":"https://bugzilla.suse.com/963655","tags":["report"]},{"url":"https://bugzilla.suse.com/963904","tags":["report"]},{"url":"https://bugzilla.suse.com/964462","tags":["report"]},{"url":"https://bugzilla.suse.com/966170","tags":["report"]},{"url":"https://bugzilla.suse.com/966172","tags":["report"]},{"url":"https://bugzilla.suse.com/966186","tags":["report"]},{"url":"https://bugzilla.suse.com/966191","tags":["report"]},{"url":"https://bugzilla.suse.com/966316","tags":["report"]},{"url":"https://bugzilla.suse.com/966318","tags":["report"]},{"url":"https://bugzilla.suse.com/966325","tags":["report"]},{"url":"https://bugzilla.suse.com/966471","tags":["report"]},{"url":"https://bugzilla.suse.com/969474","tags":["report"]},{"url":"https://bugzilla.suse.com/969475","tags":["report"]},{"url":"https://bugzilla.suse.com/969476","tags":["report"]},{"url":"https://bugzilla.suse.com/969477","tags":["report"]},{"url":"https://bugzilla.suse.com/969756","tags":["report"]},{"url":"https://bugzilla.suse.com/971975","tags":["report"]},{"url":"https://bugzilla.suse.com/971989","tags":["report"]},{"url":"https://bugzilla.suse.com/972993","tags":["report"]},{"url":"https://bugzilla.suse.com/974313","tags":["report"]},{"url":"https://bugzilla.suse.com/974842","tags":["report"]},{"url":"https://bugzilla.suse.com/974843","tags":["report"]},{"url":"https://bugzilla.suse.com/978907","tags":["report"]},{"url":"https://bugzilla.suse.com/979378","tags":["report"]},{"url":"https://bugzilla.suse.com/979681","tags":["report"]},{"url":"https://bugzilla.suse.com/981825","tags":["report"]},{"url":"https://bugzilla.suse.com/983087","tags":["report"]},{"url":"https://bugzilla.suse.com/983152","tags":["report"]},{"url":"https://bugzilla.suse.com/983318","tags":["report"]},{"url":"https://bugzilla.suse.com/985850","tags":["report"]},{"url":"https://bugzilla.suse.com/986255","tags":["report"]},{"url":"https://bugzilla.suse.com/986987","tags":["report"]},{"url":"https://bugzilla.suse.com/987641","tags":["report"]},{"url":"https://bugzilla.suse.com/987703","tags":["report"]},{"url":"https://bugzilla.suse.com/987805","tags":["report"]},{"url":"https://bugzilla.suse.com/988524","tags":["report"]},{"url":"https://bugzilla.suse.com/988715","tags":["report"]},{"url":"https://bugzilla.suse.com/990384","tags":["report"]},{"url":"https://bugzilla.suse.com/992555","tags":["report"]},{"url":"https://bugzilla.suse.com/993739","tags":["report"]},{"url":"https://bugzilla.suse.com/993841","tags":["report"]},{"url":"https://bugzilla.suse.com/993891","tags":["report"]},{"url":"https://bugzilla.suse.com/994881","tags":["report"]},{"url":"https://bugzilla.suse.com/995278","tags":["report"]},{"url":"https://bugzilla.suse.com/997059","tags":["report"]},{"url":"https://bugzilla.suse.com/997639","tags":["report"]},{"url":"https://bugzilla.suse.com/997807","tags":["report"]},{"url":"https://bugzilla.suse.com/998054","tags":["report"]},{"url":"https://bugzilla.suse.com/998689","tags":["report"]},{"url":"https://bugzilla.suse.com/999907","tags":["report"]},{"url":"https://bugzilla.suse.com/999932","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9919","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170333-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1003077","tags":["report"]},{"url":"https://bugzilla.suse.com/1003925","tags":["report"]},{"url":"https://bugzilla.suse.com/1007944","tags":["report"]},{"url":"https://bugzilla.suse.com/1008645","tags":["report"]},{"url":"https://bugzilla.suse.com/1008831","tags":["report"]},{"url":"https://bugzilla.suse.com/1008833","tags":["report"]},{"url":"https://bugzilla.suse.com/1009443","tags":["report"]},{"url":"https://bugzilla.suse.com/1010150","tags":["report"]},{"url":"https://bugzilla.suse.com/1010467","tags":["report"]},{"url":"https://bugzilla.suse.com/1010501","tags":["report"]},{"url":"https://bugzilla.suse.com/1010711","tags":["report"]},{"url":"https://bugzilla.suse.com/1010716","tags":["report"]},{"url":"https://bugzilla.suse.com/1011482","tags":["report"]},{"url":"https://bugzilla.suse.com/1011685","tags":["report"]},{"url":"https://bugzilla.suse.com/1012422","tags":["report"]},{"url":"https://bugzilla.suse.com/1012832","tags":["report"]},{"url":"https://bugzilla.suse.com/1013038","tags":["report"]},{"url":"https://bugzilla.suse.com/1013542","tags":["report"]},{"url":"https://bugzilla.suse.com/1014746","tags":["report"]},{"url":"https://bugzilla.suse.com/1017710","tags":["report"]},{"url":"https://bugzilla.suse.com/1021258","tags":["report"]},{"url":"https://bugzilla.suse.com/835175","tags":["report"]},{"url":"https://bugzilla.suse.com/839104","tags":["report"]},{"url":"https://bugzilla.suse.com/863873","tags":["report"]},{"url":"https://bugzilla.suse.com/874145","tags":["report"]},{"url":"https://bugzilla.suse.com/896484","tags":["report"]},{"url":"https://bugzilla.suse.com/908069","tags":["report"]},{"url":"https://bugzilla.suse.com/922947","tags":["report"]},{"url":"https://bugzilla.suse.com/927287","tags":["report"]},{"url":"https://bugzilla.suse.com/940966","tags":["report"]},{"url":"https://bugzilla.suse.com/950998","tags":["report"]},{"url":"https://bugzilla.suse.com/954984","tags":["report"]},{"url":"https://bugzilla.suse.com/956514","tags":["report"]},{"url":"https://bugzilla.suse.com/958000","tags":["report"]},{"url":"https://bugzilla.suse.com/960689","tags":["report"]},{"url":"https://bugzilla.suse.com/963053","tags":["report"]},{"url":"https://bugzilla.suse.com/967716","tags":["report"]},{"url":"https://bugzilla.suse.com/968500","tags":["report"]},{"url":"https://bugzilla.suse.com/969340","tags":["report"]},{"url":"https://bugzilla.suse.com/971360","tags":["report"]},{"url":"https://bugzilla.suse.com/971944","tags":["report"]},{"url":"https://bugzilla.suse.com/978401","tags":["report"]},{"url":"https://bugzilla.suse.com/978821","tags":["report"]},{"url":"https://bugzilla.suse.com/979213","tags":["report"]},{"url":"https://bugzilla.suse.com/979274","tags":["report"]},{"url":"https://bugzilla.suse.com/979548","tags":["report"]},{"url":"https://bugzilla.suse.com/979595","tags":["report"]},{"url":"https://bugzilla.suse.com/979879","tags":["report"]},{"url":"https://bugzilla.suse.com/979915","tags":["report"]},{"url":"https://bugzilla.suse.com/980363","tags":["report"]},{"url":"https://bugzilla.suse.com/980371","tags":["report"]},{"url":"https://bugzilla.suse.com/980725","tags":["report"]},{"url":"https://bugzilla.suse.com/981267","tags":["report"]},{"url":"https://bugzilla.suse.com/983143","tags":["report"]},{"url":"https://bugzilla.suse.com/983213","tags":["report"]},{"url":"https://bugzilla.suse.com/984755","tags":["report"]},{"url":"https://bugzilla.suse.com/986362","tags":["report"]},{"url":"https://bugzilla.suse.com/986365","tags":["report"]},{"url":"https://bugzilla.suse.com/986445","tags":["report"]},{"url":"https://bugzilla.suse.com/986572","tags":["report"]},{"url":"https://bugzilla.suse.com/989261","tags":["report"]},{"url":"https://bugzilla.suse.com/991608","tags":["report"]},{"url":"https://bugzilla.suse.com/991665","tags":["report"]},{"url":"https://bugzilla.suse.com/992566","tags":["report"]},{"url":"https://bugzilla.suse.com/993890","tags":["report"]},{"url":"https://bugzilla.suse.com/994296","tags":["report"]},{"url":"https://bugzilla.suse.com/994436","tags":["report"]},{"url":"https://bugzilla.suse.com/994618","tags":["report"]},{"url":"https://bugzilla.suse.com/994759","tags":["report"]},{"url":"https://bugzilla.suse.com/995968","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2004-0230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5551","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170437-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1005877","tags":["report"]},{"url":"https://bugzilla.suse.com/1008893","tags":["report"]},{"url":"https://bugzilla.suse.com/1009875","tags":["report"]},{"url":"https://bugzilla.suse.com/1010175","tags":["report"]},{"url":"https://bugzilla.suse.com/1010201","tags":["report"]},{"url":"https://bugzilla.suse.com/1010713","tags":["report"]},{"url":"https://bugzilla.suse.com/1011820","tags":["report"]},{"url":"https://bugzilla.suse.com/1012183","tags":["report"]},{"url":"https://bugzilla.suse.com/1012411","tags":["report"]},{"url":"https://bugzilla.suse.com/1012851","tags":["report"]},{"url":"https://bugzilla.suse.com/1012852","tags":["report"]},{"url":"https://bugzilla.suse.com/1012917","tags":["report"]},{"url":"https://bugzilla.suse.com/1013018","tags":["report"]},{"url":"https://bugzilla.suse.com/1013042","tags":["report"]},{"url":"https://bugzilla.suse.com/1013070","tags":["report"]},{"url":"https://bugzilla.suse.com/1014410","tags":["report"]},{"url":"https://bugzilla.suse.com/1014454","tags":["report"]},{"url":"https://bugzilla.suse.com/1015561","tags":["report"]},{"url":"https://bugzilla.suse.com/1015752","tags":["report"]},{"url":"https://bugzilla.suse.com/1015760","tags":["report"]},{"url":"https://bugzilla.suse.com/1015796","tags":["report"]},{"url":"https://bugzilla.suse.com/1015803","tags":["report"]},{"url":"https://bugzilla.suse.com/1015817","tags":["report"]},{"url":"https://bugzilla.suse.com/1015828","tags":["report"]},{"url":"https://bugzilla.suse.com/1015844","tags":["report"]},{"url":"https://bugzilla.suse.com/1015848","tags":["report"]},{"url":"https://bugzilla.suse.com/1015878","tags":["report"]},{"url":"https://bugzilla.suse.com/1015932","tags":["report"]},{"url":"https://bugzilla.suse.com/1016320","tags":["report"]},{"url":"https://bugzilla.suse.com/1016505","tags":["report"]},{"url":"https://bugzilla.suse.com/1016520","tags":["report"]},{"url":"https://bugzilla.suse.com/1016668","tags":["report"]},{"url":"https://bugzilla.suse.com/1016688","tags":["report"]},{"url":"https://bugzilla.suse.com/1016824","tags":["report"]},{"url":"https://bugzilla.suse.com/1016831","tags":["report"]},{"url":"https://bugzilla.suse.com/1017686","tags":["report"]},{"url":"https://bugzilla.suse.com/1019079","tags":["report"]},{"url":"https://bugzilla.suse.com/1019148","tags":["report"]},{"url":"https://bugzilla.suse.com/1019165","tags":["report"]},{"url":"https://bugzilla.suse.com/1019348","tags":["report"]},{"url":"https://bugzilla.suse.com/1019783","tags":["report"]},{"url":"https://bugzilla.suse.com/1020214","tags":["report"]},{"url":"https://bugzilla.suse.com/748806","tags":["report"]},{"url":"https://bugzilla.suse.com/786036","tags":["report"]},{"url":"https://bugzilla.suse.com/790588","tags":["report"]},{"url":"https://bugzilla.suse.com/795297","tags":["report"]},{"url":"https://bugzilla.suse.com/800999","tags":["report"]},{"url":"https://bugzilla.suse.com/821612","tags":["report"]},{"url":"https://bugzilla.suse.com/824171","tags":["report"]},{"url":"https://bugzilla.suse.com/851603","tags":["report"]},{"url":"https://bugzilla.suse.com/853052","tags":["report"]},{"url":"https://bugzilla.suse.com/871728","tags":["report"]},{"url":"https://bugzilla.suse.com/901809","tags":["report"]},{"url":"https://bugzilla.suse.com/909350","tags":["report"]},{"url":"https://bugzilla.suse.com/909491","tags":["report"]},{"url":"https://bugzilla.suse.com/913387","tags":["report"]},{"url":"https://bugzilla.suse.com/919382","tags":["report"]},{"url":"https://bugzilla.suse.com/924708","tags":["report"]},{"url":"https://bugzilla.suse.com/925065","tags":["report"]},{"url":"https://bugzilla.suse.com/953233","tags":["report"]},{"url":"https://bugzilla.suse.com/961589","tags":["report"]},{"url":"https://bugzilla.suse.com/962846","tags":["report"]},{"url":"https://bugzilla.suse.com/973691","tags":["report"]},{"url":"https://bugzilla.suse.com/987333","tags":["report"]},{"url":"https://bugzilla.suse.com/987576","tags":["report"]},{"url":"https://bugzilla.suse.com/989152","tags":["report"]},{"url":"https://bugzilla.suse.com/989680","tags":["report"]},{"url":"https://bugzilla.suse.com/989896","tags":["report"]},{"url":"https://bugzilla.suse.com/990245","tags":["report"]},{"url":"https://bugzilla.suse.com/992991","tags":["report"]},{"url":"https://bugzilla.suse.com/993832","tags":["report"]},{"url":"https://bugzilla.suse.com/996541","tags":["report"]},{"url":"https://bugzilla.suse.com/996557","tags":["report"]},{"url":"https://bugzilla.suse.com/997401","tags":["report"]},{"url":"https://bugzilla.suse.com/999101","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5696","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170494-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001419","tags":["report"]},{"url":"https://bugzilla.suse.com/1002165","tags":["report"]},{"url":"https://bugzilla.suse.com/1003253","tags":["report"]},{"url":"https://bugzilla.suse.com/1008374","tags":["report"]},{"url":"https://bugzilla.suse.com/1008850","tags":["report"]},{"url":"https://bugzilla.suse.com/1012895","tags":["report"]},{"url":"https://bugzilla.suse.com/1018446","tags":["report"]},{"url":"https://bugzilla.suse.com/929141","tags":["report"]},{"url":"https://bugzilla.suse.com/935436","tags":["report"]},{"url":"https://bugzilla.suse.com/961923","tags":["report"]},{"url":"https://bugzilla.suse.com/966826","tags":["report"]},{"url":"https://bugzilla.suse.com/992569","tags":["report"]},{"url":"https://bugzilla.suse.com/992906","tags":["report"]},{"url":"https://bugzilla.suse.com/996329","tags":["report"]},{"url":"https://bugzilla.suse.com/997708","tags":["report"]},{"url":"https://bugzilla.suse.com/999943","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8970","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171102-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1003344","tags":["report"]},{"url":"https://bugzilla.suse.com/1003568","tags":["report"]},{"url":"https://bugzilla.suse.com/1003677","tags":["report"]},{"url":"https://bugzilla.suse.com/1004520","tags":["report"]},{"url":"https://bugzilla.suse.com/1005857","tags":["report"]},{"url":"https://bugzilla.suse.com/1005896","tags":["report"]},{"url":"https://bugzilla.suse.com/1005903","tags":["report"]},{"url":"https://bugzilla.suse.com/1006917","tags":["report"]},{"url":"https://bugzilla.suse.com/1006919","tags":["report"]},{"url":"https://bugzilla.suse.com/1013533","tags":["report"]},{"url":"https://bugzilla.suse.com/1013604","tags":["report"]},{"url":"https://bugzilla.suse.com/763198","tags":["report"]},{"url":"https://bugzilla.suse.com/771065","tags":["report"]},{"url":"https://bugzilla.suse.com/803320","tags":["report"]},{"url":"https://bugzilla.suse.com/860441","tags":["report"]},{"url":"https://bugzilla.suse.com/865783","tags":["report"]},{"url":"https://bugzilla.suse.com/907611","tags":["report"]},{"url":"https://bugzilla.suse.com/908458","tags":["report"]},{"url":"https://bugzilla.suse.com/908684","tags":["report"]},{"url":"https://bugzilla.suse.com/909077","tags":["report"]},{"url":"https://bugzilla.suse.com/909484","tags":["report"]},{"url":"https://bugzilla.suse.com/909618","tags":["report"]},{"url":"https://bugzilla.suse.com/928138","tags":["report"]},{"url":"https://bugzilla.suse.com/968010","tags":["report"]},{"url":"https://bugzilla.suse.com/973203","tags":["report"]},{"url":"https://bugzilla.suse.com/984194","tags":["report"]},{"url":"https://bugzilla.suse.com/986337","tags":["report"]},{"url":"https://bugzilla.suse.com/989764","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9794","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171247-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1015703","tags":["report"]},{"url":"https://bugzilla.suse.com/1021256","tags":["report"]},{"url":"https://bugzilla.suse.com/1021762","tags":["report"]},{"url":"https://bugzilla.suse.com/1023377","tags":["report"]},{"url":"https://bugzilla.suse.com/1023762","tags":["report"]},{"url":"https://bugzilla.suse.com/1023992","tags":["report"]},{"url":"https://bugzilla.suse.com/1024938","tags":["report"]},{"url":"https://bugzilla.suse.com/1025235","tags":["report"]},{"url":"https://bugzilla.suse.com/1026024","tags":["report"]},{"url":"https://bugzilla.suse.com/1026722","tags":["report"]},{"url":"https://bugzilla.suse.com/1026914","tags":["report"]},{"url":"https://bugzilla.suse.com/1027066","tags":["report"]},{"url":"https://bugzilla.suse.com/1027149","tags":["report"]},{"url":"https://bugzilla.suse.com/1027178","tags":["report"]},{"url":"https://bugzilla.suse.com/1027189","tags":["report"]},{"url":"https://bugzilla.suse.com/1027190","tags":["report"]},{"url":"https://bugzilla.suse.com/1028415","tags":["report"]},{"url":"https://bugzilla.suse.com/1028895","tags":["report"]},{"url":"https://bugzilla.suse.com/1029986","tags":["report"]},{"url":"https://bugzilla.suse.com/1030118","tags":["report"]},{"url":"https://bugzilla.suse.com/1030213","tags":["report"]},{"url":"https://bugzilla.suse.com/1030901","tags":["report"]},{"url":"https://bugzilla.suse.com/1031003","tags":["report"]},{"url":"https://bugzilla.suse.com/1031052","tags":["report"]},{"url":"https://bugzilla.suse.com/1031440","tags":["report"]},{"url":"https://bugzilla.suse.com/1031579","tags":["report"]},{"url":"https://bugzilla.suse.com/1032344","tags":["report"]},{"url":"https://bugzilla.suse.com/1033336","tags":["report"]},{"url":"https://bugzilla.suse.com/954763","tags":["report"]},{"url":"https://bugzilla.suse.com/968697","tags":["report"]},{"url":"https://bugzilla.suse.com/979215","tags":["report"]},{"url":"https://bugzilla.suse.com/983212","tags":["report"]},{"url":"https://bugzilla.suse.com/989056","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7616","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1008842","tags":["report"]},{"url":"https://bugzilla.suse.com/1009682","tags":["report"]},{"url":"https://bugzilla.suse.com/1012620","tags":["report"]},{"url":"https://bugzilla.suse.com/1012985","tags":["report"]},{"url":"https://bugzilla.suse.com/1015787","tags":["report"]},{"url":"https://bugzilla.suse.com/1015821","tags":["report"]},{"url":"https://bugzilla.suse.com/1017512","tags":["report"]},{"url":"https://bugzilla.suse.com/1018100","tags":["report"]},{"url":"https://bugzilla.suse.com/1018263","tags":["report"]},{"url":"https://bugzilla.suse.com/1018419","tags":["report"]},{"url":"https://bugzilla.suse.com/1019168","tags":["report"]},{"url":"https://bugzilla.suse.com/1019514","tags":["report"]},{"url":"https://bugzilla.suse.com/1020048","tags":["report"]},{"url":"https://bugzilla.suse.com/1020795","tags":["report"]},{"url":"https://bugzilla.suse.com/1021374","tags":["report"]},{"url":"https://bugzilla.suse.com/1021913","tags":["report"]},{"url":"https://bugzilla.suse.com/1022559","tags":["report"]},{"url":"https://bugzilla.suse.com/1022971","tags":["report"]},{"url":"https://bugzilla.suse.com/1023164","tags":["report"]},{"url":"https://bugzilla.suse.com/1023207","tags":["report"]},{"url":"https://bugzilla.suse.com/1023824","tags":["report"]},{"url":"https://bugzilla.suse.com/1023888","tags":["report"]},{"url":"https://bugzilla.suse.com/1024081","tags":["report"]},{"url":"https://bugzilla.suse.com/1024234","tags":["report"]},{"url":"https://bugzilla.suse.com/1024309","tags":["report"]},{"url":"https://bugzilla.suse.com/1024508","tags":["report"]},{"url":"https://bugzilla.suse.com/1024788","tags":["report"]},{"url":"https://bugzilla.suse.com/1025039","tags":["report"]},{"url":"https://bugzilla.suse.com/1025354","tags":["report"]},{"url":"https://bugzilla.suse.com/1025802","tags":["report"]},{"url":"https://bugzilla.suse.com/1027974","tags":["report"]},{"url":"https://bugzilla.suse.com/1028041","tags":["report"]},{"url":"https://bugzilla.suse.com/1028595","tags":["report"]},{"url":"https://bugzilla.suse.com/1028648","tags":["report"]},{"url":"https://bugzilla.suse.com/1029470","tags":["report"]},{"url":"https://bugzilla.suse.com/1029850","tags":["report"]},{"url":"https://bugzilla.suse.com/1030593","tags":["report"]},{"url":"https://bugzilla.suse.com/1031080","tags":["report"]},{"url":"https://bugzilla.suse.com/1031567","tags":["report"]},{"url":"https://bugzilla.suse.com/1031662","tags":["report"]},{"url":"https://bugzilla.suse.com/1031842","tags":["report"]},{"url":"https://bugzilla.suse.com/1032125","tags":["report"]},{"url":"https://bugzilla.suse.com/1032141","tags":["report"]},{"url":"https://bugzilla.suse.com/1032345","tags":["report"]},{"url":"https://bugzilla.suse.com/1034670","tags":["report"]},{"url":"https://bugzilla.suse.com/103470","tags":["report"]},{"url":"https://bugzilla.suse.com/1034700","tags":["report"]},{"url":"https://bugzilla.suse.com/1035576","tags":["report"]},{"url":"https://bugzilla.suse.com/1035699","tags":["report"]},{"url":"https://bugzilla.suse.com/1035738","tags":["report"]},{"url":"https://bugzilla.suse.com/1035877","tags":["report"]},{"url":"https://bugzilla.suse.com/1036752","tags":["report"]},{"url":"https://bugzilla.suse.com/1038261","tags":["report"]},{"url":"https://bugzilla.suse.com/857926","tags":["report"]},{"url":"https://bugzilla.suse.com/917630","tags":["report"]},{"url":"https://bugzilla.suse.com/922853","tags":["report"]},{"url":"https://bugzilla.suse.com/930399","tags":["report"]},{"url":"https://bugzilla.suse.com/931620","tags":["report"]},{"url":"https://bugzilla.suse.com/937444","tags":["report"]},{"url":"https://bugzilla.suse.com/940946","tags":["report"]},{"url":"https://bugzilla.suse.com/970083","tags":["report"]},{"url":"https://bugzilla.suse.com/971933","tags":["report"]},{"url":"https://bugzilla.suse.com/982783","tags":["report"]},{"url":"https://bugzilla.suse.com/984530","tags":["report"]},{"url":"https://bugzilla.suse.com/985561","tags":["report"]},{"url":"https://bugzilla.suse.com/988065","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8106","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1350","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3361-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4904-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1350","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-8405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-8636","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-10208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5669","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6348","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-8924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-8925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-13095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-26931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-28038","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-1350","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","status":"published","published":"2016-05-02T10:00:00Z","modified":"2024-08-06T04:40:18.594Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2015-1489","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","status":"published","published":"2016-05-02T10:00:00Z","modified":"2024-08-06T04:40:18Z","updated_at":"2026-11-03T02:22:15.605684Z"}],"ghsa":[{"id":"GHSA-m2mx-4jc6-3wh7","title":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr...","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","status":"published","published":"2022-05-13T01:08:47Z","modified":"2023-02-01T05:03:12Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:50:02.204531Z"}],"nvd":[{"id":"CVE-2015-1350","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","status":"published","published":"2016-05-02T10:59:07.857Z","modified":"2026-06-17T00:22:14.78Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"CVE-2015-1350","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","status":"published","published":"2016-05-02T10:59:07Z","modified":"2026-04-10T03:45:06.142223Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-1350","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","status":"published","published":"2016-05-02T10:59:07.857Z","modified":"2026-09-09T07:00:03.68406014Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-1350","description":"The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.","status":"published","published":"2016-05-02T00:00:00Z","modified":"2026-11-06T13:48:38.933848206Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T14:21:48.43084Z"},{"id":"DLA-772-1","title":"linux - security update","status":"published","published":"2017-01-01T00:00:00Z","modified":"2026-03-09T02:08:41.719174Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"SUSE-SU-2017:0181-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.38 to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allowed local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program (bnc#914939).\n- CVE-2015-8964: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory by reading a tty data structure (bnc#1010507).\n- CVE-2016-7039: The IP stack in the Linux kernel allowed remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers, a related issue to CVE-2016-8666 (bnc#1001486).\n- CVE-2016-7042: The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allowed local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file (bnc#1004517).\n- CVE-2016-7425: The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel did not restrict a certain length field, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code (bnc#999932).\n- CVE-2016-7913: The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure (bnc#1010478).\n- CVE-2016-7917: The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel did not check whether a batch message's length field is large enough, which allowed local users to obtain sensitive information from kernel memory or cause a denial of service (infinite loop or out-of-bounds read) by leveraging the CAP_NET_ADMIN capability (bnc#1010444).\n- CVE-2016-8645: The TCP stack in the Linux kernel mishandled skb truncation, which allowed local users to cause a denial of service (system crash) via a crafted application that made sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c (bnc#1009969).\n- CVE-2016-8666: The IP stack in the Linux kernel allowed remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039 (bnc#1003964).\n- CVE-2016-9083: drivers/vfio/pci/vfio_pci.c in the Linux kernel allowed local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a 'state machine confusion bug (bnc#1007197).\n- CVE-2016-9084: drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel misuses the kzalloc function, which allowed local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging access to a vfio PCI device file (bnc#1007197).\n- CVE-2016-9793: A bug in SO_{SND|RCV}BUFFORCE setsockopt() implementation was fixed, which allowed CAP_NET_ADMIN users to cause memory corruption. (bsc#1013531).\n- CVE-2016-9919: The icmp6_send function in net/ipv6/icmp.c in the Linux kernel omits a certain check of the dst data structure, which allowed remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet (bnc#1014701).\n\nThe following non-security bugs were fixed:\n\n- 8250_pci: Fix potential use-after-free in error path (bsc#1013001).\n- acpi / PAD: do not register acpi_pad driver if running as Xen dom0 (bnc#995278).\n- Add mainline tags to various hyperv patches\n- alsa: fm801: detect FM-only card earlier (bsc#1005917).\n- alsa: fm801: explicitly free IRQ line (bsc#1005917).\n- alsa: fm801: propagate TUNER_ONLY bit when autodetected (bsc#1005917).\n- alsa: hda - Bind with i915 only when Intel graphics is present (bsc#1012767).\n- alsa: hda - Clear the leftover component assignment at snd_hdac_i915_exit() (bsc#1012767).\n- alsa: hda - Degrade i915 binding failure message (bsc#1012767).\n- alsa: hda - Fix yet another i915 pointer leftover in error path (bsc#1012767).\n- alsa: hda - Gate the mic jack on HP Z1 Gen3 AiO (bsc#1004365).\n- alsa: hda - Turn off loopback mixing as default (bsc#1001462).\n- apparmor: add missing id bounds check on dfa verification (bsc#1000304).\n- apparmor: check that xindex is in trans_table bounds (bsc#1000304).\n- apparmor: do not check for vmalloc_addr if kvzalloc() failed (bsc#1000304).\n- apparmor: do not expose kernel stack (bsc#1000304).\n- apparmor: ensure the target profile name is always audited (bsc#1000304).\n- apparmor: exec should not be returning ENOENT when it denies (bsc#1000304).\n- apparmor: fix audit full profile hname on successful load (bsc#1000304).\n- apparmor: fix change_hat not finding hat after policy replacement (bsc#1000287).\n- apparmor: fix disconnected bind mnts reconnection (bsc#1000304).\n- apparmor: fix log failures for all profiles in a set (bsc#1000304).\n- apparmor: fix module parameters can be changed after policy is locked (bsc#1000304).\n- apparmor: fix oops in profile_unpack() when policy_db is not present (bsc#1000304).\n- apparmor: fix put() parent ref after updating the active ref (bsc#1000304).\n- apparmor: fix refcount bug in profile replacement (bsc#1000304).\n- apparmor: fix refcount race when finding a child profile (bsc#1000304).\n- apparmor: fix replacement bug that adds new child to old parent (bsc#1000304).\n- apparmor: fix uninitialized lsm_audit member (bsc#1000304).\n- apparmor: fix update the mtime of the profile file on replacement (bsc#1000304).\n- apparmor: internal paths should be treated as disconnected (bsc#1000304).\n- apparmor: use list_next_entry instead of list_entry_next (bsc#1000304).\n- arm64: Call numa_store_cpu_info() earlier.\n- arm64/efi: Enable runtime call flag checking (bsc#1005745).\n- arm64/efi: Move to generic {__,}efi_call_virt() (bsc#1005745).\n- arm64: Refuse to install 4k kernel on 64k system\n- arm64: Update config files. Disable CONFIG_IPMI_SI_PROBE_DEFAULTS (bsc#1006576)\n- arm: bcm2835: add CPU node for ARM core (boo#1012094).\n- arm: bcm2835: Split the DT for peripherals from the DT for the CPU (boo#1012094).\n- asoc: cht_bsw_rt5645: Enable jack detection (bsc#1010690).\n- asoc: cht_bsw_rt5645: Fix writing to string literal (bsc#1010690).\n- asoc: cht_bsw_rt5672: Use HID translation unit (bsc#1010690).\n- asoc: fsl_ssi: mark SACNT register volatile (bsc#1005917).\n- asoc: imx-spdif: Fix crash on suspend (bsc#1005917).\n- asoc: intel: add function stub when ACPI is not enabled (bsc#1010690).\n- asoc: Intel: add fw name to common dsp context (bsc#1010690).\n- asoc: Intel: Add missing 10EC5672 ACPI ID matching for Cherry Trail (bsc#1010690).\n- asoc: Intel: Add module tags for common match module (bsc#1010690).\n- asoc: Intel: add NULL test (bsc#1010690).\n- AsoC: Intel: Add quirks for MinnowBoard MAX (bsc#1010690).\n- asoc: Intel: Add surface3 entry in CHT-RT5645 machine (bsc#1010690).\n- asoc: Intel: Atom: add 24-bit support for media playback and capture (bsc#1010690).\n- ASoc: Intel: Atom: add deep buffer definitions for atom platforms (bsc#1010690).\n- asoc: Intel: Atom: add definitions for modem/SSP0 interface (bsc#1010690).\n- asoc: Intel: Atom: Add quirk for Surface 3 (bsc#1010690).\n- asoc: Intel: Atom: add support for CHT w/ RT5640 (bsc#1010690).\n- asoc: Intel: Atom: Add support for HP ElitePad 1000 G2 (bsc#1010690).\n- asoc: Intel: Atom: add support for RT5642 (bsc#1010690).\n- asoc: Intel: Atom: add terminate entry for dmi_system_id tables (bsc#1010690).\n- asoc: Intel: Atom: auto-detection of Baytrail-CR (bsc#1010690).\n- asoc: Intel: Atom: clean-up compressed DAI definition (bsc#1010690).\n- asoc: Intel: atom: enable configuration of SSP0 (bsc#1010690).\n- asoc: Intel: atom: fix 0-day warnings (bsc#1010690).\n- asoc: Intel: Atom: fix boot warning (bsc#1010690).\n- asoc: Intel: Atom: Fix message handling during drop stream (bsc#1010690).\n- asoc: Intel: atom: fix missing breaks that would cause the wrong operation to execute (bsc#1010690).\n- asoc: Intel: Atom: fix regression on compress DAI (bsc#1010690).\n- asoc: Intel: Atom: flip logic for gain Switch (bsc#1010690).\n- asoc: Intel: atom: Make some messages to debug level (bsc#1010690).\n- asoc: Intel: Atom: move atom driver to common acpi match (bsc#1010690).\n- asoc: Intel: atom: statify cht_quirk (bsc#1010690).\n- asoc: Intel: boards: add DEEP_BUFFER support for BYT/CHT/BSW (bsc#1010690).\n- asoc: Intel: boards: align pin names between byt-rt5640 drivers (bsc#1010690).\n- asoc: Intel: boards: merge DMI-based quirks in bytcr-rt5640 driver (bsc#1010690).\n- asoc: Intel: boards: start merging byt-rt5640 drivers (bsc#1010690).\n- asoc: Intel: bytcr_rt56040: additional routing quirks (bsc#1010690).\n- asoc: Intel: bytcr-rt5640: add Asus T100TAF quirks (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: add IN3 map (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: add MCLK support (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: Add quirk for Teclast X98 Air 3G tablet (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: add SSP2_AIF2 routing (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: change quirk position (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: default routing and quirks on Baytrail-CR (bsc#1010690).\n- asoc: Intel: bytcr-rt5640: enable ASRC (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: enable differential mic quirk (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: fallback mechanism if MCLK is not enabled (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: fix dai/clock setup for SSP0 routing (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: fixup DAI codec_name with HID (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: log quirks (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: quirk for Acer Aspire SWS-012 (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: quirk for mono speaker (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: set SSP to I2S mode 2ch (bsc#1010690).\n- asoc: Intel: bytcr_rt5640: use HID translation util (bsc#1010690).\n- asoc: Intel: cht: fix uninit variable warning (bsc#1010690).\n- asoc: Intel: common: add translation from HID to codec-name (bsc#1010690).\n- asoc: Intel: common: filter ACPI devices with _STA return value (bsc#1010690).\n- asoc: Intel: common: increase the loglevel of 'FW Poll Status' (bsc#1010690).\n- asoc: Intel: Create independent acpi match module (bsc#1010690).\n- asoc: intel: Fix sst-dsp dependency on dw stuff (bsc#1010690).\n- asoc: Intel: Keep building old baytrail machine drivers (bsc#1010690).\n- asoc: Intel: Load the atom DPCM driver only (bsc#1010690).\n- asoc: intel: make function stub static (bsc#1010690).\n- asoc: Intel: Move apci find machine routines (bsc#1010690).\n- asoc: Intel: pass correct parameter in sst_alloc_stream_mrfld() (bsc#1005917).\n- asoc: intel: Replace kthread with work (bsc#1010690).\n- asoc: Intel: Skylake: Always acquire runtime pm ref on unload (bsc#1005917).\n- asoc: Intel: sst: fix sst_memcpy32 wrong with non-4x bytes issue (bsc#1010690).\n- asoc: rt5640: add ASRC support (bsc#1010690).\n- asoc: rt5640: add internal clock source support (bsc#1010690).\n- asoc: rt5640: add master clock handling for rt5640 (bsc#1010690).\n- asoc: rt5640: add supplys for dac power (bsc#1010690).\n- asoc: rt5640: remove unused variable (bsc#1010690).\n- asoc: rt5640: Set PLL src according to source (bsc#1010690).\n- asoc: rt5645: add DAC1 soft volume func control (bsc#1010690).\n- asoc: rt5645: Add dmi_system_id 'Google Setzer' (bsc#1010690).\n- asoc: rt5645: extend delay time for headphone pop noise (bsc#1010690).\n- asoc: rt5645: fix reg-2f default value (bsc#1010690).\n- asoc: rt5645: improve headphone pop when system resumes from S3 (bsc#1010690).\n- asoc: rt5645: improve IRQ reaction time for HS button (bsc#1010690).\n- asoc: rt5645: merge DMI tables of google projects (bsc#1010690).\n- asoc: rt5645: patch reg-0x8a (bsc#1010690).\n- asoc: rt5645: polling jd status in all conditions (bsc#1010690).\n- asoc: rt5645: Separate regmap for rt5645 and rt5650 (bsc#1010690).\n- asoc: rt5645: set RT5645_PRIV_INDEX as volatile (bsc#1010690).\n- asoc: rt5645: use polling to support HS button (bsc#1010690).\n- asoc: rt5645: Use the mod_delayed_work instead of the queue_delayed_work and cancel_delayed_work_sync (bsc#1010690).\n- asoc: rt5670: Add missing 10EC5072 ACPI ID (bsc#1010690).\n- asoc: rt5670: Enable Braswell platform workaround for Dell Wyse 3040 (bsc#1010690).\n- asoc: rt5670: fix HP Playback Volume control (bsc#1010690).\n- asoc: rt5670: patch reg-0x8a (bsc#1010690).\n- asoc: simple-card: do not fail if sysclk setting is not supported (bsc#1005917).\n- asoc: tegra_alc5632: check return value (bsc#1005917).\n- asoc: wm8960: Fix WM8960_SYSCLK_PLL mode (bsc#1005917).\n- autofs: fix multiple races (bsc#997639).\n- autofs: use dentry flags to block walks during expire (bsc#997639).\n- blacklist.conf: Add dup / unapplicable commits (bsc#1005545).\n- blacklist.conf: Add i915 stable commits that can be ignored (bsc#1015367)\n- blacklist.conf: add inapplicable / duped commits (bsc#1005917)\n- blacklist.conf: ignore commit bfe6c8a89e03 ('arm64: Fix NUMA build error when !CONFIG_ACPI')\n- blacklist.conf: Remove intel_pstate potential patch that SLE 12 SP2 The code layout upstream that motivated this patch is completely different to what is in SLE 12 SP2 as schedutil was not backported.\n- block_dev: do not test bdev-\u003ebd_contains when it is not stable (bsc#1008557).\n- bna: Add synchronization for tx ring (bsc#993739).\n- btrfs: allocate root item at snapshot ioctl time (bsc#1012452).\n- btrfs: better packing of btrfs_delayed_extent_op (bsc#1012452).\n- btrfs: Check metadata redundancy on balance (bsc#1012452).\n- btrfs: clean up an error code in btrfs_init_space_info() (bsc#1012452).\n- btrfs: cleanup, stop casting for extent_map-\u003elookup everywhere (bsc#1012452).\n- btrfs: cleanup, use enum values for btrfs_path reada (bsc#1012452).\n- btrfs: deal with duplicates during extent_map insertion in btrfs_get_extent (bsc#1001171).\n- btrfs: deal with existing encompassing extent map in btrfs_get_extent() (bsc#1001171).\n- btrfs: do an allocation earlier during snapshot creation (bsc#1012452).\n- btrfs: do not create or leak aliased root while cleaning up orphans (bsc#994881).\n- btrfs: do not leave dangling dentry if symlink creation failed (bsc#1012452).\n- btrfs: do not use slab cache for struct btrfs_delalloc_work (bsc#1012452).\n- btrfs: drop duplicate prefix from scrub workqueues (bsc#1012452).\n- btrfs: drop unused parameter from lock_extent_bits (bsc#1012452).\n- btrfs: Enhance chunk validation check (bsc#1012452).\n- btrfs: Enhance super validation check (bsc#1012452).\n- btrfs: Ensure proper sector alignment for btrfs_free_reserved_data_space (bsc#1005666).\n- btrfs: Expoert and move leaf/subtree qgroup helpers to qgroup.c (bsc983087, bsc986255).\n- btrfs: fix endless loop in balancing block groups (bsc#1006804).\n- btrfs: fix incremental send failure caused by balance (bsc#985850).\n- btrfs: fix locking bugs when defragging leaves (bsc#1012452).\n- btrfs: fix memory leaks after transaction is aborted (bsc#1012452).\n- btrfs: fix output of compression message in btrfs_parse_options() (bsc#1012452).\n- btrfs: fix race between free space endio workers and space cache writeout (bsc#1012452).\n- btrfs: fix races on root_log_ctx lists (bsc#1007653).\n- btrfs: fix race when finishing dev replace leading to transaction abort (bsc#1012452).\n- btrfs: fix relocation incorrectly dropping data references (bsc#990384).\n- btrfs: fix typo in log message when starting a balance (bsc#1012452).\n- btrfs: fix unprotected list operations at btrfs_write_dirty_block_groups (bsc#1012452).\n- btrfs: handle quota reserve failure properly (bsc#1005666).\n- btrfs: make btrfs_close_one_device static (bsc#1012452).\n- btrfs: make clear_extent_bit helpers static inline (bsc#1012452).\n- btrfs: make clear_extent_buffer_uptodate return void (bsc#1012452).\n- btrfs: make end_extent_writepage return void (bsc#1012452).\n- btrfs: make extent_clear_unlock_delalloc return void (bsc#1012452).\n- btrfs: make extent_range_clear_dirty_for_io return void (bsc#1012452).\n- btrfs: make extent_range_redirty_for_io return void (bsc#1012452).\n- btrfs: make lock_extent static inline (bsc#1012452).\n- btrfs: make set_extent_bit helpers static inline (bsc#1012452).\n- btrfs: make set_extent_buffer_uptodate return void (bsc#1012452).\n- btrfs: make set_range_writeback return void (bsc#1012452).\n- btrfs: preallocate path for snapshot creation at ioctl time (bsc#1012452).\n- btrfs: put delayed item hook into inode (bsc#1012452).\n- btrfs: qgroup: Add comments explaining how btrfs qgroup works (bsc983087, bsc986255).\n- btrfs: qgroup: Fix qgroup data leaking by using subtree tracing (bsc983087, bsc986255).\n- btrfs: qgroup: Rename functions to make it follow reserve, trace, account steps (bsc983087, bsc986255).\n- btrfs: remove a trivial helper btrfs_set_buffer_uptodate (bsc#1012452).\n- btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns (bsc#1007653).\n- btrfs: remove unused inode argument from uncompress_inline() (bsc#1012452).\n- btrfs: remove wait from struct btrfs_delalloc_work (bsc#1012452).\n- btrfs: send, do not bug on inconsistent snapshots (bsc#985850).\n- btrfs: sink parameter wait to btrfs_alloc_delalloc_work (bsc#1012452).\n- btrfs: Support convert to -d dup for btrfs-convert (bsc#1012452).\n- btrfs: use GFP_KERNEL for allocations in ioctl handlers (bsc#1012452).\n- btrfs: use GFP_KERNEL for allocations of workqueues (bsc#1012452).\n- btrfs: use GFP_KERNEL for xattr and acl allocations (bsc#1012452).\n- btrfs: use smaller type for btrfs_path locks (bsc#1012452).\n- btrfs: use smaller type for btrfs_path lowest_level (bsc#1012452).\n- btrfs: use smaller type for btrfs_path reada (bsc#1012452).\n- btrfs: verbose error when we find an unexpected item in sys_array (bsc#1012452).\n- cdc-acm: added sanity checking for probe() (bsc#993891).\n- cxgbi: fix uninitialized flowi6 (bsc#963904 FATE#320115).\n- Delete patches.fixes/apparmor-initialize-common_audit_data.patch (bsc#1000304) It'll be fixed in the upcoming apparmor fix series from upstream.\n- dell-laptop: Fixate rfkill work on CPU#0 (bsc#1004052).\n- dell-wmi: Check if Dell WMI descriptor structure is valid (bsc#1004052).\n- dell-wmi: Clean up hotkey table size check (bsc#1004052).\n- dell-wmi: Ignore WMI event code 0xe045 (bsc#1004052).\n- dell-wmi: Improve unknown hotkey handling (bsc#1004052).\n- dell-wmi: Process only one event on devices with interface version 0 (bsc#1004052).