{"id":"CVE-2015-2150","aliases":["BELL-CVE-2015-2150","DEBIAN-CVE-2015-2150","DSA-3237-1","EUVD-2015-2260","GHSA-w7jv-fgrf-v497","MGASA-2015-0171","MGASA-2015-0172","MGASA-2015-0219","MGASA-2016-0098","SUSE-RU-2015:0621-1","SUSE-SU-2015:0581-1","SUSE-SU-2015:0658-1","SUSE-SU-2015:0736-1","SUSE-SU-2015:1174-1","SUSE-SU-2015:1376-1","SUSE-SU-2015:1478-1","SUSE-SU-2015:1592-1","SUSE-SU-2015:1611-1","SUSE-SU-2015:1678-1","UBUNTU-CVE-2015-2150","USN-2589-1","USN-2614-1"],"status":"published","title":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to...","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","severity":{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00534,"percentile":0.45308,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2014-09-24T00:35:24Z","modified":"2026-10-28T08:17:10Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.16.7-ckt9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.16.7-ckt9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.16.7-ckt9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-53.88"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-36.48~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.68-1+deb7u1"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1~bpo60+1"],"bundled":9},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-3~deb8u1"}]}],"versions":["3.16.7-ckt9-2","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":9},{"source":"osv","ecosystem":"Mageia:4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.39-1.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.39-1.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-6.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-6.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-16.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-broadcom-wl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.30.223.141-51.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.010.1006-21.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia173","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"173.14.39-36.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.125-6.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"331.113-6.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.39-1.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.41-1.mga4"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-1.5.mga5"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-53.88"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-36.48~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-36.48~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-53.88"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86"],"bundled":4}],"products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"ubuntu","product":"ubuntu"},{"vendor":"xen","product":"xen"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2631-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/af6fc858a35b90e89ea7a7ee58e66628c55c776b","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2632-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3237","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196266","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://xenbits.xen.org/xsa/advisory-120.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1031902","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/73014","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1031806","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://seclists.org/bugtraq/2019/Aug/18","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2150"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=af6fc858a35b90e89ea7a7ee58e66628c55c776b"},{"url":"https://github.com/advisories/GHSA-w7jv-fgrf-v497"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-2150","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-2150","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0171.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15612","tags":["report"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.33","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.34","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.35","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.36","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.37","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.38","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.39","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0172.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15613","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2015-0219.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15614","tags":["report"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.40","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.41","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0098.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16956","tags":["report"]},{"url":"http://xenbits.xen.org/xsa/advisory-117.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-118.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-119.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-121.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-122.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-123.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-124.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-125.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-126.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-127.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-128.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-129.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-130.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-131.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-132.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-133.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-134.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-135.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-136.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-137.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-138.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-139.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-140.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-141.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-142.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-145.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-146.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-147.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-148.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-149.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-150.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-151.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-152.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-153.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-154.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-155.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-156.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-158.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-159.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-162.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-163.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-164.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-165.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-166.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-167.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-168.html","tags":["advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-170.html","tags":["advisory"]},{"url":"http://www.xenproject.org/downloads/xen-archives/xen-45-series/xen-451.html","tags":["web"]},{"url":"http://www.xenproject.org/downloads/xen-archives/xen-45-series/xen-452.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150621-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/599263","tags":["report"]},{"url":"https://bugzilla.suse.com/708296","tags":["report"]},{"url":"https://bugzilla.suse.com/733022","tags":["report"]},{"url":"https://bugzilla.suse.com/745640","tags":["report"]},{"url":"https://bugzilla.suse.com/755743","tags":["report"]},{"url":"https://bugzilla.suse.com/760407","tags":["report"]},{"url":"https://bugzilla.suse.com/763463","tags":["report"]},{"url":"https://bugzilla.suse.com/763968","tags":["report"]},{"url":"https://bugzilla.suse.com/765523","tags":["report"]},{"url":"https://bugzilla.suse.com/767610","tags":["report"]},{"url":"https://bugzilla.suse.com/769035","tags":["report"]},{"url":"https://bugzilla.suse.com/769644","tags":["report"]},{"url":"https://bugzilla.suse.com/770541","tags":["report"]},{"url":"https://bugzilla.suse.com/771619","tags":["report"]},{"url":"https://bugzilla.suse.com/773006","tags":["report"]},{"url":"https://bugzilla.suse.com/773255","tags":["report"]},{"url":"https://bugzilla.suse.com/773837","tags":["report"]},{"url":"https://bugzilla.suse.com/774818","tags":["report"]},{"url":"https://bugzilla.suse.com/779488","tags":["report"]},{"url":"https://bugzilla.suse.com/783475","tags":["report"]},{"url":"https://bugzilla.suse.com/785901","tags":["report"]},{"url":"https://bugzilla.suse.com/786450","tags":["report"]},{"url":"https://bugzilla.suse.com/787843","tags":["report"]},{"url":"https://bugzilla.suse.com/789010","tags":["report"]},{"url":"https://bugzilla.suse.com/789359","tags":["report"]},{"url":"https://bugzilla.suse.com/792271","tags":["report"]},{"url":"https://bugzilla.suse.com/793727","tags":["report"]},{"url":"https://bugzilla.suse.com/794824","tags":["report"]},{"url":"https://bugzilla.suse.com/797090","tags":["report"]},{"url":"https://bugzilla.suse.com/797526","tags":["report"]},{"url":"https://bugzilla.suse.com/797727","tags":["report"]},{"url":"https://bugzilla.suse.com/797909","tags":["report"]},{"url":"https://bugzilla.suse.com/798050","tags":["report"]},{"url":"https://bugzilla.suse.com/800255","tags":["report"]},{"url":"https://bugzilla.suse.com/800875","tags":["report"]},{"url":"https://bugzilla.suse.com/801341","tags":["report"]},{"url":"https://bugzilla.suse.com/801427","tags":["report"]},{"url":"https://bugzilla.suse.com/803320","tags":["report"]},{"url":"https://bugzilla.suse.com/804482","tags":["report"]},{"url":"https://bugzilla.suse.com/804609","tags":["report"]},{"url":"https://bugzilla.suse.com/804950","tags":["report"]},{"url":"https://bugzilla.suse.com/805114","tags":["report"]},{"url":"https://bugzilla.suse.com/805371","tags":["report"]},{"url":"https://bugzilla.suse.com/805740","tags":["report"]},{"url":"https://bugzilla.suse.com/805804","tags":["report"]},{"url":"https://bugzilla.suse.com/806396","tags":["report"]},{"url":"https://bugzilla.suse.com/806976","tags":["report"]},{"url":"https://bugzilla.suse.com/806988","tags":["report"]},{"url":"https://bugzilla.suse.com/806990","tags":["report"]},{"url":"https://bugzilla.suse.com/807434","tags":["report"]},{"url":"https://bugzilla.suse.com/807471","tags":["report"]},{"url":"https://bugzilla.suse.com/807502","tags":["report"]},{"url":"https://bugzilla.suse.com/808015","tags":["report"]},{"url":"https://bugzilla.suse.com/808079","tags":["report"]},{"url":"https://bugzilla.suse.com/808136","tags":["report"]},{"url":"https://bugzilla.suse.com/808837","tags":["report"]},{"url":"https://bugzilla.suse.com/808855","tags":["report"]},{"url":"https://bugzilla.suse.com/808940","tags":["report"]},{"url":"https://bugzilla.suse.com/809122","tags":["report"]},{"url":"https://bugzilla.suse.com/809130","tags":["report"]},{"url":"https://bugzilla.suse.com/809463","tags":["report"]},{"url":"https://bugzilla.suse.com/809895","tags":["report"]},{"url":"https://bugzilla.suse.com/809975","tags":["report"]},{"url":"https://bugzilla.suse.com/810323","tags":["report"]},{"url":"https://bugzilla.suse.com/810722","tags":["report"]},{"url":"https://bugzilla.suse.com/812274","tags":["report"]},{"url":"https://bugzilla.suse.com/812281","tags":["report"]},{"url":"https://bugzilla.suse.com/812332","tags":["report"]},{"url":"https://bugzilla.suse.com/812526","tags":["report"]},{"url":"https://bugzilla.suse.com/812974","tags":["report"]},{"url":"https://bugzilla.suse.com/813245","tags":["report"]},{"url":"https://bugzilla.suse.com/813604","tags":["report"]},{"url":"https://bugzilla.suse.com/813733","tags":["report"]},{"url":"https://bugzilla.suse.com/813922","tags":["report"]},{"url":"https://bugzilla.suse.com/814336","tags":["report"]},{"url":"https://bugzilla.suse.com/815256","tags":["report"]},{"url":"https://bugzilla.suse.com/815320","tags":["report"]},{"url":"https://bugzilla.suse.com/815356","tags":["report"]},{"url":"https://bugzilla.suse.com/816043","tags":["report"]},{"url":"https://bugzilla.suse.com/816099","tags":["report"]},{"url":"https://bugzilla.suse.com/816451","tags":["report"]},{"url":"https://bugzilla.suse.com/816708","tags":["report"]},{"url":"https://bugzilla.suse.com/817035","tags":["report"]},{"url":"https://bugzilla.suse.com/817377","tags":["report"]},{"url":"https://bugzilla.suse.com/818047","tags":["report"]},{"url":"https://bugzilla.suse.com/818064","tags":["report"]},{"url":"https://bugzilla.suse.com/818371","tags":["report"]},{"url":"https://bugzilla.suse.com/818465","tags":["report"]},{"url":"https://bugzilla.suse.com/818545","tags":["report"]},{"url":"https://bugzilla.suse.com/819018","tags":["report"]},{"url":"https://bugzilla.suse.com/819195","tags":["report"]},{"url":"https://bugzilla.suse.com/819363","tags":["report"]},{"url":"https://bugzilla.suse.com/819523","tags":["report"]},{"url":"https://bugzilla.suse.com/819610","tags":["report"]},{"url":"https://bugzilla.suse.com/819655","tags":["report"]},{"url":"https://bugzilla.suse.com/819979","tags":["report"]},{"url":"https://bugzilla.suse.com/820102","tags":["report"]},{"url":"https://bugzilla.suse.com/820172","tags":["report"]},{"url":"https://bugzilla.suse.com/820338","tags":["report"]},{"url":"https://bugzilla.suse.com/820434","tags":["report"]},{"url":"https://bugzilla.suse.com/820848","tags":["report"]},{"url":"https://bugzilla.suse.com/821052","tags":["report"]},{"url":"https://bugzilla.