\n- dell-wmi: Stop storing pointers to DMI tables (bsc#1004052).\n- dell-wmi: Support new hotkeys on the XPS 13 9350 (Skylake) (bsc#1004052).\n- dell_wmi: Use a C99-style array for bios_to_linux_keycode (bsc#1004052).\n- Drivers: hv: utils: fix a race on userspace daemons registration (bnc#1014392).\n- drm/amdgpu: Do not leak runtime pm ref on driver load (bsc#1005545).\n- drm/amdgpu: Do not leak runtime pm ref on driver unload (bsc#1005545).\n- drm/i915: Acquire audio powerwell for HD-Audio registers (bsc#1005545).\n- drm/i915: add helpers for platform specific revision id range checks (bsc#1015367).\n- drm/i915: Add missing ring_mask to Pineview (bsc#1005917).\n- drm/i915: Apply broader WaRsDisableCoarsePowerGating for guc also (bsc#1015367).\n- drm/i915/bxt: add revision id for A1 stepping and use it (bsc#1015367).\n- drm/i915: Calculate watermark related members in the crtc_state, v4 (bsc#1011176).\n- drm/i915: Call intel_dp_mst_resume() before resuming displays (bsc#1015359).\n- drm/i915: call kunmap_px on pt_vaddr (bsc#1005545).\n- drm/i915: Cleaning up DDI translation tables (bsc#1014392).\n- drm/i915: Clean up L3 SQC register field definitions (bsc#1014392).\n- drm/i915/dsi: fix CHV dsi encoder hardware state readout on port C (bsc#1015367).\n- drm/i915: Enable polling when we do not have hpd (bsc#1014120).\n- drm/i915: Exit cherryview_irq_handler() after one pass (bsc#1015367).\n- drm/i915: Fix iboost setting for SKL Y/U DP DDI buffer translation entry 2 (bsc#1014392).\n- drm/i915: Fix system resume if PCI device remained enabled (bsc#1015367).\n- drm/i915: fix the SDE irq dmesg warnings properly (bsc#1005545).\n- drm/i915: Fix VBT backlight Hz to PWM conversion for PNV (bsc#1005545).\n- drm/i915: Fix vbt PWM max setup for CTG (bsc#1005545).\n- drm/i915: Force ringbuffers to not be at offset 0 (bsc#1015367).\n- drm/i915/gen9: Add WaInPlaceDecompressionHang (bsc#1014392).\n- drm/i915/ivb: Move WaCxSRDisabledForSpriteScaling w/a to atomic check (bsc#1011176).\n- drm/i915: Kill intel_runtime_pm_disable() (bsc#1005545).\n- drm/i915: Make plane fb tracking work correctly, v2 (bsc#1004048).\n- drm/i915: Make prepare_plane_fb fully interruptible (bsc#1004048).\n- drm/i915: Move disable_cxsr to the crtc_state (bsc#1011176).\n- drm/i915: On fb alloc failure, unref gem object where it gets refed (bsc#1005545).\n- drm/i915: Only call commit_planes when there are things to commit (bsc#1004048).\n- drm/i915: Only commit active planes when updating planes during reset (bsc#1004048).\n- drm/i915: Only run commit when crtc is active, v2 (bsc#1004048).\n- drm/i915: remove parens around revision ids (bsc#1015367).\n- drm/i915: Set crtc_state-\u003elane_count for HDMI (bsc#1005545).\n- drm/i915/skl: Add WaDisableGafsUnitClkGating (bsc#1014392).\n- drm/i915/skl: Fix rc6 based gpu/system hang (bsc#1015367).\n- drm/i915/skl: Fix spurious gpu hang with gt3/gt4 revs (bsc#1015367).\n- drm/i915/skl: Update DDI translation tables for SKL (bsc#1014392).\n- drm/i915/skl: Update watermarks before the crtc is disabled (bsc#1015367).\n- drm/i915: suppress spurious !wm_changed warning (bsc#1006267).\n- drm/i915: Unconditionally flush any chipset buffers before execbuf (bsc#1005545).\n- drm/i915: Update legacy primary state outside the commit hook, v2 (bsc#1004048).\n- drm/i915: Update Skylake DDI translation table for DP (bsc#1014392).\n- drm/i915: Update Skylake DDI translation table for HDMI (bsc#1014392).\n- drm/i915/userptr: Hold mmref whilst calling get-user-pages (bsc#1015367).\n- drm/i915/vlv: Disable HPD in valleyview_crt_detect_hotplug() (bsc#1014120).\n- drm/i915/vlv: Make intel_crt_reset() per-encoder (bsc#1014120).\n- drm/i915/vlv: Reset the ADPA in vlv_display_power_well_init() (bsc#1014120).\n- drm/i915: Wait for power cycle delay after turning off DSI panel power (bsc#1005545).\n- drm/i915: Wait up to 3ms for the pcu to ack the cdclk change request on SKL (bsc#1005545).\n- drm/layerscape: reduce excessive stack usage (bsc#1005545).\n- drm/mgag200: fix error return code in mgag200fb_create() (bsc#1005917).\n- drm/nouveau: Do not leak runtime pm ref on driver unload (bsc#1005545).\n- drm/radeon: Also call cursor_move_locked when the cursor size changes (bsc#1000433).\n- drm/radeon: Always store CRTC relative radeon_crtc-\u003ecursor_x/y values (bsc#1000433).\n- drm/radeon/ci add comment to document intentionally unreachable code (bsc#1005545).\n- drm/radeon: Do not leak runtime pm ref on driver load (bsc#1005545).\n- drm/radeon: Do not leak runtime pm ref on driver unload (bsc#1005545).\n- drm/radeon: Ensure vblank interrupt is enabled on DPMS transition to on (bsc#998054)\n- drm/radeon: Hide the HW cursor while it's out of bounds (bsc#1000433).\n- drm/radeon: Switch to drm_vblank_on/off (bsc#998054).\n- drm/rockchip: fix a couple off by one bugs (bsc#1005545).\n- drm/tegra: checking for IS_ERR() instead of NULL (bsc#1005545).\n- edac/mce_amd: Add missing SMCA error descriptions (fate#320474, bsc#1013700).\n- edac/mce_amd: Use SMCA prefix for error descriptions arrays (fate#320474, bsc#1013700).\n- efi/arm64: Do not apply MEMBLOCK_NOMAP to UEFI memory map mapping (bsc#986987).\n- efi: ARM: avoid warning about phys_addr_t cast.\n- efi/runtime-wrappers: Add {__,}efi_call_virt() templates (bsc#1005745).\n- efi/runtime-wrappers: Detect firmware IRQ flag corruption (bsc#1005745).\n- efi/runtime-wrappers: Remove redundant #ifdefs (bsc#1005745).\n- ext4: fix data exposure after a crash (bsc#1012829).\n- Fix kabi change cause by adding flock_owner to open_context (bsc#998689).\n- Fixup UNMAP calculation (bsc#1005327)\n- fs, block: force direct-I/O for dax-enabled block devices (bsc#1012992).\n- fs/cifs: cifs_get_root shouldn't use path with tree name (bsc#963655, bsc#979681).\n- fs/cifs: Compare prepaths when comparing superblocks (bsc#799133).\n- fs/cifs: Fix memory leaks in cifs_do_mount() (bsc#799133).\n- fs/cifs: Move check for prefix path to within cifs_get_root() (bsc#799133).\n- fs/select: add vmalloc fallback for select(2) (bsc#1000189).\n- genirq: Add untracked irq handler (bsc#1006827).\n- genirq: Use a common macro to go through the actions list (bsc#1006827).\n- gpio: generic: make bgpio_pdata always visible.\n- gpio: Restore indentation of parent device setup.\n- gre: Disable segmentation offloads w/ CSUM and we are encapsulated via FOU (bsc#1001486).\n- gro: Allow tunnel stacking in the case of FOU/GUE (bsc#1001486).\n- gro_cells: mark napi struct as not busy poll candidates (bsc#966191 FATE#320230 bsc#966186 FATE#320228).\n- group-source-files.pl: mark arch/*/scripts as devel make[2]: /usr/src/linux-4.6.4-2/arch/powerpc/scripts/gcc-check-mprofile-kernel.sh: Command not found\n- hpsa: fallback to use legacy REPORT PHYS command (bsc#1006175).\n- hpsa: use bus '3' for legacy HBA devices (bsc#1010665).\n- hpsa: use correct DID_NO_CONNECT hostbyte (bsc#1010665).\n- hv: do not lose pending heartbeat vmbus packets (bnc#1006918).\n- i2c: designware-baytrail: Add support for cherrytrail (bsc#1011913).\n- i2c: designware-baytrail: Pass dw_i2c_dev into helper functions (bsc#1011913).\n- i2c: designware-baytrail: Work around Cherry Trail semaphore errors (bsc#1011913).\n- i2c: designware: Prevent runtime suspend during adapter registration (bsc#1011913).\n- i2c: designware: retry transfer on transient failure (bsc#1011913).\n- i2c: designware: Use transfer timeout from ioctl I2C_TIMEOUT (bsc#1011913).\n- i2c: Enable CONFIG_I2C_DESIGNWARE_PLATFORM and *_BAYTRAIL (bsc#1010690) Realtek codecs on CHT platform require this i2c bus driver.\n- i2c: xgene: Avoid dma_buffer overrun (bsc#1006576).\n- i40e: fix an uninitialized variable bug (bsc#969476 FATE#319648).\n- i40e: fix broken i40e_config_rss_aq function (bsc#969476 FATE#319648 bsc#969477 FATE#319816).\n- i40e: Remove redundant memset (bsc#969476 FATE#319648 bsc#969477 FATE#319816).\n- i40iw: Add missing check for interface already open (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Add missing NULL check for MPA private data (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Avoid writing to freed memory (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Change mem_resources pointer to a u8 (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Do not set self-referencing pointer to NULL after kfree (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Fix double free of allocated_buffer (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Protect req_resource_num update (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Receive notification events correctly (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Send last streaming mode message for loopback connections (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- i40iw: Update hw_iwarp_state (bsc#974842 FATE#319831 bsc#974843 FATE#319832).\n- ib/core: Fix possible memory leak in cma_resolve_iboe_route() (bsc#966191 FATE#320230 bsc#966186 FATE#320228).\n- ib/mlx5: Fix iteration overrun in GSI qps (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- ib/mlx5: Fix steering resource leak (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- ib/mlx5: Set source mac address in FTE (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- ibmvnic: convert to use simple_open() (bsc#1015416).\n- ibmvnic: Driver Version 1.0.1 (bsc#1015416).\n- ibmvnic: drop duplicate header seq_file.h (bsc#1015416).\n- ibmvnic: fix error return code in ibmvnic_probe() (bsc#1015416).\n- ibmvnic: Fix GFP_KERNEL allocation in interrupt context (bsc#1015416).\n- ibmvnic: Fix missing brackets in init_sub_crq_irqs (bsc#1015416).\n- ibmvnic: Fix releasing of sub-CRQ IRQs in interrupt context (bsc#1015416).\n- ibmvnic: Fix size of debugfs name buffer (bsc#1015416).\n- ibmvnic: Handle backing device failover and reinitialization (bsc#1015416).\n- ibmvnic: Start completion queue negotiation at server-provided optimum values (bsc#1015416).\n- ibmvnic: Unmap ibmvnic_statistics structure (bsc#1015416).\n- ibmvnic: Update MTU after device initialization (bsc#1015416).\n- input: ALPS - add touchstick support for SS5 hardware (bsc#987703).\n- input: ALPS - allow touchsticks to report pressure (bsc#987703).\n- input: ALPS - handle 0-pressure 1F events (bsc#987703).\n- input: ALPS - set DualPoint flag for 74 03 28 devices (bsc#987703).\n- iommu/arm-smmu: Add support for 16 bit VMID (fate#319978).\n- iommu/arm-smmu: Workaround for ThunderX erratum #27704 (fate#319978).\n- ipc/sem.c: add cond_resched in exit_sme (bsc#979378).\n- ipmi_si: create hardware-independent softdep for ipmi_devintf (bsc#1009062).\n- ixgbe: Do not clear RAR entry when clearing VMDq for SAN MAC (bsc#969474 FATE#319812 bsc#969475 FATE#319814).\n- ixgbe: Force VLNCTRL.VFE to be set in all VMDq paths (bsc#969474 FATE#319812 bsc#969475 FATE#319814).\n- kABI: protect struct dw_mci.\n- kABI: protect struct mmc_packed (kabi).\n- kABI: reintroduce iov_iter_fault_in_multipages_readable.\n- kABI: reintroduce sk_filter (kabi).\n- kABI: reintroduce strtobool (kabi).\n- kABI: restore ip_cmsg_recv_offset parameters (kabi).\n- kabi/severities: Ignore kABI for asoc Intel SST drivers (bsc#1010690) These drivers are self-contained, not for 3rd party drivers.\n- kabi/severities: Whitelist libceph and rbd (bsc#988715). Like SLE12-SP1.\n- kernel-module-subpackage: Properly quote flavor in expressions That fixes a parse error if the flavor starts with a digit or contains other non-alphabetic characters.\n- kgr: ignore zombie tasks during the patching (bnc#1008979).\n- kvm: arm/arm64: Fix occasional warning from the timer work function (bsc#988524).\n- kvm: x86: correctly reset dest_map-\u003evector when restoring LAPIC state (bsc#966471).\n- libceph: enable large, variable-sized OSD requests (bsc#988715).\n- libceph: make r_request msg_size calculation clearer (bsc#988715).\n- libceph: move r_reply_op_{len,result} into struct ceph_osd_req_op (bsc#988715).\n- libceph: osdc-\u003ereq_mempool should be backed by a slab pool (bsc#988715).\n- libceph: rename ceph_osd_req_op::payload_len to indata_len (bsc#988715).\n- lib/mpi: avoid assembler warning (bsc#1003581).\n- lib/mpi: mpi_read_buffer(): fix buffer overflow (bsc#1003581).\n- lib/mpi: mpi_read_buffer(): optimize skipping of leading zero limbs (bsc#1003581).\n- lib/mpi: mpi_read_buffer(): replace open coded endian conversion (bsc#1003581).\n- lib/mpi: mpi_write_sgl(): fix out-of-bounds stack access (bsc#1003581).\n- lib/mpi: mpi_write_sgl(): fix style issue with lzero decrement (bsc#1003581).\n- lib/mpi: mpi_write_sgl(): purge redundant pointer arithmetic (bsc#1003581).\n- lib/mpi: mpi_write_sgl(): replace open coded endian conversion (bsc#1003581).\n- lib/mpi: use 'static inline' instead of 'extern inline' (bsc#1003581).\n- locking/pv-qspinlock: Use cmpxchg_release() in __pv_queued_spin_unlock() (bsc#969756).\n- locking/rtmutex: Prevent dequeue vs. unlock race (bsc#1015212).\n- locking/rtmutex: Use READ_ONCE() in rt_mutex_owner() (bsc#1015212).\n- mailbox/xgene-slimpro: Checking for IS_ERR instead of NULL.\n- md/raid1: fix: IO can block resync indefinitely (bsc#1001310).\n- mlx4: Do not BUG_ON() if device reset failed (bsc#1001888).\n- mm: do not use radix tree writeback tags for pages in swap cache (bnc#971975 VM performance -- swap).\n- mm: filemap: do not plant shadow entries without radix tree node (bnc#1005929).\n- mm: filemap: fix mapping-\u003enrpages double accounting in fuse (bnc#1005929).\n- mm/filemap: generic_file_read_iter(): check for zero reads unconditionally (bnc#1007955).\n- mm/mprotect.c: do not touch single threaded PTEs which are on the right node (bnc#971975 VM performance -- numa balancing).\n- mm: workingset: fix crash in shadow node shrinker caused by replace_page_cache_page() (bnc#1005929).\n- mm/zswap: use workqueue to destroy pool (VM Functionality, bsc#1005923).\n- net: icmp6_send should use dst dev to determine L3 domain (bsc#1014701).\n- net: ipv6: tcp reset, icmp need to consider L3 domain (bsc#1014701).\n- net/mlx4_en: Fix panic on xmit while port is down (bsc#966191 FATE#320230).\n- net/mlx5: Add ConnectX-5 PCIe 4.0 to list of supported devices (bsc#1006809).\n- net/mlx5: Add error prints when validate ETS failed (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net/mlx5: Avoid setting unused var when modifying vport node GUID (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net/mlx5e: Use correct flow dissector key on flower offloading (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net/mlx5: Fix autogroups groups num not decreasing (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net/mlx5: Fix teardown errors that happen in pci error handler (bsc#1001169).\n- net/mlx5: Keep autogroups list ordered (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net_sched: fix a typo in tc_for_each_action() (bsc#966170 FATE#320225 bsc#966172 FATE#320226).\n- net: sctp, forbid negative length (bnc#1005921).\n- netvsc: fix incorrect receive checksum offloading (bnc#1006915).\n- nfs: nfs4_fl_prepare_ds must be careful about reporting success (bsc#1000776).\n- nfsv4: add flock_owner to open context (bnc#998689).\n- nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (bnc#998689).\n- nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (bnc#998689).\n- nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (bnc#998689).\n- oom: print nodemask in the oom report (bnc#1003866).\n- overlayfs: allow writing on read-only btrfs subvolumes (bsc#1010158)\n- pci/acpi: Allow all PCIe services on non-ACPI host bridges (bsc#1006827).\n- pci: Allow additional bus numbers for hotplug bridges (bsc#1006827).\n- pci: correctly cast mem_base in pci_read_bridge_mmio_pref() (bsc#1001888).\n- pci: Do not set RCB bit in LNKCTL if the upstream bridge hasn't (bsc#1001888).\n- pci: Fix BUG on device attach failure (bnc#987641).\n- pci: pciehp: Allow exclusive userspace control of indicators (bsc#1006827).\n- pci: Remove return values from pcie_port_platform_notify() and relatives (bsc#1006827).\n- perf/x86: Add perf support for AMD family-17h processors (fate#320473).\n- pm / hibernate: Fix 2G size issue of snapshot image verification (bsc#1004252).\n- pm / sleep: declare __tracedata symbols as char rather than char (bnc#1005895).\n- powercap/intel_rapl: Add support for Kabylake (bsc#1003566).\n- powercap / RAPL: add support for Denverton (bsc#1003566).\n- powercap / RAPL: Add support for Ivy Bridge server (bsc#1003566).\n- powerpc/pseries: Use H_CLEAR_HPT to clear MMU hash table during kexec (bsc#1003813).\n- powerpc/xmon: Add xmon command to dump process/task similar to ps(1) (fate#322020).\n- proc: much faster /proc/vmstat (bnc#971975 VM performance -- vmstat).\n- qede: Correctly map aggregation replacement pages (bsc#966318 FATE#320158 bsc#966316 FATE#320159).\n- qed: FLR of active VFs might lead to FW assert (bsc#966318 FATE#320158 bsc#966316 FATE#320159).\n- qgroup: Prevent qgroup-\u003ereserved from going subzero (bsc#993841).\n- qla2xxx: Fix NULL pointer deref in QLA interrupt (bsc#1003068).\n- qla2xxx: setup data needed in ISR before setting up the ISR (bsc#1006528).\n- rbd: truncate objects on cmpext short reads (bsc#988715).\n- Revert 'ACPI / LPSS: allow to use specific PM domain during -\u003eprobe()' (bsc#1005917).\n- Revert 'can: dev: fix deadlock reported after bus-off'.\n- Revert 'fix minor infoleak in get_user_ex()' (p.k.o).\n- REVERT fs/cifs: fix wrongly prefixed path to root (bsc#963655, bsc#979681)\n- Revert 'x86/mm: Expand the exception table logic to allow new handling options' (p.k.o).\n- rpm/config.sh: Build against SP2 in the OBS as well\n- rpm/constraints.in: increase disk for kernel-syzkaller The kernel-syzkaller build now consumes around 30G. This causes headache in factory where the package rebuilds over and over. Require 35G disk size to successfully build the flavor.\n- rpm/kernel-binary.spec.in: Build the -base package unconditionally (bsc#1000118)\n- rpm/kernel-binary.spec.in: Do not create KMPs with CONFIG_MODULES=n\n- rpm/kernel-binary.spec.in: Only build -base and -extra with CONFIG_MODULES (bsc#1000118)\n- rpm/kernel-binary.spec.in: Simplify debug info switch Any CONFIG_DEBUG_INFO sub-options are answered in the configs nowadays.\n- rpm/kernel-spec-macros: Ignore too high rebuild counter (bsc#1012060)\n- rpm/mkspec: Read a default release string from rpm/config.sh (bsc997059)\n- rpm/package-descriptions: Add 64kb kernel flavor description\n- rpm/package-descriptions: add kernel-syzkaller\n- rpm/package-descriptions: pv has been merged into -default (fate#315712)\n- rpm/package-descriptions: the flavor is 64kb, not 64k\n- s390/mm: fix gmap tlb flush issues (bnc#1005925).\n- sched/core: Optimize __schedule() (bnc#978907 Scheduler performance -- context switch).\n- sched/fair: Fix incorrect task group -\u003eload_avg (bsc#981825).\n- sched/fair: Optimize find_idlest_cpu() when there is no choice (bnc#978907 Scheduler performance -- idle search).\n- scsi: ibmvfc: Fix I/O hang when port is not mapped (bsc#971989)\n- serial: 8250_pci: Detach low-level driver during PCI error recovery (bsc#1013001).\n- serial: 8250_port: fix runtime PM use in __do_stop_tx_rs485() (bsc#983152).\n- sunrpc: fix refcounting problems with auth_gss messages (boo#1011250).\n- supported.conf: add hid-logitech-hidpp (bsc#1002322 bsc#1002786)\n- supported.conf: Add overlay.ko to -base (fate#321903) Also, delete the stale entry for the old overlayfs.\n- supported.conf: Mark vmx-crypto as supported (fate#319564)\n- supported.conf: xen-netfront should be in base packages, just        like its non-pvops predecessor. (bsc#1002770)\n- target: fix tcm_rbd_gen_it_nexus for emulated XCOPY state (bsc#1003606).\n- tg3: Avoid NULL pointer dereference in tg3_io_error_detected() (bsc#963609 FATE#320143).\n- time: Avoid undefined behaviour in ktime_add_safe() (bnc#1006103).\n- Update config files: select new CONFIG_SND_SOC_INTEL_SST_* helpers\n- Update patches.suse/btrfs-8401-fix-qgroup-accounting-when-creating-snap.patch (bsc#972993).\n- usb: gadget: composite: Clear reserved fields of SSP Dev Cap (FATE#319959).\n- usbhid: add ATEN CS962 to list of quirky devices (bsc#1007615).\n- usb: hub: Fix auto-remount of safely removed or ejected USB-3 devices (bsc#922634).\n- Using BUG_ON() as an assert() is _never_ acceptable (bnc#1005929).\n- vmxnet3: Wake queue from reset work (bsc#999907).\n- Whitelist KVM KABI changes resulting from adding a hcall.  caused by 5246adec59458b5d325b8e1462ea9ef3ead7f6ae  powerpc/pseries: Use H_CLEAR_HPT to clear MMU hash table during kexec No problem is expected as result of changing KVM KABI so whitelisting for now. If we get some additional input from IBM we can back out the patch.\n- writeback: initialize inode members that track writeback history (bsc#1012829).\n- x86/apic: Order irq_enter/exit() calls correctly vs. ack_APIC_irq() (bsc#1013479).\n- x86/efi: Enable runtime call flag checking (bsc#1005745).\n- x86/efi: Move to generic {__,}efi_call_virt() (bsc#1005745).\n- x86/hpet: Reduce HPET counter read contention (bsc#1014710).\n- x86/mce/AMD, EDAC/mce_amd: Define and use tables for known SMCA IP types (fate#320474, bsc#1013700). Exclude removed symbols from kABI check. They're AMD Zen relevant only and completely useless to other modules - only edac_mce_amd.ko.\n- x86/mce/AMD: Increase size of the bank_map type (fate#320474, bsc#1013700).\n- x86/mce/AMD: Read MSRs on the CPU allocating the threshold blocks (fate#320474, bsc#1013700).\n- x86/mce/AMD: Update sysfs bank names for SMCA systems (fate#320474, bsc#1013700).\n- x86/mce/AMD: Use msr_ops.misc() in allocate_threshold_blocks() (fate#320474, bsc#1013700).\n- x86/pci: VMD: Attach VMD resources to parent domain's resource tree (bsc#1006827).\n- x86/pci: VMD: Document code for maintainability (bsc#1006827).\n- x86/pci: VMD: Fix infinite loop executing irq's (bsc#1006827).\n- x86/pci: VMD: Initialize list item in IRQ disable (bsc#1006827).\n- x86/pci: VMD: Request userspace control of PCIe hotplug indicators (bsc#1006827).\n- x86/pci: VMD: Select device dma ops to override (bsc#1006827).\n- x86/pci: VMD: Separate MSI and MSI-X vector sharing (bsc#1006827).\n- x86/pci: VMD: Set bus resource start to 0 (bsc#1006827).\n- x86/pci: VMD: Synchronize with RCU freeing MSI IRQ descs (bsc#1006827).\n- x86/pci: VMD: Use lock save/restore in interrupt enable path (bsc#1006827).\n- x86/pci/VMD: Use untracked irq handler (bsc#1006827).\n- x86/pci: VMD: Use x86_vector_domain as parent domain (bsc#1006827).\n- x86, powercap, rapl: Add Skylake Server model number (bsc#1003566).\n- x86, powercap, rapl: Reorder CPU detection table (bsc#1003566).\n- x86, powercap, rapl: Use Intel model macros intead of open-coding (bsc#1003566).\n- xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing (bnc#1005169).\n- zram: Fix unbalanced idr management at hot removal (bsc#1010970).\n","status":"published","published":"2017-01-17T14:59:58Z","modified":"2025-05-02T04:04:23.677365Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0333-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP2 LTSS kernel was updated to receive various security and bugfixes.\n\nThis is the last planned LTSS kernel update for the SUSE Linux Enterprise Server 11 SP2 LTSS.\n\nThe following security bugs were fixed:\n\n- CVE-2016-10088: The sg implementation in the Linux kernel did not properly restrict write operations in situations where the KERNEL_DS option is set, which allowed local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576 (bnc#1017710).\n- CVE-2004-0230: TCP, when using a large Window Size, made it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP (bnc#969340).\n- CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bnc#1008831).\n- CVE-2016-8399: An out of bounds read in the ping protocol handler could have lead to information disclosure (bsc#1014746).\n- CVE-2016-9793: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option (bnc#1013531).\n- CVE-2012-6704: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option (bnc#1013542).\n- CVE-2016-9756: arch/x86/kvm/emulate.c in the Linux kernel did not properly initialize Code Segment (CS) in certain error cases, which allowed local users to obtain sensitive information from kernel stack memory via a crafted application (bnc#1013038).\n- CVE-2016-3841: The IPv6 stack in the Linux kernel mishandled options data, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call (bnc#992566).\n- CVE-2016-9685: Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel allowed local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations (bnc#1012832).\n- CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecified removing extended privilege attributes, which allowed local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program (bnc#914939).\n- CVE-2015-8962: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call (bnc#1010501).\n- CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacked chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bnc#1011685).\n- CVE-2016-7910: Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel allowed local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed (bnc#1010716).\n- CVE-2016-7911: Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted ioprio_get system call (bnc#1010711).\n- CVE-2015-8964: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory by reading a tty data structure (bnc#1010507).\n- CVE-2016-7916: Race condition in the environ_read function in fs/proc/base.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete (bnc#1010467).\n- CVE-2016-8646: The hash_accept function in crypto/algif_hash.c in the Linux kernel allowed local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data (bnc#1010150).\n- CVE-2016-8633: drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allowed remote attackers to execute arbitrary code via crafted fragmented packets (bnc#1008833).\n- CVE-2016-7042: The proc_keys_show function in security/keys/proc.c in the Linux kernel used an incorrect buffer size for certain timeout data, which allowed local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file (bnc#1004517).\n- CVE-2016-7097: The filesystem implementation in the Linux kernel preserves the setgid bit during a setxattr call, which allowed local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions (bnc#995968).\n- CVE-2017-5551: The filesystem implementation in the Linux kernel preserves the setgid bit during a setxattr call, which allowed local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. This CVE tracks the fix for the tmpfs filesystem. (bsc#1021258).\n- CVE-2015-8956: The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel allowed local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket (bnc#1003925).\n- CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bnc#1003077).\n- CVE-2016-0823: The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel allowed local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721 (bnc#994759).\n- CVE-2016-7425: The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel did not restrict a certain length field, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code (bnc#999932).\n- CVE-2016-6828: The tcp_check_send_head function in include/net/tcp.h in the Linux kernel did not properly maintain certain SACK state after a failed data copy, which allowed local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option (bnc#994296).\n- CVE-2016-6480: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a 'double fetch' vulnerability (bnc#991608).\n- CVE-2016-4998: The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel allowed local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary (bsc#986365).\n- CVE-2015-7513: arch/x86/kvm/x86.c in the Linux kernel did not reset the PIT counter values during state restoration, which allowed guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions (bnc#960689).\n- CVE-2013-4312: The Linux kernel allowed local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c (bnc#839104).\n- CVE-2016-4997: The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement (bnc#986362).\n- CVE-2016-5829: Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call (bnc#986572).\n- CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bnc#984755).\n- CVE-2016-5244: The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel did not initialize a certain structure member, which allowed remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message (bnc#983213).\n- CVE-2016-1583: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling (bnc#983143).\n- CVE-2016-4913: The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel mishandled NM (aka alternate name) entries containing \\0 characters, which allowed local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem (bnc#980725).\n- CVE-2016-4580: The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel did not properly initialize a certain data structure, which allowed attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request (bnc#981267).\n- CVE-2016-4805: Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel allowed local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions (bnc#980371).\n- CVE-2015-7833: The usbvision driver in the Linux kernel allowed physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor (bnc#950998).\n- CVE-2016-2187: The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel allowed physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor (bnc#971944).\n- CVE-2016-4482: The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel did not initialize a certain data structure, which allowed local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call (bnc#978401).\n- CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel incorrectly relies on the write system call, which allowed local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface (bnc#979548).\n- CVE-2016-4485: The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel did not initialize a certain data structure, which allowed attackers to obtain sensitive information from kernel stack memory by reading a message (bnc#978821).\n- CVE-2016-4578: sound/core/timer.c in the Linux kernel did not initialize certain r1 data structures, which allowed local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions (bnc#979879).\n- CVE-2016-4569: The snd_timer_user_params function in sound/core/timer.c in the Linux kernel did not initialize a certain data structure, which allowed local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface (bnc#979213).\n\n\nThe following non-security bugs were fixed:\n\n- arch/powerpc: Remove duplicate/redundant Altivec entries (bsc#967716).\n- cdc-acm: added sanity checking for probe() (bsc#993891).\n- cgroups: do not attach task to subsystem if migration failed (bnc#979274).\n- cgroups: more safe tasklist locking in cgroup_attach_proc (bnc#979274).\n- dasd: fix hanging system after LCU changes (bnc#968500, LTC#136671).\n- dasd: Fix unresumed device after suspend/resume (bnc#927287, LTC#123892).\n- ipv4/fib: do not warn when primary address is missing if in_dev is dead (bsc#971360).\n- kabi, unix: properly account for FDs passed over unix sockets (bnc#839104).\n- kaweth: fix firmware download (bsc#993890).\n- kaweth: fix oops upon failed memory allocation (bsc#993890).\n- kvm: x86: SYSENTER emulation is broken (bsc#994618).\n- mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED (VM Functionality, bnc#986445).\n- mremap: enforce rmap src/dst vma ordering in case of vma_merge() succeeding in copy_vma() (VM Functionality, bsc#1008645).\n- nfs4: reset states to use open_stateid when returning delegation voluntarily (bsc#1007944).\n- nfs: Do not disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261, bsc#1011482).\n- nfs: do not do blind d_drop() in nfs_prime_dcache() (bnc#908069 bnc#896484 bsc#963053).\n- nfs_prime_dcache needs fh to be set (bnc#908069 bnc#896484 bsc#963053).\n- nfs: Refresh open-owner id when server says SEQID is bad (bsc#989261).\n- nfsv4: Ensure that we do not drop a state owner more than once (bsc#979595).\n- nfsv4: fix broken patch relating to v4 read delegations (bsc#956514, bsc#989261, bsc#979595, bsc#1011482).\n- nfsv4: nfs4_proc_renew should be declared static (bnc#863873).\n- nfsv4: OPEN must handle the NFS4ERR_IO return code correctly (bsc#979595).\n- nfsv4: Recovery of recalled read delegations is broken (bsc#956514 bsc#1011482).\n- nfsv4: The NFSv4.0 client must send RENEW calls if it holds a delegation (bnc#863873).\n- powerpc: Add ability to build little endian kernels (bsc#967716).\n- powerpc: Avoid load of static chain register when calling nested functions through a pointer on 64bit (bsc#967716).\n- powerpc: Do not build assembly files with ABIv2 (bsc#967716).\n- powerpc: Do not use ELFv2 ABI to build the kernel (bsc#967716).\n- powerpc: dtc is required to build dtb files (bsc#967716).\n- powerpc: Fix 64 bit builds with binutils 2.24 (bsc#967716).\n- powerpc: Fix error when cross building TAGS \u0026 cscope (bsc#967716).\n- powerpc: Make the vdso32 also build big-endian (bsc#967716).\n- powerpc: Remove altivec fix for gcc versions before 4.0 (bsc#967716).\n- powerpc: Remove buggy 9-year-old test for binutils \u003c 2.12.1 (bsc#967716).\n- powerpc: Require gcc 4.0 on 64-bit (bsc#967716).\n- ppp: defer netns reference release for ppp channel (bsc#980371).\n- qeth: delete napi struct when removing a qeth device (bnc#979915, LTC#143590).\n- qeth: Fix crash on initial MTU size change (bnc#835175, LTC#96809).\n- qeth: postpone freeing of qdio memory (bnc#874145, LTC#107873).\n- rpm/kernel-binary.spec.in: Export a make-stderr.log file (bsc#1012422)\n- Revert 's390/mm: fix asce_bits handling with dynamic pagetable levels' This reverts commit 6e00b1d803fa2ab4b130e04b7fbcc99f0b5ecba8.\n- rpm/config.sh: Set the release string to 0.7.\u003cRELEASE\u003e (bsc#997059)\n- rpm/mkspec: Read a default release string from rpm/config.sh (bsc997059)\n- s390/dasd: fix failfast for disconnected devices (bnc#958000, LTC#135138).\n- s390/dasd: fix hanging device after clear subchannel (bnc#994436, LTC#144640).\n- s390/dasd: fix kernel panic when alias is set offline (bnc#940966, LTC#128595).\n- s390/dasd: fix list_del corruption after lcu changes (bnc#954984, LTC#133077).\n- s390/mm: fix asce_bits handling with dynamic pagetable levels (bnc#979915, LTC#141456). Conflicts: \tseries.conf\n- s390/pageattr: do a single TLB flush for change_page_attr (bsc#1009443,LTC#148182).\n- Set CONFIG_DEBUG_INFO=y and CONFIG_DEBUG_INFO_REDUCED=n on all platforms The specfile adjusts the config if necessary, but a new version of run_oldconfig.sh requires the settings to be present in the repository.\n- usb: fix typo in wMaxPacketSize validation (bsc#991665).\n- usb: validate wMaxPacketValue entries in endpoint descriptors (bnc#991665).\n","status":"published","published":"2017-01-30T16:03:00Z","modified":"2026-02-04T03:14:57.481892Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0437-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to 3.0.101-94 to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2017-5551: tmpfs: clear S_ISGID when setting posix ACLs (bsc#1021258).\n- CVE-2016-10088: The sg implementation in the Linux kernel did not properly restrict write operations in situations\n  where the KERNEL_DS option is set, which allowed local users to read or write to arbitrary kernel memory locations\n  or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device\n  NOTE: this vulnerability existed because of an incomplete fix for CVE-2016-9576 (bnc#1017710).\n- CVE-2016-5696: TCP, when using a large Window Size, made it easier for remote attackers to guess sequence numbers\n  and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST\n  packet, especially in protocols that use long-lived connections, such as BGP (bnc#989152).\n- CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provided an incomplete set of requirements for setattr\n  operations that underspecified removing extended privilege attributes, which allowed local users to cause a denial\n  of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove\n  a capability from the ping or Wireshark dumpcap program (bnc#914939).\n- CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship\n  between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or\n  cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability\n  (bnc#1008831).\n- CVE-2016-8399: An elevation of privilege vulnerability in the kernel networking subsystem could enable a local\n  malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate\n  because it first requires compromising a privileged process and current compiler optimizations restrict access to the\n  vulnerable code. (bnc#1014746).\n- CVE-2016-9793: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of\n  sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash)\n  or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system\n  call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option (bnc#1013531).\n- CVE-2012-6704: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of\n  sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash)\n  or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system\n  call with the (1) SO_SNDBUF or (2) SO_RCVBUF option (bnc#1013542).\n- CVE-2016-9756: arch/x86/kvm/emulate.c in the Linux kernel did not properly initialize Code Segment (CS) in certain\n  error cases, which allowed local users to obtain sensitive information from kernel stack memory via a crafted\n  application (bnc#1013038).\n- CVE-2016-9685: Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel allowed local users\n  to cause a denial of service (memory consumption) via crafted XFS filesystem operations (bnc#1012832).\n- CVE-2015-8962: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel\n  allowed local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching\n  a device during an SG_IO ioctl call (bnc#1010501).\n- CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacked chunk-length checking\n  for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or\n  possibly have unspecified other impact via crafted SCTP data (bnc#1011685).\n- CVE-2016-7910: Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel\n  allowed local users to gain privileges by leveraging the execution of a certain stop operation even if the\n  corresponding start operation had failed (bnc#1010716).\n- CVE-2016-7911: Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel allowed local\n  users to gain privileges or cause a denial of service (use-after-free) via a crafted ioprio_get system call\n  (bnc#1010711).\n- CVE-2013-6368: The KVM subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of\n  service (system crash) via a VAPIC synchronization operation involving a page-end address (bnc#853052).\n- CVE-2015-8964: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel allowed local users\n  to obtain sensitive information from kernel memory by reading a tty data structure (bnc#1010507).\n- CVE-2016-7916: Race condition in the environ_read function in fs/proc/base.c in the Linux kernel allowed local users\n  to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time\n  interval in which environment-variable copying is incomplete (bnc#1010467).\n- CVE-2016-8646: The hash_accept function in crypto/algif_hash.c in the Linux kernel allowed local users to cause a\n  denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero\n  bytes of data (bnc#1010150).\n- CVE-2016-8633: drivers/firewire/net.c in the Linux kernel, in certain unusual hardware configurations, allowed remote\n  attackers to execute arbitrary code via crafted fragmented packets (bnc#1008833).\n\nThe following non-security bugs were fixed:\n\n- 8250_pci: Fix potential use-after-free in error path (bsc#1013070).\n- KABI fix (bsc#1014410).\n- apparmor: fix IRQ stack overflow during free_profile (bsc#1009875).\n- be2net: Do not leak iomapped memory on removal (bug#925065).\n- block_dev: do not test bdev-\u003ebd_contains when it is not stable (bsc#1008557).\n- bna: Add synchronization for tx ring (bsc#993739).\n- bnx2x: Correct ringparam estimate when DOWN (bsc#1020214).\n- crypto: add ghash-generic in the supported.conf(bsc#1016824)\n- crypto: aesni - Add support for 192 \u0026 256 bit keys to AESNI RFC4106 (bsc#913387).\n- dm: do not call dm_sync_table() when creating new devices (bnc#901809).\n- drm/mgag200: Added support for the new deviceID for G200eW3 (bnc#1019348)\n- ext3: Avoid premature failure of ext3_has_free_blocks() (bsc#1016668).\n- ext4: do not leave i_crtime.tv_sec uninitialized (bsc#1013018).\n- ext4: fix reference counting bug on block allocation error (bsc#1013018).\n- futex: Acknowledge a new waiter in counter before plist (bsc#851603).\n- futex: Drop refcount if requeue_pi() acquired the rtmutex (bsc#851603).\n- hpilo: Add support for iLO5 (bsc#999101).\n- ibmveth: calculate gso_segs for large packets (bsc#1019165).\n- ibmveth: set correct gso_size and gso_type (bsc#1019165).\n- igb: Enable SR-IOV configuration via PCI sysfs interface (bsc#909491 FATE#317388).\n- igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector (bsc#795297 FATE#313656).\n- igb: Fix oops caused by missing queue pairing (bsc#909491 FATE#317388).\n- igb: Fix oops on changing number of rings (bsc#909491 FATE#317388).\n- igb: Remove unnecessary flag setting in igb_set_flag_queue_pairs() (bsc#909491 FATE#317388).\n- igb: Unpair the queues when changing the number of queues (bsc#909491 FATE#317388).\n- kexec: add a kexec_crash_loaded() function (bsc#973691).\n- kvm: APIC: avoid instruction emulation for EOI writes (bsc#989680).\n- kvm: Distangle eventfd code from irqchip (bsc#989680).\n- kvm: Iterate over only vcpus that are preempted (bsc#989680).\n- kvm: Record the preemption status of vcpus using preempt notifiers (bsc#989680).\n- kvm: VMX: Pass vcpu to __vmx_complete_interrupts (bsc#989680).\n- kvm: fold kvm_pit_timer into kvm_kpit_state (bsc#989680).\n- kvm: make processes waiting on vcpu mutex killable (bsc#989680).\n- kvm: nVMX: Add preemption timer support (bsc#989680).\n- kvm: remove a wrong hack of delivery PIT intr to vcpu0 (bsc#989680).