suse.com/821070","tags":["report"]},{"url":"https://bugzilla.suse.com/821235","tags":["report"]},{"url":"https://bugzilla.suse.com/821259","tags":["report"]},{"url":"https://bugzilla.suse.com/821465","tags":["report"]},{"url":"https://bugzilla.suse.com/821619","tags":["report"]},{"url":"https://bugzilla.suse.com/821799","tags":["report"]},{"url":"https://bugzilla.suse.com/821859","tags":["report"]},{"url":"https://bugzilla.suse.com/821930","tags":["report"]},{"url":"https://bugzilla.suse.com/821948","tags":["report"]},{"url":"https://bugzilla.suse.com/821980","tags":["report"]},{"url":"https://bugzilla.suse.com/822052","tags":["report"]},{"url":"https://bugzilla.suse.com/822066","tags":["report"]},{"url":"https://bugzilla.suse.com/822077","tags":["report"]},{"url":"https://bugzilla.suse.com/822080","tags":["report"]},{"url":"https://bugzilla.suse.com/822164","tags":["report"]},{"url":"https://bugzilla.suse.com/822225","tags":["report"]},{"url":"https://bugzilla.suse.com/822340","tags":["report"]},{"url":"https://bugzilla.suse.com/822431","tags":["report"]},{"url":"https://bugzilla.suse.com/822433","tags":["report"]},{"url":"https://bugzilla.suse.com/822575","tags":["report"]},{"url":"https://bugzilla.suse.com/822579","tags":["report"]},{"url":"https://bugzilla.suse.com/822722","tags":["report"]},{"url":"https://bugzilla.suse.com/822825","tags":["report"]},{"url":"https://bugzilla.suse.com/822878","tags":["report"]},{"url":"https://bugzilla.suse.com/823082","tags":["report"]},{"url":"https://bugzilla.suse.com/823223","tags":["report"]},{"url":"https://bugzilla.suse.com/823342","tags":["report"]},{"url":"https://bugzilla.suse.com/823386","tags":["report"]},{"url":"https://bugzilla.suse.com/823517","tags":["report"]},{"url":"https://bugzilla.suse.com/823597","tags":["report"]},{"url":"https://bugzilla.suse.com/823618","tags":["report"]},{"url":"https://bugzilla.suse.com/823795","tags":["report"]},{"url":"https://bugzilla.suse.com/824159","tags":["report"]},{"url":"https://bugzilla.suse.com/824256","tags":["report"]},{"url":"https://bugzilla.suse.com/824295","tags":["report"]},{"url":"https://bugzilla.suse.com/824568","tags":["report"]},{"url":"https://bugzilla.suse.com/824915","tags":["report"]},{"url":"https://bugzilla.suse.com/825006","tags":["report"]},{"url":"https://bugzilla.suse.com/825037","tags":["report"]},{"url":"https://bugzilla.suse.com/825048","tags":["report"]},{"url":"https://bugzilla.suse.com/825142","tags":["report"]},{"url":"https://bugzilla.suse.com/825227","tags":["report"]},{"url":"https://bugzilla.suse.com/825291","tags":["report"]},{"url":"https://bugzilla.suse.com/825591","tags":["report"]},{"url":"https://bugzilla.suse.com/825657","tags":["report"]},{"url":"https://bugzilla.suse.com/825696","tags":["report"]},{"url":"https://bugzilla.suse.com/825887","tags":["report"]},{"url":"https://bugzilla.suse.com/825896","tags":["report"]},{"url":"https://bugzilla.suse.com/826102","tags":["report"]},{"url":"https://bugzilla.suse.com/826186","tags":["report"]},{"url":"https://bugzilla.suse.com/826350","tags":["report"]},{"url":"https://bugzilla.suse.com/826486","tags":["report"]},{"url":"https://bugzilla.suse.com/826602","tags":["report"]},{"url":"https://bugzilla.suse.com/826756","tags":["report"]},{"url":"https://bugzilla.suse.com/826960","tags":["report"]},{"url":"https://bugzilla.suse.com/826978","tags":["report"]},{"url":"https://bugzilla.suse.com/827246","tags":["report"]},{"url":"https://bugzilla.suse.com/827271","tags":["report"]},{"url":"https://bugzilla.suse.com/827372","tags":["report"]},{"url":"https://bugzilla.suse.com/827376","tags":["report"]},{"url":"https://bugzilla.suse.com/827378","tags":["report"]},{"url":"https://bugzilla.suse.com/827416","tags":["report"]},{"url":"https://bugzilla.suse.com/827527","tags":["report"]},{"url":"https://bugzilla.suse.com/827670","tags":["report"]},{"url":"https://bugzilla.suse.com/827749","tags":["report"]},{"url":"https://bugzilla.suse.com/827750","tags":["report"]},{"url":"https://bugzilla.suse.com/827767","tags":["report"]},{"url":"https://bugzilla.suse.com/827930","tags":["report"]},{"url":"https://bugzilla.suse.com/827966","tags":["report"]},{"url":"https://bugzilla.suse.com/828087","tags":["report"]},{"url":"https://bugzilla.suse.com/828119","tags":["report"]},{"url":"https://bugzilla.suse.com/828192","tags":["report"]},{"url":"https://bugzilla.suse.com/828236","tags":["report"]},{"url":"https://bugzilla.suse.com/828265","tags":["report"]},{"url":"https://bugzilla.suse.com/828574","tags":["report"]},{"url":"https://bugzilla.suse.com/828714","tags":["report"]},{"url":"https://bugzilla.suse.com/828886","tags":["report"]},{"url":"https://bugzilla.suse.com/828894","tags":["report"]},{"url":"https://bugzilla.suse.com/828914","tags":["report"]},{"url":"https://bugzilla.suse.com/829001","tags":["report"]},{"url":"https://bugzilla.suse.com/829082","tags":["report"]},{"url":"https://bugzilla.suse.com/829110","tags":["report"]},{"url":"https://bugzilla.suse.com/829357","tags":["report"]},{"url":"https://bugzilla.suse.com/829539","tags":["report"]},{"url":"https://bugzilla.suse.com/829622","tags":["report"]},{"url":"https://bugzilla.suse.com/829682","tags":["report"]},{"url":"https://bugzilla.suse.com/830346","tags":["report"]},{"url":"https://bugzilla.suse.com/830478","tags":["report"]},{"url":"https://bugzilla.suse.com/830766","tags":["report"]},{"url":"https://bugzilla.suse.com/830822","tags":["report"]},{"url":"https://bugzilla.suse.com/830901","tags":["report"]},{"url":"https://bugzilla.suse.com/830985","tags":["report"]},{"url":"https://bugzilla.suse.com/831029","tags":["report"]},{"url":"https://bugzilla.suse.com/831055","tags":["report"]},{"url":"https://bugzilla.suse.com/831058","tags":["report"]},{"url":"https://bugzilla.suse.com/831103","tags":["report"]},{"url":"https://bugzilla.suse.com/831143","tags":["report"]},{"url":"https://bugzilla.suse.com/831380","tags":["report"]},{"url":"https://bugzilla.suse.com/831410","tags":["report"]},{"url":"https://bugzilla.suse.com/831422","tags":["report"]},{"url":"https://bugzilla.suse.com/831424","tags":["report"]},{"url":"https://bugzilla.suse.com/831438","tags":["report"]},{"url":"https://bugzilla.suse.com/831623","tags":["report"]},{"url":"https://bugzilla.suse.com/831949","tags":["report"]},{"url":"https://bugzilla.suse.com/832292","tags":["report"]},{"url":"https://bugzilla.suse.com/832309","tags":["report"]},{"url":"https://bugzilla.suse.com/832318","tags":["report"]},{"url":"https://bugzilla.suse.com/832710","tags":["report"]},{"url":"https://bugzilla.suse.com/833073","tags":["report"]},{"url":"https://bugzilla.suse.com/833097","tags":["report"]},{"url":"https://bugzilla.suse.com/833148","tags":["report"]},{"url":"https://bugzilla.suse.com/833151","tags":["report"]},{"url":"https://bugzilla.suse.com/833321","tags":["report"]},{"url":"https://bugzilla.suse.com/833588","tags":["report"]},{"url":"https://bugzilla.suse.com/833635","tags":["report"]},{"url":"https://bugzilla.suse.com/833820","tags":["report"]},{"url":"https://bugzilla.suse.com/833858","