\n- kvm: use symbolic constant for nr interrupts (bsc#989680).\n- kvm: x86: Remove support for reporting coalesced APIC IRQs (bsc#989680).\n- kvm: x86: Run PIT work in own kthread (bsc#989680).\n- kvm: x86: limit difference between kvmclock updates (bsc#989680).\n- libata: introduce ata_host-\u003en_tags to avoid oops on SAS controllers (bsc#871728).\n- libata: remove n_tags to avoid kABI breakage (bsc#871728).\n- libfc: Do not take rdata-\u003erp_mutex when processing a -FC_EX_CLOSED ELS response (bsc#962846).\n- libfc: Fixup disc_mutex handling (bsc#962846).\n- libfc: Issue PRLI after a PRLO has been received (bsc#962846).\n- libfc: Revisit kref handling (bnc#990245).\n- libfc: Update rport reference counting (bsc#953233).\n- libfc: do not send ABTS when resetting exchanges (bsc#962846).\n- libfc: fixup locking of ptp_setup() (bsc#962846).\n- libfc: reset exchange manager during LOGO handling (bsc#962846).\n- libfc: send LOGO for PLOGI failure (bsc#962846).\n- locking/mutex: Explicitly mark task as running after wakeup (bsc#1012411).\n- memstick: mspro_block: add missing curly braces (bsc#1016688).\n- mlx4: Fix error flow when sending mads under SRIOV (bsc#786036 FATE#314304).\n- mlx4: Fix incorrect MC join state bit-masking on SR-IOV (bsc#786036 FATE#314304).\n- mlx4: Fix memory leak if QP creation failed (bsc#786036 FATE#314304).\n- mlx4: Fix potential deadlock when sending mad to wire (bsc#786036 FATE#314304).\n- mlx4: Forbid using sysfs to change RoCE pkeys (bsc#786036 FATE#314304).\n- mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV (bsc#786036 FATE#314304).\n- mlx4: add missing braces in verify_qp_parameters (bsc#786036 FATE#314304).\n- mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() (bnc#961589).\n- mm: fix crashes from mbind() merging vmas (bnc#1005877).\n- mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (bsc#1011820).\n- mremap: enforce rmap src/dst vma ordering in case of vma_merge() succeeding in copy_vma() (bsc#1008645).\n- net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes (bsc#786036 FATE#314304).\n- net/mlx4_core: Allow resetting VF admin mac to zero (bsc#919382 FATE#317529).\n- net/mlx4_core: Avoid returning success in case of an error flow (bsc#786036 FATE#314304).\n- net/mlx4_core: Do not BUG_ON during reset when PCI is offline (bsc#924708).\n- net/mlx4_core: Do not access comm channel if it has not yet been initialized (bsc#924708).\n- net/mlx4_core: Fix error message deprecation for ConnectX-2 cards (bsc#919382 FATE#317529).\n- net/mlx4_core: Fix the resource-type enum in res tracker to conform to FW spec (bsc#786036 FATE#314304).\n- net/mlx4_core: Implement pci_resume callback (bsc#924708).\n- net/mlx4_core: Update the HCA core clock frequency after INIT_PORT (bug#919382 FATE#317529).\n- net/mlx4_en: Choose time-stamping shift value according to HW frequency (bsc#919382 FATE#317529).\n- net/mlx4_en: Fix HW timestamp init issue upon system startup (bsc#919382 FATE#317529).\n- net/mlx4_en: Fix potential deadlock in port statistics flow (bsc#786036 FATE#314304).\n- net/mlx4_en: Move filters cleanup to a proper location (bsc#786036 FATE#314304).\n- net/mlx4_en: Remove dependency between timestamping capability and service_task (bsc#919382 FATE#317529).\n- net/mlx4_en: fix spurious timestamping callbacks (bsc#919382 FATE#317529).\n- netfront: do not truncate grant references.\n- nfsv4: Cap the transport reconnection timer at 1/2 lease period (bsc#1014410).\n- nfsv4: Cleanup the setting of the nfs4 lease period (bsc#1014410).\n- nfsv4: Handle timeouts correctly when probing for lease validity (bsc#1014410).\n- nvme: Automatic namespace rescan (bsc#1017686).\n- nvme: Metadata format support (bsc#1017686).\n- ocfs2: fix BUG_ON() in ocfs2_ci_checkpointed() (bnc#1019783).\n- posix-timers: Remove remaining uses of tasklist_lock (bnc#997401).\n- posix-timers: Use sighand lock instead of tasklist_lock for task clock sample (bnc#997401).\n- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (bnc#997401).\n- powerpc/MSI: Fix race condition in tearing down MSI interrupts (bsc#1010201).\n- powerpc/mm/hash64: Fix subpage protection with 4K HPTE config (bsc#1010201).\n- powerpc/numa: Fix multiple bugs in memory_hotplug_max() (bsc#1010201).\n- powerpc/pseries: Use H_CLEAR_HPT to clear MMU hash table during kexec (bsc#1003813).\n- powerpc: fix typo 'CONFIG_PPC_CPU' (bsc#1010201).\n- powerpc: scan_features() updates incorrect bits for REAL_LE (bsc#1010201).\n- printk/sched: Introduce special printk_sched() for those awkward (bsc#996541).\n- ptrace: __ptrace_may_access() should not deny sub-threads (bsc#1012851).\n- qlcnic: fix a loop exit condition better (bsc#909350 FATE#317546).\n- qlcnic: use the correct ring in qlcnic_83xx_process_rcv_ring_diag() (bnc#800999 FATE#313899).\n- reiserfs: fix race in prealloc discard (bsc#987576).\n- rpm/constraints.in: Bump ppc64 disk requirements to fix OBS builds again\n- rpm/kernel-binary.spec.in: Export a make-stderr.log file (bsc#1012422)\n- rt2x00: fix rfkill regression on rt2500pci (bnc#748806).\n- s390/zcrypt: kernel: Fix invalid domain response handling (bsc#1016320).\n- scsi: Fix erratic device offline during EH (bsc#993832).\n- scsi: lpfc: Set elsiocb contexts to NULL after freeing it (bsc#996557).\n- scsi: lpfc: avoid double free of resource identifiers (bsc#989896).\n- scsi_error: count medium access timeout only once per EH run (bsc#993832).\n- scsi_error: fixup crash in scsi_eh_reset (bsc#993832)\n- serial: 8250_pci: Detach low-level driver during PCI error recovery (bsc#1013070).\n- sunrpc: Enforce an upper limit on the number of cached credentials (bsc#1012917).\n- sunrpc: Fix reconnection timeouts (bsc#1014410).\n- sunrpc: Fix two issues with drop_caches and the sunrpc auth cache (bsc#1012917).\n- sunrpc: Limit the reconnect backoff timer to the max RPC message timeout (bsc#1014410).\n- tcp: fix inet6_csk_route_req() for link-local addresses (bsc#1010175).\n- tcp: pass fl6 to inet6_csk_route_req() (bsc#1010175).\n- tcp: plug dst leak in tcp_v6_conn_request() (bsc#1010175).\n- tcp: use inet6_csk_route_req() in tcp_v6_send_synack() (bsc#1010175).\n- tg3: Fix temperature reporting (bnc#790588 FATE#313912).\n- usb: console: fix potential use after free (bsc#1015817).\n- usb: console: fix uninitialised ldisc semaphore (bsc#1015817).\n- usb: cp210x: Corrected USB request type definitions (bsc#1015932).\n- usb: cp210x: relocate private data from USB interface to port (bsc#1015932).\n- usb: cp210x: work around cp2108 GET_LINE_CTL bug (bsc#1015932).\n- usb: ftdi_sio: fix null deref at port probe (bsc#1015796).\n- usb: ipaq.c: fix a timeout loop (bsc#1015848).\n- usb: opticon: fix non-atomic allocation in write path (bsc#1015803).\n- usb: option: fix runtime PM handling (bsc#1015752).\n- usb: serial: cp210x: add 16-bit register access functions (bsc#1015932).\n- usb: serial: cp210x: add 8-bit and 32-bit register access functions (bsc#1015932).\n- usb: serial: cp210x: add new access functions for large registers (bsc#1015932).\n- usb: serial: cp210x: fix hardware flow-control disable (bsc#1015932).\n- usb: serial: fix potential use-after-free after failed probe (bsc#1015828).\n- usb: serial: io_edgeport: fix memory leaks in attach error path (bsc#1016505).\n- usb: serial: io_edgeport: fix memory leaks in probe error path (bsc#1016505).\n- usb: serial: keyspan: fix use-after-free in probe error path (bsc#1016520).\n- usb: sierra: fix AA deadlock in open error path (bsc#1015561).\n- usb: sierra: fix remote wakeup (bsc#1015561).\n- usb: sierra: fix urb and memory leak in resume error path (bsc#1015561).\n- usb: sierra: fix urb and memory leak on disconnect (bsc#1015561).\n- usb: sierra: fix use after free at suspend/resume (bsc#1015561).\n- usb: usb_wwan: fix potential blocked I/O after resume (bsc#1015760).\n- usb: usb_wwan: fix race between write and resume (bsc#1015760).\n- usb: usb_wwan: fix urb leak at shutdown (bsc#1015760).\n- usb: usb_wwan: fix urb leak in write error path (bsc#1015760).\n- usb: usb_wwan: fix write and suspend race (bsc#1015760).\n- usbhid: add ATEN CS962 to list of quirky devices (bsc#1007615).\n- usblp: do not set TASK_INTERRUPTIBLE before lock (bsc#1015844).\n- xenbus: do not invoke is_ready() for most device states (bsc#987333).\n","status":"published","published":"2017-02-09T15:37:43Z","modified":"2025-05-02T04:03:47.048609Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0494-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2015-8970: crypto/algif_skcipher.c in the Linux kernel did not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that did not supply a key, related to the lrw_crypt function in crypto/lrw.c (bnc#1008374).\n- CVE-2017-5551: Clear S_ISGID on tmpfs when setting posix ACLs (bsc#1021258).\n- CVE-2016-7097: The filesystem implementation in the Linux kernel preserves the setgid bit during a setxattr call, which allowed local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions (bnc#995968).\n- CVE-2016-10088: The sg implementation in the Linux kernel did not properly restrict write operations in situations where the KERNEL_DS option is set, which allowed local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576 (bnc#1017710).\n- CVE-2004-0230: TCP, when using a large Window Size, made it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP (bnc#969340).\n- CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bnc#1008831).\n- CVE-2016-8399: An elevation of privilege vulnerability in the kernel networking subsystem could have enabled a local malicious application to execute arbitrary code within the context of the kernel bnc#1014746).\n- CVE-2016-9793: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option (bnc#1013531).\n- CVE-2012-6704: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option (bnc#1013542).\n- CVE-2016-9756: arch/x86/kvm/emulate.c in the Linux kernel did not properly initialize Code Segment (CS) in certain error cases, which allowed local users to obtain sensitive information from kernel stack memory via a crafted application (bnc#1013038).\n- CVE-2016-3841: The IPv6 stack in the Linux kernel mishandled options data, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call (bnc#992566).\n- CVE-2016-9685: Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel allowed local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations (bnc#1012832).\n- CVE-2015-1350: The VFS subsystem in the Linux kernel provided an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allowed local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program (bnc#914939).\n- CVE-2015-8962: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call (bnc#1010501).\n- CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacked chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bnc#1011685).\n- CVE-2016-7910: Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel allowed local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed (bnc#1010716).\n- CVE-2016-7911: Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted ioprio_get system call (bnc#1010711).\n- CVE-2015-8964: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory by reading a tty data structure (bnc#1010507).\n- CVE-2016-7916: Race condition in the environ_read function in fs/proc/base.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete (bnc#1010467).\n- CVE-2016-8646: The hash_accept function in crypto/algif_hash.c in the Linux kernel allowed local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data (bnc#1010150).\n- CVE-2016-8633: drivers/firewire/net.c in the Linux kernel in certain unusual hardware configurations allowed remote attackers to execute arbitrary code via crafted fragmented packets (bnc#1008833).\n- CVE-2016-7042: The proc_keys_show function in security/keys/proc.c in the Linux, when the GNU Compiler Collection (gcc) stack protector is enabled, used an incorrect buffer size for certain timeout data, which allowed local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file (bnc#1004517).\n- CVE-2015-8956: The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel allowed local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket (bnc#1003925).\n- CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bnc#1003077).\n- CVE-2016-0823: The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel allowed local users to obtain sensitive physical-address information by reading a pagemap file (bnc#994759).\n- CVE-2016-7425: The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel did not restrict a certain length field, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code (bnc#999932).\n- CVE-2016-6828: The tcp_check_send_head function in include/net/tcp.h in the Linux kernel did not properly maintain certain SACK state after a failed data copy, which allowed local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option (bnc#994296).\n\nThe following non-security bugs were fixed:\n\n- Always include the git commit in KOTD builds. This allows us not to set it explicitly in builds submitted to the official distribution (bnc#821612, bnc#824171).\n- KVM: x86: SYSENTER emulation is broken (bsc#994618).\n- NFS: Do not disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261).\n- NFS: Refresh open-owner id when server says SEQID is bad (bsc#989261).\n- NFSv4: Ensure that we do not drop a state owner more than once (bsc#979595).\n- NFSv4: add flock_owner to open context (bnc#998689).\n- NFSv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (bnc#998689).\n- NFSv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (bnc#998689).\n- NFSv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (bnc#998689).\n- NFSv4: fix broken patch relating to v4 read delegations (bsc#956514, bsc#989261, bsc#979595).\n- SELinux: Fix possible NULL pointer dereference in selinux_inode_permission() (bsc#1012895).\n- USB: fix typo in wMaxPacketSize validation (bsc#991665).\n- USB: validate wMaxPacketValue entries in endpoint descriptors (bnc#991665).\n- Update patches.xen/xen3-auto-arch-x86.diff (bsc#929141, among others).\n- __ptrace_may_access() should not deny sub-threads (bsc#1012851).\n- apparmor: fix IRQ stack overflow during free_profile (bsc#1009875).\n- arch/powerpc: Remove duplicate/redundant Altivec entries (bsc#967716).\n- cdc-acm: added sanity checking for probe() (bsc#993891).\n- include/linux/math64.h: add div64_ul() (bsc#996329).\n- kabi-fix for flock_owner addition (bsc#998689).\n- kabi: get back scsi_device.current_cmnd (bsc#935436).\n- kaweth: fix firmware download (bsc#993890).\n- kaweth: fix oops upon failed memory allocation (bsc#993890).\n- kexec: add a kexec_crash_loaded() function (bsc#973691).\n- md linear: fix a race between linear_add() and linear_congested() (bsc#1018446).\n- mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (bsc#1011820).\n- mpt3sas: Fix panic when aer correct error occurred (bsc#997708, bsc#999943).\n- mremap: enforce rmap src/dst vma ordering in case of vma_merge() succeeding in copy_vma() (VM Functionality, bsc#1008645).\n- nfs4: reset states to use open_stateid when returning delegation voluntarily (bsc#1007944).\n- ocfs2: fix BUG_ON() in ocfs2_ci_checkpointed() (bnc#1019783).\n- posix-timers: Remove remaining uses of tasklist_lock (bnc#997401).\n- posix-timers: Use sighand lock instead of tasklist_lock for task clock sample (bnc#997401).\n- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (bnc#997401).\n- powerpc: Add ability to build little endian kernels (bsc#967716).\n- powerpc: Avoid load of static chain register when calling nested functions through a pointer on 64bit (bsc#967716).\n- powerpc: Do not build assembly files with ABIv2 (bsc#967716).\n- powerpc: Do not use ELFv2 ABI to build the kernel (bsc#967716).\n- powerpc: Fix 64 bit builds with binutils 2.24 (bsc#967716).\n- powerpc: Fix error when cross building TAGS and cscope (bsc#967716).\n- powerpc: Make the vdso32 also build big-endian (bsc#967716).\n- powerpc: Remove altivec fix for gcc versions before 4.0 (bsc#967716).\n- powerpc: Remove buggy 9-year-old test for binutils lower than 2.12.1 (bsc#967716).\n- powerpc: Require gcc 4.0 on 64-bit (bsc#967716).\n- powerpc: dtc is required to build dtb files (bsc#967716).\n- printk/sched: Introduce special printk_sched() for those awkward (bsc#1013042, bsc#996541, bsc#1015878).\n- qlcnic: Schedule napi directly in netpoll (bsc#966826).\n- reiserfs: fix race in prealloc discard (bsc#987576).\n- rpm/config.sh: Set a fitting release string (bsc#997059)\n- rpm/kernel-binary.spec.in: Export a make-stderr.log file (bsc#1012422)\n- rpm/mkspec: Read a default release string from rpm/config.sh (bsc997059)\n- s390/dasd: fix failfast for disconnected devices (bnc#961923, LTC#135138).\n- sched/core: Fix a race between try_to_wake_up() and a woken up task (bnc#1002165).\n- sched/core: Fix an SMP ordering race in try_to_wake_up() vs. schedule() (bnc#1001419).\n- sched: Fix possible divide by zero in avg_atom() calculation (bsc#996329).\n- scsi: lpfc: Set elsiocb contexts to NULL after freeing it (bsc#996557).\n- scsi: remove current_cmnd field from struct scsi_device (bsc#935436). \n- x86/MCE/intel: Cleanup CMCI storm logic (bsc#929141).\n- xfs: remove the deprecated nodelaylog option (bsc#992906).\n","status":"published","published":"2017-02-17T13:56:58Z","modified":"2026-02-04T04:13:09.617973Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1102-1","title":"Security update for the Linux Kernel","description":"\nThe SLE-11 SP4 kernel was updated to 3.0.101.rt130-68 to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2017-5551: The simple_set_acl function in fs/posix_acl.c in the Linux kernel preserved the setgid bit during\n  a setxattr call involving a tmpfs filesystem, which allowed local users to gain group privileges by leveraging the\n  existence of a setgid program with restrictions on execute permissions.  NOTE: this vulnerability exists because of\n  an incomplete fix for CVE-2016-7097 (bnc#1021258).\n- CVE-2016-7097: posix_acl: Clear SGID bit when setting file permissions (bsc#995968).\n- CVE-2016-10088: The sg implementation in the Linux kernel did not properly restrict write operations in situations\n  where the KERNEL_DS option is set, which allowed local users to read or write to arbitrary kernel memory locations or\n  cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and \n  drivers/scsi/sg.c.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576 (bnc#1017710).\n- CVE-2016-5696: TCP, when using a large Window Size, made it easier for remote attackers to guess sequence numbers and\n  cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet,\n  especially in protocols that use long-lived connections, such as BGP (bnc#989152).\n- CVE-2015-1350: Denial of service in notify_change for filesystem xattrs (bsc#914939).\n- CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship\n  between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause\n  a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bnc#1008831).\n- CVE-2016-8399: An elevation of privilege vulnerability in the kernel networking subsystem could have enabled a local\n  malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate\n  because it first requires compromising a privileged process and current compiler optimizations restrict access to the\n  vulnerable code. (bnc#1014746).\n- CVE-2016-9793: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of \n  sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash)\n  or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system\n  call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option (bnc#1013531).\n- CVE-2012-6704: The sock_setsockopt function in net/core/sock.c in the Linux\n  kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed\n  local users to cause a denial of service (memory corruption and system crash)\n  or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN\n  capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2)\n  SO_RCVBUF option (bnc#1013542).\n- CVE-2016-9756: arch/x86/kvm/emulate.c in the Linux kernel did not properly\n  initialize Code Segment (CS) in certain error cases, which allowed local users\n  to obtain sensitive information from kernel stack memory via a crafted\n  application (bnc#1013038).\n- CVE-2016-9576: splice: introduce FMODE_SPLICE_READ and FMODE_SPLICE_WRITE  (bsc#1013604)\n- CVE-2016-9794: ALSA: pcm : Call kill_fasync() in stream lock (bsc#1013533)\n- CVE-2016-3841: KABI workaround for ipv6: add complete rcu protection around  np-\u003eopt (bsc#992566).\n- CVE-2016-9685: Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c\n  in the Linux kernel allowed local users to cause a denial of service (memory\n  consumption) via crafted XFS filesystem operations (bnc#1012832).\n- CVE-2015-8962: Double free vulnerability in the sg_common_write function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to gain privileges or\n  cause a denial of service (memory corruption and system crash) by detaching a\n  device during an SG_IO ioctl call (bnc#1010501).\n- CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the\n  Linux kernel lacks chunk-length checking for the first chunk, which allowed\n  remote attackers to cause a denial of service (out-of-bounds slab access) or\n  possibly have unspecified other impact via crafted SCTP data (bnc#1011685).\n  - CVE-2016-7910: Use-after-free vulnerability in the disk_seqf_stop function in\n  block/genhd.c in the Linux kernel allowed local users to gain privileges by\n  leveraging the execution of a certain stop operation even if the corresponding\n  start operation had failed (bnc#1010716).\n- CVE-2016-7911: Race condition in the get_task_ioprio function in\n  block/ioprio.c in the Linux kernel allowed local users to gain privileges or\n  cause a denial of service (use-after-free) via a crafted ioprio_get system call\n  (bnc#1010711).\n- CVE-2013-6368: The KVM subsystem in the Linux kernel allowed local users to\n  gain privileges or cause a denial of service (system crash) via a VAPIC\n  synchronization operation involving a page-end address (bnc#853052).\n- CVE-2015-8964: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c\n  in the Linux kernel allowed local users to obtain sensitive information from\n  kernel memory by reading a tty data structure (bnc#1010507).\n- CVE-2016-7916: Revert 'proc: prevent accessing /proc/\u003cPID\u003e/environ until it's ready (bsc#1010467)'\n- CVE-2016-8646: The hash_accept function in crypto/algif_hash.c in the Linux\n  kernel allowed local users to cause a denial of service (OOPS) by attempting to\n  trigger use of in-kernel hash algorithms for a socket that has received zero\n  bytes of data (bnc#1010150).\n- CVE-2016-8633: drivers/firewire/net.c in the Linux kernel before 4.8.7, in\n  certain unusual hardware configurations, allowed remote attackers to execute\n  arbitrary code via crafted fragmented packets (bnc#1008833).\n- CVE-2016-7042: KEYS: Fix short sprintf buffer in /proc/keys show function  (bsc#1004517).\n- CVE-2015-8956: Bluetooth: Fix potential NULL dereference in RFCOMM bind  callback (bsc#1003925).\n- CVE-2016-7117: net: Fix use after free in the recvmmsg exit path (bsc#1003077).\n\nThe following non-security bugs were fixed:\n\n- blacklist.conf: 45f13df be2net: Enable Wake-On-LAN from shutdown for Skyhawk\n- blacklist.conf: c9cc599 net/mlx4_core: Fix QUERY FUNC CAP flags\n\n- 8250_pci: Fix potential use-after-free in error path (bsc#1013070).\n- IB/mlx4: Fix error flow when sending mads under SRIOV (bsc#786036).\n- IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV (bsc#786036).\n- IB/mlx4: Fix memory leak if QP creation failed (bsc#786036).\n- IB/mlx4: Fix potential deadlock when sending mad to wire (bsc#786036).\n- IB/mlx4: Forbid using sysfs to change RoCE pkeys (bsc#786036).\n- IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV (bsc#786036).\n- apparmor: fix IRQ stack overflow during free_profile (bsc#1009875).\n- arch/powerpc: Remove duplicate/redundant Altivec entries (bsc#967716).\n- be2net: Do not leak iomapped memory on removal (bug#925065).\n- block_dev: do not test bdev-\u003ebd_contains when it is not stable (bsc#1008557).\n- bna: Add synchronization for tx ring (bsc#993739).\n- bnx2x: Correct ringparam estimate when DOWN (bsc#1020214).\n- bnx2x: fix lockdep splat (bsc#908684).\n- cifs: revert fs/cifs: fix wrongly prefixed path to root (bsc#963655)\n- config.conf: add bigmem flavour on ppc64\n- cpumask, nodemask: implement cpumask/nodemask_pr_args() (bnc1003866).\n- cpumask_set_cpu_local_first =\u003e cpumask_local_spread, lament (bug#919382).\n- crypto: add ghash-generic in the supported.conf(bsc#1016824)\n- crypto: aesni - Add support for 192 \u0026 256 bit keys to AESNI RFC4106 (bsc#913387, #bsc1016831).\n- dm space map metadata: fix sm_bootstrap_get_nr_blocks()\n- dm thin: fix race condition when destroying thin pool workqueue\n- dm: do not call dm_sync_table() when creating new devices (bnc#901809, bsc#1008893).\n- drm/mgag200: Added support for the new deviceID for G200eW3 (bnc#1019348)\n- ext3: Avoid premature failure of ext3_has_free_blocks() (bsc#1016668).\n- ext4: do not leave i_crtime.tv_sec uninitialized (bsc#1013018).\n- ext4: fix reference counting bug on block allocation error (bsc#1013018).\n- fs/cifs: Compare prepaths when comparing superblocks (bsc#799133).\n- fs/cifs: Fix memory leaks in cifs_do_mount() (bsc#799133).\n- fs/cifs: Fix regression which breaks DFS mounting (bsc#799133).\n- fs/cifs: Move check for prefix path to within cifs_get_root() (bsc#799133).\n- fs/cifs: cifs_get_root shouldn't use path with tree name (bsc#963655, bsc#979681).\n- fs/cifs: make share unaccessible at root level mountable (bsc#799133).\n- futex: Acknowledge a new waiter in counter before plist (bsc#851603).\n- futex: Drop refcount if requeue_pi() acquired the rtmutex (bsc#851603).\n- hpilo: Add support for iLO5 (bsc#999101).\n- hv: do not lose pending heartbeat vmbus packets (bnc#1006919).\n- hv: vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (bnc#986337).\n- hv: vmbus: avoid wait_for_completion() on crash (bnc#986337).\n- hv: vmbus: do not loose HVMSG_TIMER_EXPIRED messages (bnc#986337).\n- hv: vmbus: do not send CHANNELMSG_UNLOAD on pre-Win2012R2 hosts (bnc#986337).\n- hv: vmbus: handle various crash scenarios (bnc#986337).\n- hv: vmbus: remove code duplication in message handling (bnc#986337).\n- hv: vss: run only on supported host versions (bnc#986337).\n- i40e: fix an uninitialized variable bug (bsc#909484).\n- ibmveth: calculate gso_segs for large packets (bsc#1019165, bsc#1019148).\n- ibmveth: set correct gso_size and gso_type (bsc#1019165, bsc#1019148).\n- igb: Enable SR-IOV configuration via PCI sysfs interface (bsc#909491).\n- igb: Fix NULL assignment to incorrect variable in igb_reset_q_vector (bsc#795297).\n- igb: Fix oops caused by missing queue pairing (bsc#909491).\n- igb: Fix oops on changing number of rings (bsc#909491).\n- igb: Remove unnecessary flag setting in igb_set_flag_queue_pairs() (bsc#909491).\n- igb: Unpair the queues when changing the number of queues (bsc#909491).\n- ipv6: replacing a rt6_info needs to purge possible propagated rt6_infos too (bsc#865783).\n- kabi-fix for flock_owner addition (bsc#998689).\n- kexec: add a kexec_crash_loaded() function (bsc#973691).\n- kvm: APIC: avoid instruction emulation for EOI writes (bsc#989680).\n- kvm: Distangle eventfd code from irqchip (bsc#989680).\n- kvm: Iterate over only vcpus that are preempted (bsc#989680).\n- kvm: Record the preemption status of vcpus using preempt notifiers (bsc#989680).\n- kvm: VMX: Pass vcpu to __vmx_complete_interrupts (bsc#989680).\n- kvm: fold kvm_pit_timer into kvm_kpit_state (bsc#989680).\n- kvm: make processes waiting on vcpu mutex killable (bsc#989680).\n- kvm: nVMX: Add preemption timer support (bsc#989680).\n- kvm: remove a wrong hack of delivery PIT intr to vcpu0 (bsc#989680).\n- kvm: use symbolic constant for nr interrupts (bsc#989680).\n- kvm: x86: Remove support for reporting coalesced APIC IRQs (bsc#989680).\n- kvm: x86: Run PIT work in own kthread (bsc#989680).\n- kvm: x86: limit difference between kvmclock updates (bsc#989680).\n- kvm: x86: only channel 0 of the i8254 is linked to the HPET (bsc#960689).\n- lib/vsprintf: implement bitmap printing through '%*pb[l]' (bnc#1003866).\n- libata: introduce ata_host-\u003en_tags to avoid oops on SAS controllers (bsc#871728).\n- libata: remove n_tags to avoid kABI breakage (bsc#871728).\n- libata: support the ata host which implements a queue depth less than 32 (bsc#871728)\n- libfc: Do not take rdata-\u003erp_mutex when processing a -FC_EX_CLOSED ELS response (bsc#962846).\n- libfc: Fixup disc_mutex handling (bsc#962846).\n- libfc: Issue PRLI after a PRLO has been received (bsc#962846).\n- libfc: Revisit kref handling (bnc#990245).\n- libfc: Update rport reference counting (bsc#953233).\n- libfc: do not send ABTS when resetting exchanges (bsc#962846).\n- libfc: fixup locking of ptp_setup() (bsc#962846).\n- libfc: reset exchange manager during LOGO handling (bsc#962846).\n- libfc: send LOGO for PLOGI failure (bsc#962846).\n- locking/mutex: Explicitly mark task as running after wakeup (bsc#1012411).\n- md/raid10: Fix memory leak when raid10 reshape completes\n- md/raid10: always set reshape_safe when initializing reshape_position\n- md: Drop sending a change uevent when stopping (bsc#1003568).\n- md: check command validity early in md_ioctl() (bsc#1004520).\n- md: fix problem when adding device to read-only array with bitmap (bnc#771065).\n- memstick: mspro_block: add missing curly braces (bsc#1016688).\n- mlx4: add missing braces in verify_qp_parameters (bsc#786036).\n- mm, vmscan: Do not wait for page writeback for GFP_NOFS allocations (bnc#763198).\n- mm/memory.c: actually remap enough memory (bnc#1005903).\n- mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() (bnc#961589).\n- mm: fix crashes from mbind() merging vmas (bnc#1005877).\n- mm: fix sleeping function warning from __put_anon_vma (bnc#1005857).\n- dcache: move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (bsc#984194).\n- mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (bsc#1011820).\n- mremap: enforce rmap src/dst vma ordering in case of vma_merge() succeeding in copy_vma() (bsc#1008645).\n- mshyperv: fix recognition of Hyper-V guest crash MSR's (bnc#986337).\n- net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes (bsc#786036).\n- net/mlx4_core: Allow resetting VF admin mac to zero (bsc#919382).\n- net/mlx4_core: Avoid returning success in case of an error flow (bsc#786036).\n- net/mlx4_core: Do not BUG_ON during reset when PCI is offline (bsc#924708).\n- net/mlx4_core: Do not access comm channel if it has not yet been initialized (bsc#924708 bsc#786036).\n- net/mlx4_core: Fix error message deprecation for ConnectX-2 cards (bug#919382).\n- net/mlx4_core: Fix the resource-type enum in res tracker to conform to FW spec (bsc#786036).\n- net/mlx4_core: Implement pci_resume callback (bsc#924708).\n- net/mlx4_core: Update the HCA core clock frequency after INIT_PORT (bug#919382).\n- net/mlx4_en: Choose time-stamping shift value according to HW frequency (bsc#919382).\n- net/mlx4_en: Fix HW timestamp init issue upon system startup (bsc#919382).\n- net/mlx4_en: Fix potential deadlock in port statistics flow (bsc#786036).\n- net/mlx4_en: Move filters cleanup to a proper location (bsc#786036).\n- net/mlx4_en: Remove dependency between timestamping capability and service_task (bsc#919382).\n- net/mlx4_en: fix spurious timestamping callbacks (bsc#919382).\n- netfilter: ipv4: defrag: set local_df flag on defragmented skb (bsc#907611).\n- netfront: do not truncate grant references.\n- netvsc: fix incorrect receive checksum offloading (bnc#1006917).\n- nfs4: reset states to use open_stateid when returning delegation voluntarily (bsc#1007944).\n- nfs: Fix an LOCK/OPEN race when unlinking an open file (bsc#956514).\n- nfsv4.1: Fix an NFSv4.1 state renewal regression (bnc#863873).\n- nfsv4: Cap the transport reconnection timer at 1/2 lease period (bsc#1014410).\n- nfsv4: Cleanup the setting of the nfs4 lease period (bsc#1014410).\n- nfsv4: Handle timeouts correctly when probing for lease validity (bsc#1014410).\n- nfsv4: add flock_owner to open context (bnc#998689).\n- nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (bnc#998689).\n- nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (bnc#998689).\n- nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (bnc#998689).\n- nvme: Automatic namespace rescan (bsc#1017686).\n- nvme: Metadata format support (bsc#1017686).\n- ocfs2: fix BUG_ON() in ocfs2_ci_checkpointed() (bnc#1019783).\n- oom: print nodemask in the oom report (bnc#1003866).\n- pci_ids: Add PCI device ID functions 3 and 4 for newer F15h models\n- pm / hibernate: Fix rtree_next_node() to avoid walking off list ends (bnc#860441).\n- posix-timers: Remove remaining uses of tasklist_lock (bnc#997401).\n- posix-timers: Use sighand lock instead of tasklist_lock for task clock sample (bnc#997401).\n- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (bnc#997401).\n- powerpc/64: Fix incorrect return value from __copy_tofrom_user (bsc#1005896).\n- powerpc/MSI: Fix race condition in tearing down MSI interrupts (bsc#1010201, [2016-10-04] Pending Base Kernel Fixes).\n- powerpc/mm/hash64: Fix subpage protection with 4K HPTE config (bsc#1010201, [2016-10-04] Pending Base Kernel Fixes).\n- powerpc/mm: Add 64TB support (bsc#928138,fate#319026).\n- powerpc/mm: Change the swap encoding in pte (bsc#973203).\n- powerpc/mm: Convert virtual address to vpn (bsc#928138,fate#319026).\n- powerpc/mm: Fix hash computation function (bsc#928138,fate#319026).\n- powerpc/mm: Increase the slice range to 64TB (bsc#928138,fate#319026).\n- powerpc/mm: Make KERN_VIRT_SIZE not dependend on PGTABLE_RANGE (bsc#928138,fate#319026).\n- powerpc/mm: Make some of the PGTABLE_RANGE dependency explicit (bsc#928138,fate#319026).\n- powerpc/mm: Replace open coded CONTEXT_BITS value (bsc#928138,fate#319026).\n- powerpc/mm: Simplify hpte_decode (bsc#928138,fate#319026).\n- powerpc/mm: Update VSID allocation documentation (bsc#928138,fate#319026).\n- powerpc/mm: Use 32bit array for slb cache (bsc#928138,fate#319026).\n- powerpc/mm: Use hpt_va to compute virtual address (bsc#928138,fate#319026).\n- powerpc/mm: Use the required number of VSID bits in slbmte (bsc#928138,fate#319026).\n- powerpc/numa: Fix multiple bugs in memory_hotplug_max() (bsc#1010201, [2016-10-04] Pending Base Kernel Fixes).\n- powerpc/pseries: Use H_CLEAR_HPT to clear MMU hash table during kexec (bsc#1003813).\n- powerpc: Add ability to build little endian kernels (bsc#967716).\n- powerpc: Avoid load of static chain register when calling nested functions through a pointer on 64bit (bsc#967716).\n- powerpc: Build fix for powerpc KVM (bsc#928138,fate#319026).\n- powerpc: Do not build assembly files with ABIv2 (bsc#967716).\n- powerpc: Do not use ELFv2 ABI to build the kernel (bsc#967716).\n- powerpc: Fix 64 bit builds with binutils 2.24 (bsc#967716).\n- powerpc: Fix error when cross building TAGS \u0026 cscope (bsc#967716).\n- powerpc: Make VSID_BITS* dependency explicit (bsc#928138,fate#319026).\n- powerpc: Make the vdso32 also build big-endian (bsc#967716).\n- powerpc: Move kdump default base address to half RMO size on 64bit (bsc#1003344).\n- powerpc: Remove altivec fix for gcc versions before 4.0 (bsc#967716).\n- powerpc: Remove buggy 9-year-old test for binutils \u003c 2.12.1 (bsc#967716).\n- powerpc: Rename USER_ESID_BITS* to ESID_BITS* (bsc#928138,fate#319026).\n- powerpc: Require gcc 4.0 on 64-bit (bsc#967716).\n- powerpc: Update kernel VSID range (bsc#928138,fate#319026).\n- powerpc: blacklist fixes for unsupported subarchitectures ppc32 only: 6e0fdf9af216 powerpc: fix typo 'CONFIG_PMAC'\n  obscure hardware: f7e9e3583625 powerpc: Fix missing L2 cache size in /sys/devices/system/cpu\n- powerpc: dtc is required to build dtb files (bsc#967716).\n- powerpc: fix typo 'CONFIG_PPC_CPU' (bsc#1010201, [2016-10-04] Pending Base Kernel Fixes).\n- powerpc: scan_features() updates incorrect bits for REAL_LE (bsc#1010201, [2016-10-04] Pending Base Kernel Fixes).\n- printk/sched: Introduce special printk_sched() for those awkward (bsc#1013042, bsc#996541, bsc#1015878).\n- ptrace: __ptrace_may_access() should not deny sub-threads (bsc#1012851).\n- qlcnic: fix a loop exit condition better (bsc#909350).\n- qlcnic: fix a timeout loop (bsc#909350)\n- qlcnic: use the correct ring in qlcnic_83xx_process_rcv_ring_diag() (bnc#800999).\n- reiserfs: fix race in prealloc discard (bsc#987576).\n- rpm/constraints.in: Bump ppc64 disk requirements to fix OBS builds again\n- rpm/kernel-binary.spec.in: Export a make-stderr.log file (bsc#1012422)\n- rpm/package-descriptions: add -bigmem description\n- rt2x00: fix rfkill regression on rt2500pci (bnc#748806).\n- s390/cio: fix accidental interrupt enabling during resume (bnc#1003677, LTC#147606).\n- s390/time: LPAR offset handling (bnc#1003677, LTC#146920).\n- s390/time: move PTFF definitions (bnc#1003677, LTC#146920).\n- scsi: lpfc: Set elsiocb contexts to NULL after freeing it (bsc#996557).\n- scsi: lpfc: avoid double free of resource identifiers (bsc#989896).\n- scsi: zfcp: spin_lock_irqsave() is not nestable (bsc#1003677,LTC#147374).\n- scsi_error: count medium access timeout only once per EH run (bsc#993832).\n- scsi_error: fixup crash in scsi_eh_reset (bsc#993832)\n- serial: 8250_pci: Detach low-level driver during PCI error recovery (bsc#1013070).\n- sfc: on MC reset, clear PIO buffer linkage in TXQs (bsc#909618).\n- softirq: sirq threads raising another sirq delegate to the proper thread Otherwise, high priority timer threads expend\n  cycles precessing other sirqs, potentially increasing wakeup latencies as thes process sirqs at a priority other than\n  the priority specified by the user.\n- sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a race (bnc#803320).\n- sunrpc: Enforce an upper limit on the number of cached credentials (bsc#1012917).\n- sunrpc: Fix reconnection timeouts (bsc#1014410).\n- sunrpc: Fix two issues with drop_caches and the sunrpc auth cache (bsc#1012917).\n- sunrpc: Limit the reconnect backoff timer to the max RPC message timeout (bsc#1014410).\n- tcp: fix inet6_csk_route_req() for link-local addresses (bsc#1010175).\n- tcp: pass fl6 to inet6_csk_route_req() (bsc#1010175).\n- tcp: plug dst leak in tcp_v6_conn_request() (bsc#1010175).\n- tcp: use inet6_csk_route_req() in tcp_v6_send_synack() (bsc#1010175).\n- tg3: Avoid NULL pointer dereference in tg3_io_error_detected() (bsc#908458).\n- tg3: Fix temperature reporting (bnc#790588).\n- tty: Signal SIGHUP before hanging up ldisc (bnc#989764).\n- usb: console: fix potential use after free (bsc#1015817).\n- usb: console: fix uninitialised ldisc semaphore (bsc#1015817).\n- usb: cp210x: Corrected USB request type definitions (bsc#1015932).\n- usb: cp210x: relocate private data from USB interface to port (bsc#1015932).\n- usb: cp210x: work around cp2108 GET_LINE_CTL bug (bsc#1015932).\n- usb: ftdi_sio: fix null deref at port probe (bsc#1015796).\n- usb: hub: Fix auto-remount of safely removed or ejected USB-3 devices (bsc#922634).\n- usb: hub: Fix unbalanced reference count/memory leak/deadlocks (bsc#968010).\n- usb: ipaq.c: fix a timeout loop (bsc#1015848).\n- usb: opticon: fix non-atomic allocation in write path (bsc#1015803).\n- usb: option: fix runtime PM handling (bsc#1015752).\n- usb: serial: cp210x: add 16-bit register access functions (bsc#1015932).\n- usb: serial: cp210x: add 8-bit and 32-bit register access functions (bsc#1015932).\n- usb: serial: cp210x: add new access functions for large registers (bsc#1015932).\n- usb: serial: cp210x: fix hardware flow-control disable (bsc#1015932).\n- usb: serial: fix potential use-after-free after failed probe (bsc#1015828).\n- usb: serial: io_edgeport: fix memory leaks in attach error path (bsc#1016505).\n- usb: serial: io_edgeport: fix memory leaks in probe error path (bsc#1016505).\n- usb: serial: keyspan: fix use-after-free in probe error path (bsc#1016520).\n- usb: sierra: fix AA deadlock in open error path (bsc#1015561).\n- usb: sierra: fix remote wakeup (bsc#1015561).\n- usb: sierra: fix urb and memory leak in resume error path (bsc#1015561).\n- usb: sierra: fix urb and memory leak on disconnect (bsc#1015561).\n- usb: sierra: fix use after free at suspend/resume (bsc#1015561).\n- usb: usb_wwan: fix potential blocked I/O after resume (bsc#1015760).\n- usb: usb_wwan: fix race between write and resume (bsc#1015760).\n- usb: usb_wwan: fix urb leak at shutdown (bsc#1015760).\n- usb: usb_wwan: fix urb leak in write error path (bsc#1015760).\n- usb: usb_wwan: fix write and suspend race (bsc#1015760).\n- usbhid: add ATEN CS962 to list of quirky devices (bsc#1007615).\n- usblp: do not set TASK_INTERRUPTIBLE before lock (bsc#1015844).\n- vmxnet3: Wake queue from reset work (bsc#999907).\n- x86, amd_nb: Clarify F15h, model 30h GART and L3 support\n- x86/MCE/intel: Cleanup CMCI storm logic (bsc#929141).\n- x86/asm/traps: Disable tracing and kprobes in fixup_bad_iret and sync_regs (bsc#909077).\n- x86/cpu/amd: Set X86_FEATURE_EXTD_APICID for future processors\n- x86/gart: Check for GART support before accessing GART registers\n- xenbus: do not invoke -\u003eis_ready() for most device states (bsc#987333).\n- zcrypt: Fix hang condition on crypto card config-off (bsc#1016320).\n- zcrypt: Fix invalid domain response handling (bsc#1016320).\n- zfcp: Fix erratic device offline during EH (bsc#993832).\n- zfcp: close window with unblocked rport during rport gone (bnc#1003677).\n- zfcp: fix D_ID field with actual value on tracing SAN responses (bnc#1003677).\n- zfcp: fix ELS/GS request\u0026response length for hardware data router (bnc#1003677).\n- zfcp: fix payload trace length for SAN request\u0026response (bnc#1003677).\n- zfcp: restore tracing of handle for port and LUN with HBA records (bnc#1003677).\n- zfcp: restore: Dont use 0 to indicate invalid LUN in rec trace (bnc#1003677).\n- zfcp: retain trace level for SCSI and HBA FSF response records (bnc#1003677).