tags":["report"]},{"url":"https://bugzilla.suse.com/833968","tags":["report"]},{"url":"https://bugzilla.suse.com/834116","tags":["report"]},{"url":"https://bugzilla.suse.com/834204","tags":["report"]},{"url":"https://bugzilla.suse.com/834473","tags":["report"]},{"url":"https://bugzilla.suse.com/834600","tags":["report"]},{"url":"https://bugzilla.suse.com/834647","tags":["report"]},{"url":"https://bugzilla.suse.com/834708","tags":["report"]},{"url":"https://bugzilla.suse.com/834742","tags":["report"]},{"url":"https://bugzilla.suse.com/834808","tags":["report"]},{"url":"https://bugzilla.suse.com/834905","tags":["report"]},{"url":"https://bugzilla.suse.com/835074","tags":["report"]},{"url":"https://bugzilla.suse.com/835094","tags":["report"]},{"url":"https://bugzilla.suse.com/835175","tags":["report"]},{"url":"https://bugzilla.suse.com/835186","tags":["report"]},{"url":"https://bugzilla.suse.com/835189","tags":["report"]},{"url":"https://bugzilla.suse.com/835684","tags":["report"]},{"url":"https://bugzilla.suse.com/835839","tags":["report"]},{"url":"https://bugzilla.suse.com/835930","tags":["report"]},{"url":"https://bugzilla.suse.com/836218","tags":["report"]},{"url":"https://bugzilla.suse.com/836347","tags":["report"]},{"url":"https://bugzilla.suse.com/836718","tags":["report"]},{"url":"https://bugzilla.suse.com/836801","tags":["report"]},{"url":"https://bugzilla.suse.com/837206","tags":["report"]},{"url":"https://bugzilla.suse.com/837372","tags":["report"]},{"url":"https://bugzilla.suse.com/837563","tags":["report"]},{"url":"https://bugzilla.suse.com/837596","tags":["report"]},{"url":"https://bugzilla.suse.com/837739","tags":["report"]},{"url":"https://bugzilla.suse.com/837741","tags":["report"]},{"url":"https://bugzilla.suse.com/837803","tags":["report"]},{"url":"https://bugzilla.suse.com/838346","tags":["report"]},{"url":"https://bugzilla.suse.com/838448","tags":["report"]},{"url":"https://bugzilla.suse.com/838623","tags":["report"]},{"url":"https://bugzilla.suse.com/839407","tags":["report"]},{"url":"https://bugzilla.suse.com/839973","tags":["report"]},{"url":"https://bugzilla.suse.com/840116","tags":["report"]},{"url":"https://bugzilla.suse.com/840226","tags":["report"]},{"url":"https://bugzilla.suse.com/840524","tags":["report"]},{"url":"https://bugzilla.suse.com/840830","tags":["report"]},{"url":"https://bugzilla.suse.com/841050","tags":["report"]},{"url":"https://bugzilla.suse.com/841094","tags":["report"]},{"url":"https://bugzilla.suse.com/841402","tags":["report"]},{"url":"https://bugzilla.suse.com/841445","tags":["report"]},{"url":"https://bugzilla.suse.com/841498","tags":["report"]},{"url":"https://bugzilla.suse.com/841654","tags":["report"]},{"url":"https://bugzilla.suse.com/841656","tags":["report"]},{"url":"https://bugzilla.suse.com/842057","tags":["report"]},{"url":"https://bugzilla.suse.com/842063","tags":["report"]},{"url":"https://bugzilla.suse.com/842239","tags":["report"]},{"url":"https://bugzilla.suse.com/842604","tags":["report"]},{"url":"https://bugzilla.suse.com/842820","tags":["report"]},{"url":"https://bugzilla.suse.com/843185","tags":["report"]},{"url":"https://bugzilla.suse.com/843419","tags":["report"]},{"url":"https://bugzilla.suse.com/843429","tags":["report"]},{"url":"https://bugzilla.suse.com/843445","tags":["report"]},{"url":"https://bugzilla.suse.com/843642","tags":["report"]},{"url":"https://bugzilla.suse.com/843645","tags":["report"]},{"url":"https://bugzilla.suse.com/843654","tags":["report"]},{"url":"https://bugzilla.suse.com/843732","tags":["report"]},{"url":"https://bugzilla.suse.com/843753","tags":["report"]},{"url":"https://bugzilla.suse.com/843950","tags":["report"]},{"url":"https://bugzilla.suse.com/844513","tags":["report"]},{"url":"https://bugzilla.suse.com/845352","tags":["report"]},{"url":"https://bugzilla.suse.com/845378","tags":["report"]},{"url":"https://bugzilla.suse.com/845621","tags":["report"]},{"url":"https://bugzilla.suse.com/845729","tags":["report"]},{"url":"https://bugzilla.suse.com/846036","tags":["report"]},{"url":"https://bugzilla.suse.com/846298","tags":["report"]},{"url":"https://bugzilla.suse.com/846404","tags":["report"]},{"url":"https://bugzilla.suse.com/846654","tags":["report"]},{"url":"https://bugzilla.suse.com/846656","tags":["report"]},{"url":"https://bugzilla.suse.com/846690","tags":["report"]},{"url":"https://bugzilla.suse.com/846790","tags":["report"]},{"url":"https://bugzilla.suse.com/846984","tags":["report"]},{"url":"https://bugzilla.suse.com/846989","tags":["report"]},{"url":"https://bugzilla.suse.com/847261","tags":["report"]},{"url":"https://bugzilla.suse.com/847319","tags":["report"]},{"url":"https://bugzilla.suse.com/847652","tags":["report"]},{"url":"https://bugzilla.suse.com/847660","tags":["report"]},{"url":"https://bugzilla.suse.com/847672","tags":["report"]},{"url":"https://bugzilla.suse.com/847721","tags":["report"]},{"url":"https://bugzilla.suse.com/847842","tags":["report"]},{"url":"https://bugzilla.suse.com/848055","tags":["report"]},{"url":"https://bugzilla.suse.com/848317","tags":["report"]},{"url":"https://bugzilla.suse.com/848321","tags":["report"]},{"url":"https://bugzilla.suse.com/848335","tags":["report"]},{"url":"https://bugzilla.suse.com/848336","tags":["report"]},{"url":"https://bugzilla.suse.com/848544","tags":["report"]},{"url":"https://bugzilla.suse.com/848652","tags":["report"]},{"url":"https://bugzilla.suse.com/848864","tags":["report"]},{"url":"https://bugzilla.suse.com/849021","tags":["report"]},{"url":"https://bugzilla.suse.com/849029","tags":["report"]},{"url":"https://bugzilla.suse.com/849034","tags":["report"]},{"url":"https://bugzilla.suse.com/849123","tags":["report"]},{"url":"https://bugzilla.suse.com/849256","tags":["report"]},{"url":"https://bugzilla.suse.com/849362","tags":["report"]},{"url":"https://bugzilla.suse.com/849364","tags":["report"]},{"url":"https://bugzilla.suse.com/849404","tags":["report"]},{"url":"https://bugzilla.suse.com/849675","tags":["report"]},{"url":"https://bugzilla.suse.com/849809","tags":["report"]},{"url":"https://bugzilla.suse.com/849855","tags":["report"]},{"url":"https://bugzilla.suse.com/849950","tags":["report"]},{"url":"https://bugzilla.suse.com/850072","tags":["report"]},{"url":"https://bugzilla.suse.com/850103","tags":["report"]},{"url":"https://bugzilla.suse.com/850324","tags":["report"]},{"url":"https://bugzilla.suse.com/850493","tags":["report"]},{"url":"https://bugzilla.suse.com/850640","tags":["report"]},{"url":"https://bugzilla.suse.com/850915","tags":["report"]},{"url":"https://bugzilla.suse.com/851066","tags":["report"]},{"url":"https://bugzilla.suse.com/851101","tags":["report"]},{"url":"https://bugzilla.suse.com/851290","tags":["report"]},{"url":"https://bugzilla.suse.com/851314","tags":["report"]},{"url":"https://bugzilla.suse.com/851426","tags":["report"]},{"url":"https://bugzilla.suse.com/851603","tags":["report"]},{"url":"https://bugzilla.suse.com/851879","tags":["report"]},{"url":"https://bugzilla.suse.com/852153","tags":["report"]},{"url":"https://bugzilla.suse.com/852373","tags":["report"]},{"url":"https://bugzilla.suse.com/852488","tags":["report"]},{"url":"https://bugzilla.suse.com/852553","tags":["report"]},{"url":"https://bugzilla.suse.com/852558","tags":["report"]},{"url":"https://bugzilla.suse.com/852559","tags":["report"]},{"url":"https://bugzilla.suse.com/852624","tags":["report"]},{"url":"https://bugzilla.suse.com/852652","tags":["report"]},{"url":"https://bugzilla.suse.com/852761","tags":["report"]},{"url":"https://bugzilla.suse.com/852967","tags":["report"]},{"url":"https://bugzilla.suse.com/853040","tags":["report"]},{"url":"https://bugzilla.suse.com/853050","tags":["report"]},{"url":"https://bugzilla.suse.com/853051","tags":["report"]},{"url":"https://bugzilla.suse.com/853052","tags":["report"]},{"url":"https://bugzilla.suse.com/853053","tags":["report"]},{"url":"https://bugzilla.suse.com/853162","tags":["report"]},{"url":"https://bugzilla.suse.com/853166","tags":["report"]},{"url":"https://bugzilla.suse.com/853428","tags":["report"]},{"url":"https://bugzilla.suse.com/853455","tags":["report"]},{"url":"https://bugzilla.suse.com/853465","tags":["report"]},{"url":"https://bugzilla.suse.com/854025","tags":["report"]},{"url":"https://bugzilla.suse.com/854445","tags":["report"]},{"url":"https://bugzilla.suse.com/854516","tags":["report"]},{"url":"https://bugzilla.suse.com/854546","tags":["report"]},{"url":"https://bugzilla.suse.com/854634","tags":["report"]},{"url":"https://bugzilla.suse.com/854722","tags":["report"]},{"url":"https://bugzilla.suse.com/855126","tags":["report"]},{"url":"https://bugzilla.suse.com/855657","tags":["report"]},{"url":"https://bugzilla.suse.com/855825","tags":["report"]},{"url":"https://bugzilla.suse.com/856307","tags":["report"]},{"url":"https://bugzilla.suse.com/856481","tags":["report"]},{"url":"https://bugzilla.suse.com/856760","tags":["report"]},{"url":"https://bugzilla.suse.com/856848","tags":["report"]},{"url":"https://bugzilla.suse.com/857358","tags":["report"]},{"url":"https://bugzilla.suse.com/857643","tags":["report"]},{"url":"https://bugzilla.suse.com/857926","tags":["report"]},{"url":"https://bugzilla.suse.com/858534","tags":["report"]},{"url":"https://bugzilla.suse.com/858604","tags":["report"]},{"url":"https://bugzilla.suse.com/858831","tags":["report"]},{"url":"https://bugzilla.suse.com/858869","tags":["report"]},{"url":"https://bugzilla.suse.com/858870","tags":["report"]},{"url":"https://bugzilla.suse.com/858872","tags":["report"]},{"url":"https://bugzilla.suse.com/859225","tags":["report"]},{"url":"https://bugzilla.suse.com/859342","tags":["report"]},{"url":"https://bugzilla.suse.com/859840","tags":["report"]},{"url":"https://bugzilla.suse.com/860441","tags":["report"]},{"url":"https://bugzilla.suse.com/860593","tags":["report"]},{"url":"https://bugzilla.suse.com/861093","tags":["report"]},{"url":"https://bugzilla.suse.com/861636","tags":["report"]},{"url":"https://bugzilla.suse.com/861980","tags":["report"]},{"url":"https://bugzilla.suse.com/862429","tags":["report"]},{"url":"https://bugzilla.suse.com/862796","tags":["report"]},{"url":"https://bugzilla.suse.com/862934","tags":["report"]},{"url":"https://bugzilla.suse.com/862957","tags":["report"]},{"url":"https://bugzilla.suse.com/863178","tags":["report"]},{"url":"https://bugzilla.suse.com/863300","tags":["report"]},{"url":"https://bugzilla.suse.com/863335","tags":["report"]},{"url":"https://bugzilla.suse.com/863410","tags":["report"]},{"url":"https://bugzilla.suse.com/863526","tags":["report"]},{"url":"https://bugzilla.suse.com/863586","tags":["report"]},{"url":"https://bugzilla.suse.com/863873","tags":["report"]},{"url":"https://bugzilla.suse.com/864025","tags":["report"]},{"url":"https://bugzilla.suse.com/864058","tags":["report"]},{"url":"https://bugzilla.suse.com/864401","tags":["report"]},{"url":"https://bugzilla.suse.com/864404","tags":["report"]},{"url":"https://bugzilla.suse.com/864409","tags":["report"]},{"url":"https://bugzilla.suse.com/864411","tags":["report"]},{"url":"https://bugzilla.suse.com/864464","tags":["report"]},{"url":"https://bugzilla.suse.com/864833","tags":["report"]},{"url":"https://bugzilla.suse.com/864880","tags":["report"]},{"url":"https://bugzilla.suse.com/865310","tags":["report"]},{"url":"https://bugzilla.suse.com/865330","tags":["report"]},{"url":"https://bugzilla.suse.com/865342","tags":["report"]},{"url":"https://bugzilla.suse.com/865419","tags":["report"]},{"url":"https://bugzilla.suse.com/865783","tags":["report"]},{"url":"https://bugzilla.suse.com/865882","tags":["report"]},{"url":"https://bugzilla.suse.com/866081","tags":["report"]},{"url":"https://bugzilla.suse.com/866102","tags":["report"]},{"url":"https://bugzilla.suse.com/866130","tags":["report"]},{"url":"https://bugzilla.suse.com/866253","tags":["report"]},{"url":"https://bugzilla.suse.com/866428","tags":["report"]},{"url":"https://bugzilla.suse.com/866615","tags":["report"]},{"url":"https://bugzilla.suse.com/866800","tags":["report"]},{"url":"https://bugzilla.suse.com/866864","tags":["report"]},{"url":"https://bugzilla.suse.com/866911","tags":["report"]},{"url":"https://bugzilla.suse.com/867362","tags":["report"]},{"url":"https://bugzilla.suse.com/867517","tags":["report"]},{"url":"https://bugzilla.suse.com/867531","tags":["report"]},{"url":"https://bugzilla.suse.com/867723","tags":["report"]},{"url":"https://bugzilla.suse.com/867953","tags":["report"]},{"url":"https://bugzilla.suse.com/868049","tags":["report"]},{"url":"https://bugzilla.suse.com/868488","tags":["report"]},{"url":"https://bugzilla.suse.com/868528","tags":["report"]},{"url":"https://bugzilla.suse.com/868653","tags":["report"]},{"url":"https://bugzilla.suse.com/868748","tags":["report"]},{"url":"https://bugzilla.suse.com/869033","tags":["report"]},{"url":"https://bugzilla.suse.com/869055","tags":["report"]},{"url":"https://bugzilla.suse.com/869414","tags":["report"]},{"url":"https://bugzilla.suse.com/869563","tags":["report"]},{"url":"https://bugzilla.suse.com/869934","tags":["report"]},{"url":"https://bugzilla.suse.com/870161","tags":["report"]},{"url":"https://bugzilla.suse.com/870173","tags":["report"]},{"url":"https://bugzilla.suse.com/870335","tags":["report"]},{"url":"https://bugzilla.suse.com/870450","tags":["report"]},{"url":"https://bugzilla.suse.com/870496","tags":["report"]},{"url":"https://bugzilla.suse.com/870498","tags":["report"]},{"url":"https://bugzilla.suse.com/870576","tags":["report"]},{"url":"https://bugzilla.suse.com/870591","tags":["report"]},{"url":"https://bugzilla.suse.com/870618","tags":["report"]},{"url":"https://bugzilla.suse.com/870801","tags":["report"]},{"url":"https://bugzilla.suse.com/870877","tags":["report"]},{"url":"https://bugzilla.suse.com/870958","tags":["report"]},{"url":"https://bugzilla.suse.com/871134","tags":["report"]},{"url":"https://bugzilla.suse.com/871561","tags":["report"]},{"url":"https://bugzilla.suse.com/871634","tags":["report"]},{"url":"https://bugzilla.suse.com/871676","tags":["report"]},{"url":"https://bugzilla.suse.com/871728","tags":["report"]},{"url":"https://bugzilla.suse.com/871797","tags":["report"]},{"url":"https