\n- zfcp: trace full payload of all SAN records (req,resp,iels) (bnc#1003677).\n- zfcp: trace on request for open and close of WKA port (bnc#1003677).\n","status":"published","published":"2017-04-25T14:34:26Z","modified":"2026-02-04T04:21:23.91396Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1247-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2015-1350: The VFS subsystem in the Linux kernel provided an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allowed local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program (bnc#914939).\n- CVE-2016-2117: The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel incorrectly enabled scatter/gather I/O, which allowed remote attackers to obtain sensitive information from kernel memory by reading packet data (bnc#968697).\n- CVE-2016-3070: The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel improperly interacted with mm/migrate.c, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move (bnc#979215).\n- CVE-2016-5243: The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel did not properly copy a certain string, which allowed local users to obtain sensitive information from kernel stack memory by reading a Netlink message (bnc#983212).\n- CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bnc#1003077).\n- CVE-2016-9588: arch/x86/kvm/vmx.c in the Linux kernel mismanages the #BP and #OF exceptions, which allowed guest OS users to cause a denial of service (guest OS crash) by declining to handle an exception thrown by an L2 guest (bnc#1015703).\n- CVE-2016-10044: The aio_mount function in fs/aio.c in the Linux kernel did not properly restrict execute access, which made it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call (bnc#1023992).\n- CVE-2016-10200: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c (bnc#1028415).\n- CVE-2016-10208: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel did not properly validate meta block groups, which allowed physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image (bnc#1023377).\n- CVE-2017-2671: The ping_unhash function in net/ipv4/ping.c in the Linux kernel is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allowed local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call (bnc#1031003).\n- CVE-2017-5669: The do_shmat function in ipc/shm.c in the Linux kernel did not restrict the address calculated by a certain rounding operation, which allowed local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context (bnc#1026914).\n- CVE-2017-5897: The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allowed remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access (bnc#1023762).\n- CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bnc#1024938).\n- CVE-2017-5986: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel allowed local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state (bnc#1025235).\n- CVE-2017-6074: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel mishandled DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allowed local users to obtain root privileges or cause a denial of service (double free) via an application that made an IPV6_RECVPKTINFO setsockopt system call (bnc#1026024).\n- CVE-2017-6214: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel allowed remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag (bnc#1026722).\n- CVE-2017-6345: The LLC subsystem in the Linux kernel did not ensure that a certain destructor exists in required circumstances, which allowed local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls (bnc#1027190).\n- CVE-2017-6346: Race condition in net/packet/af_packet.c in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that made PACKET_FANOUT setsockopt system calls (bnc#1027189).\n- CVE-2017-6348: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel improperly managed lock dropping, which allowed local users to cause a denial of service (deadlock) via crafted operations on IrDA devices (bnc#1027178).\n- CVE-2017-6353: net/sctp/socket.c in the Linux kernel did not properly restrict association peel-off operations during certain wait states, which allowed local users to cause a denial of service (invalid unlock and double free) via a multithreaded application.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986 (bnc#1027066).\n- CVE-2017-7187: The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function (bnc#1030213).\n- CVE-2017-7261: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not check for a zero value of certain levels data, which allowed local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031052).\n- CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031440).\n- CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bnc#1031579).\n- CVE-2017-7616: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel allowed local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation (bnc#1033336).\n\nThe following non-security bugs were fixed:\n\n- ext4: fix fencepost in s_first_meta_bg validation (bsc#1029986).\n- hwrng: virtio - ensure reads happen after successful probe (bsc#954763 bsc#1032344).\n- kgr/module: make a taint flag module-specific (fate#313296).\n- l2tp: fix address test in __l2tp_ip6_bind_lookup() (bsc#1028415).\n- l2tp: fix lookup for sockets not bound to a device in l2tp_ip (bsc#1028415).\n- l2tp: fix racy socket lookup in l2tp_ip and l2tp_ip6 bind() (bsc#1028415).\n- l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv() (bsc#1028415).\n- l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6 (bsc#1028415).\n- l2tp: lock socket before checking flags in connect() (bsc#1028415).\n- mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp (bnc#1030118).\n- module: move add_taint_module() to a header file (fate#313296).\n- netfilter: bridge: Fix the build when IPV6 is disabled (bsc#1027149).\n- nfs: flush out dirty data on file fput() (bsc#1021762).\n- powerpc: Blacklist GCC 5.4 6.1 and 6.2 (boo#1028895).\n- powerpc: Reject binutils 2.24 when building little endian (boo#1028895).\n- revert 'procfs: mark thread stack correctly in proc/\u003cpid\u003e/maps' (bnc#1030901).\n- taint/module: Clean up global and module taint flags handling (fate#313296).\n- usb: serial: kl5kusb105: fix line-state error handling (bsc#1021256).\n- xfs_dmapi: fix the debug compilation of xfs_dmapi (bsc#989056).\n- xfs: fix buffer overflow dm_get_dirattrs/dm_get_dirattrs2 (bsc#989056).\n","status":"published","published":"2017-05-11T14:24:14Z","modified":"2026-02-04T04:27:50.154633Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1360-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.74 to receive various security and bugfixes.\n\nNotable new/improved features:\n- Improved support for Hyper-V\n- Support for the tcp_westwood TCP scheduling algorithm\n\nThe following security bugs were fixed:\n\n- CVE-2017-8106: The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel allowed privileged KVM guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via a single-context INVEPT instruction with a NULL EPT pointer (bsc#1035877).\n- CVE-2017-6951: The keyring_search_aux function in security/keys/keyring.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the 'dead' type. (bsc#1029850).\n- CVE-2017-2647: The KEYS subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c. (bsc#1030593)\n- CVE-2016-9604: This fixes handling of keyrings starting with '.' in KEYCTL_JOIN_SESSION_KEYRING, which could have allowed local users to manipulate privileged keyrings (bsc#1035576)\n- CVE-2017-7616: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel allowed local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation. (bnc#1033336).\n- CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c. (bsc#1034670).\n- CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bnc#1031579)\n- CVE-2017-2671: The ping_unhash function in net/ipv4/ping.c in the Linux kernel was  too late in obtaining a certain lock and consequently could not ensure that disconnect function calls are safe, which allowed local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call (bnc#1031003)\n- CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031440)\n- CVE-2017-7261: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not check for a zero value of certain levels data, which allowed local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031052)\n- CVE-2017-7187: The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function (bnc#1030213)\n- CVE-2016-9588: arch/x86/kvm/vmx.c in the Linux kernel mismanaged the #BP and #OF exceptions, which allowed guest OS users to cause a denial of service (guest OS crash) by declining to handle an exception thrown by an L2 guest (bsc#1015703).\n- CVE-2017-5669: The do_shmat function in ipc/shm.c in the Linux kernel did not restrict the address calculated by a certain rounding operation, which allowed local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context (bnc#1026914).\n- CVE-2016-10200: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c (bnc#1028415)\n- CVE-2016-10208: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel did not properly validate meta block groups, which allowed physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image (bnc#1023377).\n- CVE-2017-5897: The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allowed remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access (bsc#1023762).\n- CVE-2017-5986: A race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel allowed local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state (bsc#1025235).\n- CVE-2017-6074: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel mishandled DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allowed local users to obtain root privileges or cause a denial of service (double free) via an application that made an IPV6_RECVPKTINFO setsockopt system call (bnc#1026024)\n- CVE-2016-9191: The cgroup offline implementation in the Linux kernel mishandled certain drain operations, which allowed local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application (bnc#1008842)\n- CVE-2017-6348: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel improperly managed lock dropping, which allowed local users to cause a denial of service (deadlock) via crafted operations on IrDA devices (bnc#1027178).\n- CVE-2016-10044: The aio_mount function in fs/aio.c in the Linux kernel did not properly restrict execute access, which made it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call (bnc#1023992).\n- CVE-2016-3070: The trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux kernel improperly interacts with mm/migrate.c, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by triggering a certain page move (bnc#979215).\n- CVE-2016-5243: The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel did not properly copy a certain string, which allowed local users to obtain sensitive information from kernel stack memory by reading a Netlink message (bnc#983212).\n- CVE-2017-6345: The LLC subsystem in the Linux kernel did not ensure that a certain destructor exists in required circumstances, which allowed local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls (bnc#1027190)\n- CVE-2017-6346: Race condition in net/packet/af_packet.c in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that made PACKET_FANOUT setsockopt system calls (bnc#1027189)\n- CVE-2017-6353: net/sctp/socket.c in the Linux kernel did not properly restrict association peel-off operations during certain wait states, which allowed local users to cause a denial of service (invalid unlock and double free) via a multithreaded application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986 (bnc#1027066)\n- CVE-2017-5986: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel allowed local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state (bsc#1025235).\n- CVE-2017-6214: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel allowed remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag (bnc#1026722)\n- CVE-2016-2117: The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel incorrectly enables scatter/gather I/O, which allowed remote attackers to obtain sensitive information from kernel memory by reading packet data (bnc#968697)\n- CVE-2015-1350: The VFS subsystem in the Linux kernel provided an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allowed local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program (bsc#914939).\n- CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bsc#1003077).\n\nThe following non-security bugs were fixed:\n\n- ACPI / APEI: Fix NMI notification handling (bsc#917630).\n- arch: Mass conversion of smp_mb__*() (bsc#1020795).\n- asm-generic: add __smp_xxx wrappers (bsc#1020795).\n- block: remove struct request buffer member (bsc#1020795).\n- block: submit_bio_wait() conversions (bsc#1020795).\n- bonding: Advertize vxlan offload features when supported (bsc#1009682).\n- bonding: handle more gso types (bsc#1009682).\n- bonding: use the correct ether type for alb (bsc#1028595).\n- btrfs: allow unlink to exceed subvolume quota (bsc#1015821).\n- btrfs: Change qgroup_meta_rsv to 64bit (bsc#1015821).\n- btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls (bsc#1018100).\n- btrfs: make file clone aware of fatal signals (bsc#1015787).\n- btrfs: qgroups: Retry after commit on getting EDQUOT (bsc#1015821).\n- cancel the setfilesize transation when io error happen (bsc#1028648).\n- cgroup: remove stray references to css_id (bsc#1020795).\n- cpuidle: powernv/pseries: Auto-promotion of snooze to deeper idle state (bnc#1023164).\n- dm: add era target (bsc#1020795).\n- dm: allow remove to be deferred (bsc#1020795).\n- dm bitset: only flush the current word if it has been dirtied (bsc#1020795).\n- dm btree: add dm_btree_find_lowest_key (bsc#1020795).\n- dm cache: actually resize cache (bsc#1020795).\n- dm cache: add block sizes and total cache blocks to status output (bsc#1020795).\n- dm cache: add cache block invalidation support (bsc#1020795).\n- dm cache: add passthrough mode (bsc#1020795).\n- dm cache: add policy name to status output (bsc#1020795).\n- dm cache: add remove_cblock method to policy interface (bsc#1020795).\n- dm cache: be much more aggressive about promoting writes to discarded blocks (bsc#1020795).\n- dm cache: cache shrinking support (bsc#1020795).\n- dm cache: do not add migration to completed list before unhooking bio (bsc#1020795).\n- dm cache: fix a lock-inversion (bsc#1020795).\n- dm cache: fix truncation bug when mapping I/O to more than 2TB fast device (bsc#1020795).\n- dm cache: fix writethrough mode quiescing in cache_map (bsc#1020795).\n- dm cache: improve efficiency of quiescing flag management (bsc#1020795).\n- dm cache: io destined for the cache device can now serve as tick bios (bsc#1020795).\n- dm cache: log error message if dm_kcopyd_copy() fails (bsc#1020795).\n- dm cache metadata: check the metadata version when reading the superblock (bsc#1020795).\n- dm cache metadata: return bool from __superblock_all_zeroes (bsc#1020795).\n- dm cache: move hook_info into common portion of per_bio_data structure (bsc#1020795).\n- dm cache: optimize commit_if_needed (bsc#1020795).\n- dm cache policy mq: a few small fixes (bsc#1020795).\n- dm cache policy mq: fix promotions to occur as expected (bsc#1020795).\n- dm cache policy mq: implement writeback_work() and mq_{set,clear}_dirty() (bsc#1020795).\n- dm cache policy mq: introduce three promotion threshold tunables (bsc#1020795).\n- dm cache policy mq: protect residency method with existing mutex (bsc#1020795).\n- dm cache policy mq: reduce memory requirements (bsc#1020795).\n- dm cache policy mq: use list_del_init instead of list_del + INIT_LIST_HEAD (bsc#1020795).\n- dm cache policy: remove return from void policy_remove_mapping (bsc#1020795).\n- dm cache: promotion optimisation for writes (bsc#1020795).\n- dm cache: resolve small nits and improve Documentation (bsc#1020795).\n- dm cache: return -EINVAL if the user specifies unknown cache policy (bsc#1020795).\n- dm cache: use cell_defer() boolean argument consistently (bsc#1020795).\n- dm: change sector_count member in clone_info from sector_t to unsigned (bsc#1020795).\n- dm crypt: add TCW IV mode for old CBC TCRYPT containers (bsc#1020795).\n- dm crypt: properly handle extra key string in initialization (bsc#1020795).\n- dm delay: use per-bio data instead of a mempool and slab cache (bsc#1020795).\n- dm: fix Kconfig indentation (bsc#1020795).\n- dm: fix Kconfig menu indentation (bsc#1020795).\n- dm: make dm_table_alloc_md_mempools static (bsc#1020795).\n- dm mpath: do not call pg_init when it is already running (bsc#1020795).\n- dm mpath: fix lock order inconsistency in multipath_ioctl (bsc#1020795).\n- dm mpath: print more useful warnings in multipath_message() (bsc#1020795).\n- dm mpath: push back requests instead of queueing (bsc#1020795).\n- dm mpath: really fix lockdep warning (bsc#1020795).\n- dm mpath: reduce memory pressure when requeuing (bsc#1020795).\n- dm mpath: remove extra nesting in map function (bsc#1020795).\n- dm mpath: remove map_io() (bsc#1020795).\n- dm mpath: remove process_queued_ios() (bsc#1020795).\n- dm mpath: requeue I/O during pg_init (bsc#1020795).\n- dm persistent data: cleanup dm-thin specific references in text (bsc#1020795).\n- dm snapshot: call destroy_work_on_stack() to pair with INIT_WORK_ONSTACK() (bsc#1020795).\n- dm snapshot: fix metadata corruption (bsc#1020795).\n- dm snapshot: prepare for switch to using dm-bufio (bsc#1020795).\n- dm snapshot: use dm-bufio (bsc#1020795).\n- dm snapshot: use dm-bufio prefetch (bsc#1020795).\n- dm snapshot: use GFP_KERNEL when initializing exceptions (bsc#1020795).\n- dm space map disk: optimise sm_disk_dec_block (bsc#1020795).\n- dm space map metadata: limit errors in sm_metadata_new_block (bsc#1020795).\n- dm: stop using bi_private (bsc#1020795).\n- dm table: add dm_table_run_md_queue_async (bsc#1020795).\n- dm table: print error on preresume failure (bsc#1020795).\n- dm table: remove unused buggy code that extends the targets array (bsc#1020795).\n- dm thin: add error_if_no_space feature (bsc#1020795).\n- dm thin: add mappings to end of prepared_* lists (bsc#1020795).\n- dm thin: add 'no_space_timeout' dm-thin-pool module param (bsc#1020795).\n- dm thin: add timeout to stop out-of-data-space mode holding IO forever (bsc#1020795).\n- dm thin: allow metadata commit if pool is in PM_OUT_OF_DATA_SPACE mode (bsc#1020795).\n- dm thin: allow metadata space larger than supported to go unused (bsc#1020795).\n- dm thin: cleanup and improve no space handling (bsc#1020795).\n- dm thin: eliminate the no_free_space flag (bsc#1020795).\n- dm thin: ensure user takes action to validate data and metadata consistency (bsc#1020795).\n- dm thin: factor out check_low_water_mark and use bools (bsc#1020795).\n- dm thin: fix deadlock in __requeue_bio_list (bsc#1020795).\n- dm thin: fix noflush suspend IO queueing (bsc#1020795).\n- dm thin: fix out of data space handling (bsc#1020795).\n- dm thin: fix pool feature parsing (bsc#1020795).\n- dm thin: fix rcu_read_lock being held in code that can sleep (bsc#1020795).\n- dm thin: handle metadata failures more consistently (bsc#1020795).\n- dm thin: irqsave must always be used with the pool-\u003elock spinlock (bsc#1020795).\n- dm thin: log info when growing the data or metadata device (bsc#1020795).\n- dm thin: requeue bios to DM core if no_free_space and in read-only mode (bsc#1020795).\n- dm thin: return error from alloc_data_block if pool is not in write mode (bsc#1020795).\n- dm thin: simplify pool_is_congested (bsc#1020795).\n- dm thin: sort the per thin deferred bios using an rb_tree (bsc#1020795).\n- dm thin: synchronize the pool mode during suspend (bsc#1020795).\n- dm thin: use bool rather than unsigned for flags in structures (bsc#1020795).\n- dm thin: use INIT_WORK_ONSTACK in noflush_work to avoid ODEBUG warning (bsc#1020795).\n- dm thin: use per thin device deferred bio lists (bsc#1020795).\n- dm: use RCU_INIT_POINTER instead of rcu_assign_pointer in __unbind (bsc#1020795).\n- drm/i915: relax uncritical udelay_range() (bsc#1038261).\n- ether: add loopback type ETH_P_LOOPBACK (bsc#1028595).\n- ext4: fix bh leak on error paths in ext4_rename() and ext4_cross_rename() (bsc#1012985).\n- ext4: fix fencepost in s_first_meta_bg validation (bsc#1029986).\n- ext4: mark inode dirty after converting inline directory (bsc#1012985).\n- ftrace: Make ftrace_location_range() global (FATE#322421).\n- HID: usbhid: improve handling of Clear-Halt and reset (bsc#1031080).\n- hv: util: catch allocation errors\n- hv: utils: use memdup_user in hvt_op_write\n- hwrng: virtio - ensure reads happen after successful probe (bsc#954763 bsc#1032344).\n- i40e: avoid null pointer dereference (bsc#922853).\n- i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (bsc#985561).\n- i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (bsc#985561).\n- i40e/i40evf: Rewrite logic for 8 descriptor per packet check (bsc#985561).\n- i40e: Impose a lower limit on gso size (bsc#985561).