://bugzilla.suse.com/871854","tags":["report"]},{"url":"https://bugzilla.suse.com/871861","tags":["report"]},{"url":"https://bugzilla.suse.com/871899","tags":["report"]},{"url":"https://bugzilla.suse.com/872188","tags":["report"]},{"url":"https://bugzilla.suse.com/872540","tags":["report"]},{"url":"https://bugzilla.suse.com/872634","tags":["report"]},{"url":"https://bugzilla.suse.com/873061","tags":["report"]},{"url":"https://bugzilla.suse.com/873228","tags":["report"]},{"url":"https://bugzilla.suse.com/873374","tags":["report"]},{"url":"https://bugzilla.suse.com/873463","tags":["report"]},{"url":"https://bugzilla.suse.com/874108","tags":["report"]},{"url":"https://bugzilla.suse.com/874145","tags":["report"]},{"url":"https://bugzilla.suse.com/874440","tags":["report"]},{"url":"https://bugzilla.suse.com/874577","tags":["report"]},{"url":"https://bugzilla.suse.com/875051","tags":["report"]},{"url":"https://bugzilla.suse.com/875386","tags":["report"]},{"url":"https://bugzilla.suse.com/875690","tags":["report"]},{"url":"https://bugzilla.suse.com/875798","tags":["report"]},{"url":"https://bugzilla.suse.com/876017","tags":["report"]},{"url":"https://bugzilla.suse.com/876055","tags":["report"]},{"url":"https://bugzilla.suse.com/876086","tags":["report"]},{"url":"https://bugzilla.suse.com/876102","tags":["report"]},{"url":"https://bugzilla.suse.com/876114","tags":["report"]},{"url":"https://bugzilla.suse.com/876176","tags":["report"]},{"url":"https://bugzilla.suse.com/876463","tags":["report"]},{"url":"https://bugzilla.suse.com/876590","tags":["report"]},{"url":"https://bugzilla.suse.com/876594","tags":["report"]},{"url":"https://bugzilla.suse.com/876633","tags":["report"]},{"url":"https://bugzilla.suse.com/877013","tags":["report"]},{"url":"https://bugzilla.suse.com/877257","tags":["report"]},{"url":"https://bugzilla.suse.com/877456","tags":["report"]},{"url":"https://bugzilla.suse.com/877497","tags":["report"]},{"url":"https://bugzilla.suse.com/877593","tags":["report"]},{"url":"https://bugzilla.suse.com/877775","tags":["report"]},{"url":"https://bugzilla.suse.com/878115","tags":["report"]},{"url":"https://bugzilla.suse.com/878123","tags":["report"]},{"url":"https://bugzilla.suse.com/878274","tags":["report"]},{"url":"https://bugzilla.suse.com/878407","tags":["report"]},{"url":"https://bugzilla.suse.com/878509","tags":["report"]},{"url":"https://bugzilla.suse.com/879304","tags":["report"]},{"url":"https://bugzilla.suse.com/879921","tags":["report"]},{"url":"https://bugzilla.suse.com/879957","tags":["report"]},{"url":"https://bugzilla.suse.com/880007","tags":["report"]},{"url":"https://bugzilla.suse.com/880344","tags":["report"]},{"url":"https://bugzilla.suse.com/880357","tags":["report"]},{"url":"https://bugzilla.suse.com/880370","tags":["report"]},{"url":"https://bugzilla.suse.com/880437","tags":["report"]},{"url":"https://bugzilla.suse.com/880484","tags":["report"]},{"url":"https://bugzilla.suse.com/880892","tags":["report"]},{"url":"https://bugzilla.suse.com/881051","tags":["report"]},{"url":"https://bugzilla.suse.com/881571","tags":["report"]},{"url":"https://bugzilla.suse.com/881759","tags":["report"]},{"url":"https://bugzilla.suse.com/881761","tags":["report"]},{"url":"https://bugzilla.suse.com/881939","tags":["report"]},{"url":"https://bugzilla.suse.com/882317","tags":["report"]},{"url":"https://bugzilla.suse.com/882324","tags":["report"]},{"url":"https://bugzilla.suse.com/882470","tags":["report"]},{"url":"https://bugzilla.suse.com/882639","tags":["report"]},{"url":"https://bugzilla.suse.com/882804","tags":["report"]},{"url":"https://bugzilla.suse.com/882900","tags":["report"]},{"url":"https://bugzilla.suse.com/883096","tags":["report"]},{"url":"https://bugzilla.suse.com/883376","tags":["report"]},{"url":"https://bugzilla.suse.com/883380","tags":["report"]},{"url":"https://bugzilla.suse.com/883518","tags":["report"]},{"url":"https://bugzilla.suse.com/883724","tags":["report"]},{"url":"https://bugzilla.suse.com/883795","tags":["report"]},{"url":"https://bugzilla.suse.com/883948","tags":["report"]},{"url":"https://bugzilla.suse.com/884333","tags":["report"]},{"url":"https://bugzilla.suse.com/884582","tags":["report"]},{"url":"https://bugzilla.suse.com/884725","tags":["report"]},{"url":"https://bugzilla.suse.com/884767","tags":["report"]},{"url":"https://bugzilla.suse.com/884817","tags":["report"]},{"url":"https://bugzilla.suse.com/885077","tags":["report"]},{"url":"https://bugzilla.suse.com/885262","tags":["report"]},{"url":"https://bugzilla.suse.com/885382","tags":["report"]},{"url":"https://bugzilla.suse.com/885422","tags":["report"]},{"url":"https://bugzilla.suse.com/885509","tags":["report"]},{"url":"https://bugzilla.suse.com/885725","tags":["report"]},{"url":"https://bugzilla.suse.com/886840","tags":["report"]},{"url":"https://bugzilla.suse.com/887082","tags":["report"]},{"url":"https://bugzilla.suse.com/887418","tags":["report"]},{"url":"https://bugzilla.suse.com/887503","tags":["report"]},{"url":"https://bugzilla.suse.com/887597","tags":["report"]},{"url":"https://bugzilla.suse.com/887608","tags":["report"]},{"url":"https://bugzilla.suse.com/887645","tags":["report"]},{"url":"https://bugzilla.suse.com/887680","tags":["report"]},{"url":"https://bugzilla.suse.com/888058","tags":["report"]},{"url":"https://bugzilla.suse.com/888105","tags":["report"]},{"url":"https://bugzilla.suse.com/888591","tags":["report"]},{"url":"https://bugzilla.suse.com/888607","tags":["report"]},{"url":"https://bugzilla.suse.com/888847","tags":["report"]},{"url":"https://bugzilla.suse.com/888849","tags":["report"]},{"url":"https://bugzilla.suse.com/888968","tags":["report"]},{"url":"https://bugzilla.suse.com/889061","tags":["report"]},{"url":"https://bugzilla.suse.com/889173","tags":["report"]},{"url":"https://bugzilla.suse.com/889221","tags":["report"]},{"url":"https://bugzilla.suse.com/889451","tags":["report"]},{"url":"https://bugzilla.suse.com/889614","tags":["report"]},{"url":"https://bugzilla.suse.com/889727","tags":["report"]},{"url":"https://bugzilla.suse.com/890297","tags":["report"]},{"url":"https://bugzilla.suse.com/890426","tags":["report"]},{"url":"https://bugzilla.suse.com/890513","tags":["report"]},{"url":"https://bugzilla.suse.com/890526","tags":["report"]},{"url":"https://bugzilla.suse.com/891087","tags":["report"]},{"url":"https://bugzilla.suse.com/891211","tags":["report"]},{"url":"https://bugzilla.suse.com/891212","tags":["report"]},{"url":"https://bugzilla.suse.com/891259","tags":["report"]},{"url":"https://bugzilla.suse.com/891277","tags":["report"]},{"url":"https://bugzilla.suse.com/891281","tags":["report"]},{"url":"https://bugzilla.suse.com/891368","tags":["report"]},{"url":"https://bugzilla.suse.com/891619","tags":["report"]},{"url":"https://bugzilla.suse.com/891641","tags":["report"]},{"url":"https://bugzilla.suse.com/891746","tags":["report"]},{"url":"https://bugzilla.suse.com/891790","tags":["report"]},{"url":"https://bugzilla.suse.com/892200","tags":["report"]},{"url":"https://bugzilla.suse.com/892490","tags":["report"]},{"url":"https://bugzilla.suse.com/892723","tags":["report"]},{"url":"https://bugzilla.suse.com/892782","tags":["report"]},{"url":"https://bugzilla.suse.com/893064","tags":["report"]},{"url":"https://bugzilla.suse.com/893496","tags":["report"]},{"url":"https://bugzilla.suse.com/893596","tags":["report"]},{"url":"https://bugzilla.suse.com/893758","tags":["report"]},{"url":"https://bugzilla.suse.com/894058","tags":["report"]},{"url":"https://bugzilla.suse.com/894200","tags":["report"]},{"url":"https://bugzilla.suse.com/894213","tags":["report"]},{"url":"https://bugzilla.suse.com/894895","tags":["report"]},{"url":"https://bugzilla.suse.com/895221","tags":["report"]},{"url":"https://bugzilla.suse.com/895387","tags":["report"]},{"url":"https://bugzilla.suse.com/895468","tags":["report"]},{"url":"https://bugzilla.suse.com/895608","tags":["report"]},{"url":"https://bugzilla.suse.com/895680","tags":["report"]},{"url":"https://bugzilla.suse.com/895841","tags":["report"]},{"url":"https://bugzilla.suse.com/895983","tags":["report"]},{"url":"https://bugzilla.suse.com/896382","tags":["report"]},{"url":"https://bugzilla.suse.com/896390","tags":["report"]},{"url":"https://bugzilla.suse.com/896391","tags":["report"]},{"url":"https://bugzilla.suse.com/896392","tags":["report"]},{"url":"https://bugzilla.suse.com/896415","tags":["report"]},{"url":"https://bugzilla.suse.com/896484","tags":["report"]},{"url":"https://bugzilla.suse.com/896689","tags":["report"]},{"url":"https://bugzilla.suse.com/897502","tags":["report"]},{"url":"https://bugzilla.suse.com/897694","tags":["report"]},{"url":"https://bugzilla.suse.com/897708","tags":["report"]},{"url":"https://bugzilla.suse.com/898295","tags":["report"]},{"url":"https://bugzilla.suse.com/898375","tags":["report"]},{"url":"https://bugzilla.suse.com/898554","tags":["report"]},{"url":"https://bugzilla.suse.com/899192","tags":["report"]},{"url":"https://bugzilla.suse.com/899574","tags":["report"]},{"url":"https://bugzilla.suse.com/899843","tags":["report"]},{"url":"https://bugzilla.suse.com/900279","tags":["report"]},{"url":"https://bugzilla.suse.com/900644","tags":["report"]},{"url":"https://bugzilla.suse.com/900881","tags":["report"]},{"url":"https://bugzilla.suse.com/901638","tags":["report"]},{"url":"https://bugzilla.suse.com/902232","tags":["report"]},{"url":"https://bugzilla.suse.com/902286","tags":["report"]},{"url":"https://bugzilla.suse.com/902346","tags":["report"]},{"url":"https://bugzilla.suse.com/902349","tags":["report"]},{"url":"https://bugzilla.suse.com/902351","tags":["report"]},{"url":"https://bugzilla.suse.com/902675","tags":["report"]},{"url":"https://bugzilla.suse.com/903096","tags":["report"]},{"url":"https://bugzilla.suse.com/903331","tags":["report"]},{"url":"https://bugzilla.suse.com/903640","tags":["report"]},{"url":"https://bugzilla.suse.com/903653","tags":["report"]},{"url":"https://bugzilla.suse.com/904013","tags":["report"]},{"url":"https://bugzilla.suse.com/904053","tags":["report"]},{"url":"https://bugzilla.suse.com/904242","tags":["report"]},{"url":"https://bugzilla.suse.com/904358","tags":["report"]},{"url":"https://bugzilla.suse.com/904659","tags":["report"]},{"url":"https://bugzilla.suse.com/904671","tags":["report"]},{"url":"https://bugzilla.suse.com/904700","tags":["report"]},{"url":"https://bugzilla.suse.com/904883","tags":["report"]},{"url":"https://bugzilla.suse.com/904901","tags":["report"]},{"url":"https://bugzilla.suse.com/905100","tags":["report"]},{"url":"https://bugzilla.suse.com/905304","tags":["report"]},{"url":"https://bugzilla.suse.com/905312","tags":["report"]},{"url":"https://bugzilla.suse.com/905522","tags":["report"]},{"url":"https://bugzilla.suse.com/905799","tags":["report"]},{"url":"https://bugzilla.suse.com/906027","tags":["report"]},{"url":"https://bugzilla.suse.com/906586","tags":["report"]},{"url":"https://bugzilla.suse.com/907196","tags":["report"]},{"url":"https://bugzilla.suse.com/907338","tags":["report"]},{"url":"https://bugzilla.suse.com/907551","tags":["report"]},{"url":"https://bugzilla.suse.com/907611","tags":["report"]},{"url":"https://bugzilla.suse.com/907818","tags":["report"]},{"url":"https://bugzilla.suse.com/908069","tags":["report"]},{"url":"https://bugzilla.suse.com/908163","tags":["report"]},{"url":"https://bugzilla.suse.com/908393","tags":["report"]},{"url":"https://bugzilla.suse.com/908550","tags":["report"]},{"url":"https://bugzilla.suse.com/908551","tags":["report"]},{"url":"https://bugzilla.suse.com/908572","tags":["report"]},{"url":"https://bugzilla.suse.com/908706","tags":["report"]},{"url":"https://bugzilla.suse.com/908825","tags":["report"]},{"url":"https://bugzilla.suse.com/909077","tags":["report"]},{"url":"https://bugzilla.suse.com/909078","tags":["report"]},{"url":"https://bugzilla.suse.com/909088","tags":["report"]},{"url":"https://bugzilla.suse.com/909092","tags":["report"]},{"url":"https://bugzilla.suse.com/909093","tags":["report"]},{"url":"https://bugzilla.suse.com/909095","tags":["report"]},{"url":"https://bugzilla.suse.com/909264","tags":["report"]},{"url":"https://bugzilla.suse.com/909309","tags":["report"]},{"url":"https://bugzilla.suse.com/909312","tags":["report"]},{"url":"https://bugzilla.suse.com/909477","tags":["report"]},{"url":"https://bugzilla.suse.com/909565","tags":["report"]},{"url":"https://bugzilla.suse.com/909684","tags":["report"]},{"url":"https://bugzilla.suse.com/909740","tags":["report"]},{"url":"https://bugzilla.suse.com/909846","tags":["report"]},{"url":"https://bugzilla.suse.com/910013","tags":["report"]},{"url":"https://bugzilla.suse.com/910150","tags":["report"]},{"url":"https://bugzilla.suse.com/910159","tags":["report"]},{"url":"https://bugzilla.suse.com/910251","tags":["report"]},{"url":"https://bugzilla.suse.com/910321","tags":["report"]},{"url":"https://bugzilla.suse.com/910322","tags":["report"]},{"url":"https://bugzilla.suse.com/910517","tags":["report"]},{"url":"https://bugzilla.suse.com/911181","tags":["report"]},{"url":"https://bugzilla.suse.com/911325","tags":["report"]},{"url":"https://bugzilla.suse.com/911326","tags":["report"]},{"url":"https://bugzilla.suse.com/912171","tags":["report"]},{"url":"https://bugzilla.suse.com/912202","tags":["report"]},{"url":"https://bugzilla.suse.com/912705","tags":["report"]},{"url":"https://bugzilla.suse.com/912741","tags":["report"]},{"url":"https://bugzilla.suse.com/913059","tags":["report"]},{"url":"https://bugzilla.suse.com/913080","tags":["report"]},{"url":"https://bugzilla.suse.com/913598","tags":["report"]},{"url":"https://bugzilla.suse.com/914355","tags":["report"]},{"url":"https://bugzilla.suse.com/914423","tags":["report"]},{"url":"https://bugzilla.suse.com/914726","tags":["report"]},{"url":"https://bugzilla.suse.com/914742","tags":["report"]},{"url":"https://bugzilla.suse.com/914818","tags":["report"]},{"url":"https://bugzilla.suse.com/914987","tags":["report"]},{"url":"https://bugzilla.suse.com/915045","tags":["report"]},{"url":"https://bugzilla.suse.com/915200","tags":["report"]},{"url":"https://bugzilla.suse.com/915209","tags":["report"]},{"url":"https://bugzilla.suse.com/915322","