\n- i40e: Limit TX descriptor count in cases where frag size is greater than 16K (bsc#985561).\n- iommu/vt-d: Flush old iommu caches for kdump when the device gets context mapped (bsc#1023824).\n- iommu/vt-d: Tylersburg isoch identity map check is done too late (bsc#1032125).\n- ipv6: make ECMP route replacement less greedy (bsc#930399).\n- kabi: hide changes in struct sk_buff (bsc#1009682).\n- KABI: Hide new include in arch/powerpc/kernel/process.c (fate#322421).\n- kABI: mask struct xfs_icdinode change (bsc#1024788).\n- kABI: protect struct inet6_dev (kabi).\n- kABI: protect struct iscsi_conn (bsc#103470).\n- kABI: protect struct xfs_buftarg and struct xfs_mount (bsc#1024508).\n- kABI: restore can_rx_register parameters (kabi).\n- kernel/watchdog: use nmi registers snapshot in hardlockup handler (bsc#940946, bsc#937444).\n- kgr: Mark eeh_event_handler() kthread safe using a timeout (bsc#1031662).\n- kgr/module: make a taint flag module-specific\n- kgr: remove unneeded kgr_needs_lazy_migration() s390x definition\n- l2tp: fix address test in __l2tp_ip6_bind_lookup() (bsc#1028415).\n- l2tp: fix lookup for sockets not bound to a device in l2tp_ip (bsc#1028415).\n- l2tp: fix racy socket lookup in l2tp_ip and l2tp_ip6 bind() (bsc#1028415).\n- l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv() (bsc#1028415).\n- l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6 (bsc#1028415).\n- l2tp: lock socket before checking flags in connect() (bsc#1028415).\n- livepatch: Allow architectures to specify an alternate ftrace location (FATE#322421).\n- locking/semaphore: Add down_interruptible_timeout() (bsc#1031662).\n- md: avoid oops on unload if some process is in poll or select (bsc#1020795).\n- md: Convert use of typedef ctl_table to struct ctl_table (bsc#1020795).\n- md: ensure metadata is writen after raid level change (bsc#1020795).\n- md linear: fix a race between linear_add() and linear_congested() (bsc#1018446).\n- md: md_clear_badblocks should return an error code on failure (bsc#1020795).\n- md: refuse to change shape of array if it is active but read-only (bsc#1020795).\n- megaraid_sas: add missing curly braces in ioctl handler (bsc#1023207).\n- megaraid_sas: Fixup tgtid count in megasas_ld_list_query() (bsc#971933).\n- mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp (bnc#1030118).\n- mm, memcg: do not retry precharge charges (bnc#1022559).\n- mm/mempolicy.c: do not put mempolicy before using its nodemask (References: VM Performance, bnc#931620).\n- mm/page_alloc: fix nodes for reclaim in fast path (bnc#1031842).\n- module: move add_taint_module() to a header file\n- net: Add skb_gro_postpull_rcsum to udp and vxlan (bsc#1009682).\n- net: add skb_pop_rcv_encapsulation (bsc#1009682).\n- net: Call skb_checksum_init in IPv4 (bsc#1009682).\n- net: Call skb_checksum_init in IPv6 (bsc#1009682).\n- netfilter: allow logging fron non-init netns (bsc#970083).\n- net: Generalize checksum_init functions (bsc#1009682).\n- net: Preserve CHECKSUM_COMPLETE at validation (bsc#1009682).\n- NFS: do not try to cross a mountpount when there isn't one there (bsc#1028041).\n- NFS: Expedite unmount of NFS auto-mounts (bnc#1025802).\n- NFS: Fix a performance regression in readdir (bsc#857926).\n- NFS: flush out dirty data on file fput() (bsc#1021762).\n- ocfs2: do not write error flag to user structure we cannot copy from/to (bsc#1012985).\n- powerpc: Blacklist GCC 5.4 6.1 and 6.2 (boo#1028895).\n- powerpc: Create a helper for getting the kernel toc value (FATE#322421).\n- powerpc/fadump: Fix the race in crash_fadump() (bsc#1022971).\n- powerpc/fadump: Reserve memory at an offset closer to bottom of RAM (bsc#1032141).\n- powerpc/fadump: Update fadump documentation (bsc#1032141).\n- powerpc/ftrace: Add Kconfig \u0026 Make glue for mprofile-kernel (FATE#322421).\n- powerpc/ftrace: Add support for -mprofile-kernel ftrace ABI (FATE#322421).\n- powerpc/ftrace: Use $(CC_FLAGS_FTRACE) when disabling ftrace (FATE#322421).\n- powerpc/ftrace: Use generic ftrace_modify_all_code() (FATE#322421).\n- powerpc: introduce TIF_KGR_IN_PROGRESS thread flag (FATE#322421).\n- powerpc/kgraft: Add kgraft header (FATE#322421).\n- powerpc/kgraft: Add kgraft stack to struct thread_info (FATE#322421).\n- powerpc/kgraft: Add live patching support on ppc64le (FATE#322421).\n- powerpc/module: Create a special stub for ftrace_caller() (FATE#322421).\n- powerpc/module: Mark module stubs with a magic value (FATE#322421).\n- powerpc/module: Only try to generate the ftrace_caller() stub once (FATE#322421).\n- powerpc/modules: Never restore r2 for a mprofile-kernel style mcount() call (FATE#322421).\n- powerpc/prom: Increase minimum RMA size to 512MB (bsc#984530).\n- powerpc/pseries/cpuidle: Remove MAX_IDLE_STATE macro (bnc#1023164).\n- powerpc/pseries/cpuidle: Use cpuidle_register() for initialisation (bnc#1023164).\n- powerpc: Reject binutils 2.24 when building little endian (boo#1028895).\n- RAID1: avoid unnecessary spin locks in I/O barrier code (bsc#982783,bsc#1020048).\n- raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang\n- remove mpath patches from dmcache backport, for bsc#1035738\n- revert 'procfs: mark thread stack correctly in proc/PID/maps' (bnc#1030901).\n- Revert 'RDMA/core: Fix incorrect structure packing for booleans' (kabi).\n- rtnetlink: allow to register ops without ops-\u003esetup set (bsc#1021374).\n- s390/zcrypt: Introduce CEX6 toleration (FATE#321783, LTC#147506, bsc#1019514).\n- sched/loadavg: Avoid loadavg spikes caused by delayed NO_HZ accounting (bsc#1018419).\n- scsi_error: count medium access timeout only once per EH run (bsc#993832, bsc#1032345).\n- scsi: libiscsi: add lock around task lists to fix list corruption regression (bsc#1034700).\n- scsi: storvsc: fix SRB_STATUS_ABORTED handling\n- sfc: reduce severity of PIO buffer alloc failures (bsc#1019168).\n- svcrpc: fix gss-proxy NULL dereference in some error cases (bsc#1024309).\n- taint/module: Clean up global and module taint flags handling\n- tcp: abort orphan sockets stalling on zero window probes (bsc#1021913).\n- thp: fix MADV_DONTNEED vs. numa balancing race (bnc#1027974).\n- thp: reduce indentation level in change_huge_pmd() (bnc#1027974).\n- treewide: fix 'distingush' typo (bsc#1020795).\n- tree-wide: use reinit_completion instead of INIT_COMPLETION (bsc#1020795).\n- usb: dwc3: gadget: Fix incorrect DEPCMD and DGCMD status macros (bsc#1035699).\n- usb: host: xhci: print correct command ring address (bnc#1035699).\n- USB: serial: kl5kusb105: fix line-state error handling (bsc#1021256).\n- vfs: Do not exchange 'short' filenames unconditionally (bsc#1012985).\n- vfs: split generic splice code from i_mutex locking (bsc#1024788).\n- vmxnet3: segCnt can be 1 for LRO packets (bsc#988065).\n- VSOCK: Detach QP check should filter out non matching QPs (bsc#1036752).\n- vxlan: cancel sock_work in vxlan_dellink() (bsc#1031567).\n- vxlan: Checksum fixes (bsc#1009682).\n- vxlan: GRO support at tunnel layer (bsc#1009682).\n- xen-blkfront: correct maximum segment accounting (bsc#1018263).\n- xen-blkfront: do not call talk_to_blkback when already connected to blkback.\n- xen-blkfront: free resources if xlvbd_alloc_gendisk fails.\n- xfs_dmapi: fix the debug compilation of xfs_dmapi (bsc#989056).\n- xfs: do not allow di_size with high bit set (bsc#1024234).\n- xfs: do not assert fail on non-async buffers on ioacct decrement (bsc#1024508).\n- xfs: exclude never-released buffers from buftarg I/O accounting (bsc#1024508).\n- xfs: fix broken multi-fsb buffer logging (bsc#1024081).\n- xfs: fix buffer overflow dm_get_dirattrs/dm_get_dirattrs2 (bsc#989056).\n- xfs: Fix lock ordering in splice write (bsc#1024788).\n- xfs: fix up xfs_swap_extent_forks inline extent handling (bsc#1023888).\n- xfs: Make xfs_icdinode-\u003edi_dmstate atomic_t (bsc#1024788).\n- xfs: pass total block res. as total xfs_bmapi_write() parameter (bsc#1029470).\n- xfs: replace global xfslogd wq with per-mount wq (bsc#1024508).\n- xfs: track and serialize in-flight async buffers against unmount (bsc#1024508).\n","status":"published","published":"2017-05-19T12:12:38Z","modified":"2026-02-04T03:19:59.910788Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3361-1","title":"linux-hwe vulnerabilities","description":"USN-3358-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04.\nThis update provides the corresponding updates for the Linux Hardware\nEnablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Please\nnote that this update changes the Linux HWE kernel to the 4.10 based\nkernel from Ubuntu 17.04, superseding the 4.8 based HWE kernel from\nUbuntu 16.10.\n\nBen Harris discovered that the Linux kernel would strip extended privilege\nattributes of files when performing a failed unprivileged system call. A\nlocal attacker could use this to cause a denial of service. (CVE-2015-1350)\n\nRalf Spenneberg discovered that the ext4 implementation in the Linux kernel\ndid not properly validate meta block groups. An attacker with physical\naccess could use this to specially craft an ext4 image that causes a denial\nof service (system crash). (CVE-2016-10208)\n\nPeter Pi discovered that the colormap handling for frame buffer devices in\nthe Linux kernel contained an integer overflow. A local attacker could use\nthis to disclose sensitive information (kernel memory). (CVE-2016-8405)\n\nIt was discovered that an integer overflow existed in the InfiniBand RDMA\nover ethernet (RXE) transport implementation in the Linux kernel. A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-8636)\n\nVlad Tsyrklevich discovered an integer overflow vulnerability in the VFIO\nPCI driver for the Linux kernel. A local attacker with access to a vfio PCI\ndevice file could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-9083, CVE-2016-9084)\n\nCAI Qian discovered that the sysctl implementation in the Linux kernel did\nnot properly perform reference counting in some situations. An unprivileged\nattacker could use this to cause a denial of service (system hang).\n(CVE-2016-9191)\n\nIt was discovered that the keyring implementation in the Linux kernel in\nsome situations did not prevent special internal keyrings from being joined\nby userspace keyrings. A privileged local attacker could use this to bypass\nmodule verification. (CVE-2016-9604)\n\nDmitry Vyukov, Andrey Konovalov, Florian Westphal, and Eric Dumazet\ndiscovered that the netfiler subsystem in the Linux kernel mishandled IPv6\npacket reassembly. A local user could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2016-9755)\n\nAndy Lutomirski and Willy Tarreau discovered that the KVM implementation in\nthe Linux kernel did not properly emulate instructions on the SS segment\nregister. A local attacker in a guest virtual machine could use this to\ncause a denial of service (guest OS crash) or possibly gain administrative\nprivileges in the guest OS. (CVE-2017-2583)\n\nDmitry Vyukov discovered that the KVM implementation in the Linux kernel\nimproperly emulated certain instructions. A local attacker could use this\nto obtain sensitive information (kernel memory). (CVE-2017-2584)\n\nDmitry Vyukov discovered that KVM implementation in the Linux kernel\nimproperly emulated the VMXON instruction. A local attacker in a guest OS\ncould use this to cause a denial of service (memory consumption) in the\nhost OS. (CVE-2017-2596)\n\nIt was discovered that SELinux in the Linux kernel did not properly handle\nempty writes to /proc/pid/attr. A local attacker could use this to cause a\ndenial of service (system crash). (CVE-2017-2618)\n\nDaniel Jiang discovered that a race condition existed in the ipv4 ping\nsocket implementation in the Linux kernel. A local privileged attacker\ncould use this to cause a denial of service (system crash). (CVE-2017-2671)\n\nIt was discovered that the freelist-randomization in the SLAB memory\nallocator allowed duplicate freelist entries. A local attacker could use\nthis to cause a denial of service (system crash). (CVE-2017-5546)\n\nIt was discovered that the KLSI KL5KUSB105 serial-to-USB device driver in\nthe Linux kernel did not properly initialize memory related to logging. A\nlocal attacker could use this to expose sensitive information (kernel\nmemory). (CVE-2017-5549)\n\nIt was discovered that a fencepost error existed in the pipe_advance()\nfunction in the Linux kernel. A local attacker could use this to expose\nsensitive information (kernel memory). (CVE-2017-5550)\n\nIt was discovered that the Linux kernel did not clear the setgid bit during\na setxattr call on a tmpfs filesystem. A local attacker could use this to\ngain elevated group privileges. (CVE-2017-5551)\n\nMurray McAllister discovered that an integer overflow existed in the\nVideoCore DRM driver of the Linux kernel. A local attacker could use this\nto cause a denial of service (system crash) or possibly execute arbitrary\ncode. (CVE-2017-5576)\n\nGareth Evans discovered that the shm IPC subsystem in the Linux kernel did\nnot properly restrict mapping page zero. A local privileged attacker could\nuse this to execute arbitrary code. (CVE-2017-5669)\n\nAndrey Konovalov discovered an out-of-bounds access in the IPv6 Generic\nRouting Encapsulation (GRE) tunneling implementation in the Linux kernel.\nAn attacker could use this to possibly expose sensitive information.\n(CVE-2017-5897)\n\nAndrey Konovalov discovered that the IPv4 implementation in the Linux\nkernel did not properly handle invalid IP options in some situations. An\nattacker could use this to cause a denial of service or possibly execute\narbitrary code. (CVE-2017-5970)\n\nDi Shen discovered that a race condition existed in the perf subsystem of\nthe Linux kernel. A local attacker could use this to cause a denial of\nservice or possibly gain administrative privileges. (CVE-2017-6001)\n\nDmitry Vyukov discovered that the Linux kernel did not properly handle TCP\npackets with the URG flag. A remote attacker could use this to cause a\ndenial of service. (CVE-2017-6214)\n\nAndrey Konovalov discovered that the LLC subsytem in the Linux kernel did\nnot properly set up a destructor in certain situations. A local attacker\ncould use this to cause a denial of service (system crash). (CVE-2017-6345)\n\nIt was discovered that a race condition existed in the AF_PACKET handling\ncode in the Linux kernel. A local attacker could use this to cause a denial\nof service (system crash) or possibly execute arbitrary code.\n(CVE-2017-6346)\n\nAndrey Konovalov discovered that the IP layer in the Linux kernel made\nimproper assumptions about internal data layout when performing checksums.\nA local attacker could use this to cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2017-6347)\n\nDmitry Vyukov discovered race conditions in the Infrared (IrDA) subsystem\nin the Linux kernel. A local attacker could use this to cause a denial of\nservice (deadlock). (CVE-2017-6348)\n\nDmitry Vyukov discovered that the generic SCSI (sg) subsystem in the Linux\nkernel contained a stack-based buffer overflow. A local attacker with\naccess to an sg device could use this to cause a denial of service (system\ncrash) or possibly execute arbitrary code. (CVE-2017-7187)\n\nIt was discovered that a NULL pointer dereference existed in the Direct\nRendering Manager (DRM) driver for VMWare devices in the Linux kernel. A\nlocal attacker could use this to cause a denial of service (system crash).\n(CVE-2017-7261)\n\nIt was discovered that the USB Cypress HID drivers for the Linux kernel did\nnot properly validate reported information from the device. An attacker\nwith physical access could use this to expose sensitive information (kernel\nmemory). (CVE-2017-7273)\n\nEric Biggers discovered a memory leak in the keyring implementation in the\nLinux kernel. A local attacker could use this to cause a denial of service\n(memory consumption). (CVE-2017-7472)\n\nIt was discovered that an information leak existed in the set_mempolicy and\nmbind compat syscalls in the Linux kernel. A local attacker could use this\nto expose sensitive information (kernel memory). (CVE-2017-7616)\n\nSabrina Dubroca discovered that the asynchronous cryptographic hash (ahash)\nimplementation in the Linux kernel did not properly handle a full request\nqueue. A local attacker could use this to cause a denial of service\n(infinite recursion). (CVE-2017-7618)\n\nTuomas Haanpää and Ari Kauppi discovered that the NFSv2 and NFSv3 server\nimplementations in the Linux kernel did not properly handle certain long\nRPC replies. A remote attacker could use this to cause a denial of service\n(system crash). (CVE-2017-7645)\n\nTommi Rantala and Brad Spengler discovered that the memory manager in the\nLinux kernel did not properly enforce the CONFIG_STRICT_DEVMEM protection\nmechanism. A local attacker with access to /dev/mem could use this to\nexpose sensitive information or possibly execute arbitrary code.\n(CVE-2017-7889)\n\nTuomas Haanpää and Ari Kauppi discovered that the NFSv2 and NFSv3 server\nimplementations in the Linux kernel did not properly check for the end of\nbuffer. A remote attacker could use this to craft requests that cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2017-7895)\n\nIt was discovered that an integer underflow existed in the Edgeport USB\nSerial Converter device driver of the Linux kernel. An attacker with\nphysical access could use this to expose sensitive information (kernel\nmemory). (CVE-2017-8924)\n\nIt was discovered that the USB ZyXEL omni.net LCD PLUS driver in the Linux\nkernel did not properly perform reference counting. A local attacker could\nuse this to cause a denial of service (tty exhaustion). (CVE-2017-8925)\n\nJann Horn discovered that bpf in Linux kernel does not restrict the output\nof the print_bpf_insn function. A local attacker could use this to obtain\nsensitive address information. (CVE-2017-9150)\n","status":"published","published":"2017-07-21T09:59:15Z","modified":"2026-06-03T14:04:19.16359445Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-4904-1","title":"linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities","description":"Ben Harris discovered that the Linux kernel would strip extended privilege\nattributes of files when performing a failed unprivileged system call. A\nlocal attacker could use this to cause a denial of service. (CVE-2015-1350)\n\nAndrey Konovalov discovered that the video4linux driver for Hauppauge HD\nPVR USB devices in the Linux kernel did not properly handle some error\nconditions. A physically proximate attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2017-16644)\n\nIt was discovered that the timer stats implementation in the Linux kernel\nallowed the discovery of a real PID value while inside a PID namespace. A\nlocal attacker could use this to expose sensitive information.\n(CVE-2017-5967)\n\nWen Xu discovered that the xfs file system implementation in the Linux\nkernel did not properly validate the number of extents in an inode. An\nattacker could use this to construct a malicious xfs image that, when\nmounted, could cause a denial of service (system crash). (CVE-2018-13095)\n\nIt was discovered that the Fujitsu ES network device driver for the Linux\nkernel did not properly check for errors in some situations, leading to a\nNULL pointer dereference. A local attacker could use this to cause a denial\nof service. (CVE-2019-16231)\n\nIt was discovered that the Marvell 8xxx Libertas WLAN device driver in the\nLinux kernel did not properly check for errors in certain situations,\nleading to a NULL pointer dereference. A local attacker could possibly use\nthis to cause a denial of service. (CVE-2019-16232)\n\nIt was discovered that the ADIS16400 IIO IMU Driver for the Linux kernel\ndid not properly deallocate memory in certain error conditions. A local\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2019-19061)\n\nIt was discovered that a race condition existed in the floppy device driver\nin the Linux kernel. An attacker with access to the floppy device could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2021-20261)\n\nOlivier Benjamin, Norbert Manthey, Martin Mazein, and Jan H. Schönherr\ndiscovered that the Xen paravirtualization backend in the Linux kernel did\nnot properly propagate errors to frontend drivers in some situations. An\nattacker in a guest VM could possibly use this to cause a denial of service\n(host domain crash). (CVE-2021-26930)\n\nJan Beulich discovered that multiple Xen backends in the Linux kernel did\nnot properly handle certain error conditions under paravirtualization. An\nattacker in a guest VM could possibly use this to cause a denial of service\n(host domain crash). (CVE-2021-26931)\n\nJan Beulich discovered that the Xen netback backend in the Linux kernel did\nnot properly handle certain error conditions under paravirtualization. An\nattacker in a guest VM could possibly use this to cause a denial of service\n(host domain crash). (CVE-2021-28038)\n","status":"published","published":"2021-04-13T14:51:22Z","modified":"2026-06-03T13:33:56.205396553Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}