tags":["report"]},{"url":"https://bugzilla.suse.com/915335","tags":["report"]},{"url":"https://bugzilla.suse.com/915577","tags":["report"]},{"url":"https://bugzilla.suse.com/915791","tags":["report"]},{"url":"https://bugzilla.suse.com/915826","tags":["report"]},{"url":"https://bugzilla.suse.com/916515","tags":["report"]},{"url":"https://bugzilla.suse.com/916521","tags":["report"]},{"url":"https://bugzilla.suse.com/916848","tags":["report"]},{"url":"https://bugzilla.suse.com/916982","tags":["report"]},{"url":"https://bugzilla.suse.com/917093","tags":["report"]},{"url":"https://bugzilla.suse.com/917120","tags":["report"]},{"url":"https://bugzilla.suse.com/917648","tags":["report"]},{"url":"https://bugzilla.suse.com/917684","tags":["report"]},{"url":"https://bugzilla.suse.com/917830","tags":["report"]},{"url":"https://bugzilla.suse.com/917839","tags":["report"]},{"url":"https://bugzilla.suse.com/917884","tags":["report"]},{"url":"https://bugzilla.suse.com/918333","tags":["report"]},{"url":"https://bugzilla.suse.com/919007","tags":["report"]},{"url":"https://bugzilla.suse.com/919018","tags":["report"]},{"url":"https://bugzilla.suse.com/919357","tags":["report"]},{"url":"https://bugzilla.suse.com/919463","tags":["report"]},{"url":"https://bugzilla.suse.com/919589","tags":["report"]},{"url":"https://bugzilla.suse.com/919682","tags":["report"]},{"url":"https://bugzilla.suse.com/919808","tags":["report"]},{"url":"https://bugzilla.suse.com/920250","tags":["report"]},{"url":"https://bugzilla.suse.com/921769","tags":["report"]},{"url":"https://bugzilla.suse.com/922583","tags":["report"]},{"url":"https://bugzilla.suse.com/923344","tags":["report"]},{"url":"https://bugzilla.suse.com/924142","tags":["report"]},{"url":"https://bugzilla.suse.com/924271","tags":["report"]},{"url":"https://bugzilla.suse.com/924282","tags":["report"]},{"url":"https://bugzilla.suse.com/924333","tags":["report"]},{"url":"https://bugzilla.suse.com/924340","tags":["report"]},{"url":"https://bugzilla.suse.com/925012","tags":["report"]},{"url":"https://bugzilla.suse.com/925370","tags":["report"]},{"url":"https://bugzilla.suse.com/925443","tags":["report"]},{"url":"https://bugzilla.suse.com/925567","tags":["report"]},{"url":"https://bugzilla.suse.com/925729","tags":["report"]},{"url":"https://bugzilla.suse.com/926016","tags":["report"]},{"url":"https://bugzilla.suse.com/926240","tags":["report"]},{"url":"https://bugzilla.suse.com/926439","tags":["report"]},{"url":"https://bugzilla.suse.com/926767","tags":["report"]},{"url":"https://bugzilla.suse.com/927190","tags":["report"]},{"url":"https://bugzilla.suse.com/927257","tags":["report"]},{"url":"https://bugzilla.suse.com/927262","tags":["report"]},{"url":"https://bugzilla.suse.com/927338","tags":["report"]},{"url":"https://bugzilla.suse.com/928122","tags":["report"]},{"url":"https://bugzilla.suse.com/928130","tags":["report"]},{"url":"https://bugzilla.suse.com/928142","tags":["report"]},{"url":"https://bugzilla.suse.com/928333","tags":["report"]},{"url":"https://bugzilla.suse.com/928970","tags":["report"]},{"url":"https://bugzilla.suse.com/929145","tags":["report"]},{"url":"https://bugzilla.suse.com/929148","tags":["report"]},{"url":"https://bugzilla.suse.com/929283","tags":["report"]},{"url":"https://bugzilla.suse.com/929525","tags":["report"]},{"url":"https://bugzilla.suse.com/929647","tags":["report"]},{"url":"https://bugzilla.suse.com/930145","tags":["report"]},{"url":"https://bugzilla.suse.com/930171","tags":["report"]},{"url":"https://bugzilla.suse.com/930226","tags":["report"]},{"url":"https://bugzilla.suse.com/930284","tags":["report"]},{"url":"https://bugzilla.suse.com/930401","tags":["report"]},{"url":"https://bugzilla.suse.com/930669","tags":["report"]},{"url":"https://bugzilla.suse.com/930786","tags":["report"]},{"url":"https://bugzilla.suse.com/930788","tags":["report"]},{"url":"https://bugzilla.suse.com/931014","tags":["report"]},{"url":"https://bugzilla.suse.com/931015","tags":["report"]},{"url":"https://bugzilla.suse.com/931850","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3636","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150581-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150658-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/898675","tags":["report"]},{"url":"https://bugzilla.suse.com/903997","tags":["report"]},{"url":"https://bugzilla.suse.com/915660","tags":["report"]},{"url":"https://bugzilla.suse.com/918584","tags":["report"]},{"url":"https://bugzilla.suse.com/918615","tags":["report"]},{"url":"https://bugzilla.suse.com/918620","tags":["report"]},{"url":"https://bugzilla.suse.com/918644","tags":["report"]},{"url":"https://bugzilla.suse.com/919719","tags":["report"]},{"url":"https://bugzilla.suse.com/919939","tags":["report"]},{"url":"https://bugzilla.suse.com/920615","tags":["report"]},{"url":"https://bugzilla.suse.com/920805","tags":["report"]},{"url":"https://bugzilla.suse.com/920839","tags":["report"]},{"url":"https://bugzilla.suse.com/921313","tags":["report"]},{"url":"https://bugzilla.suse.com/921527","tags":["report"]},{"url":"https://bugzilla.suse.com/921990","tags":["report"]},{"url":"https://bugzilla.suse.com/922272","tags":["report"]},{"url":"https://bugzilla.suse.com/922275","tags":["report"]},{"url":"https://bugzilla.suse.com/922278","tags":["report"]},{"url":"https://bugzilla.suse.com/922284","tags":["report"]},{"url":"https://bugzilla.suse.com/924460","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150736-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/754690","tags":["report"]},{"url":"https://bugzilla.suse.com/792991","tags":["report"]},{"url":"https://bugzilla.suse.com/800907","tags":["report"]},{"url":"https://bugzilla.suse.com/803174","tags":["report"]},{"url":"https://bugzilla.suse.com/805945","tags":["report"]},{"url":"https://bugzilla.suse.com/808647","tags":["report"]},{"url":"https://bugzilla.suse.com/809220","tags":["report"]},{"url":"https://bugzilla.suse.com/809617","tags":["report"]},{"url":"https://bugzilla.suse.com/810098","tags":["report"]},{"url":"https://bugzilla.suse.com/810210","tags":["report"]},{"url":"https://bugzilla.suse.com/816065","tags":["report"]},{"url":"https://bugzilla.suse.com/816403","tags":["report"]},{"url":"https://bugzilla.suse.com/816892","tags":["report"]},{"url":"https://bugzilla.suse.com/816925","tags":["report"]},{"url":"https://bugzilla.suse.com/816971","tags":["report"]},{"url":"https://bugzilla.suse.com/817339","tags":["report"]},{"url":"https://bugzilla.suse.com/818053","tags":["report"]},{"url":"https://bugzilla.suse.com/818154","tags":["report"]},{"url":"https://bugzilla.suse.com/818497","tags":["report"]},{"url":"https://bugzilla.suse.com/819295","tags":["report"]},{"url":"https://bugzilla.suse.com/819519","tags":["report"]},{"url":"https://bugzilla.suse.com/819789","tags":["report"]},{"url":"https://bugzilla.suse.com/820183","tags":["report"]},{"url":"https://bugzilla.suse.com/820569","tags":["report"]},{"url":"https://bugzilla.suse.com/820738","tags":["report"]},{"url":"https://bugzilla.suse.com/820948","tags":["report"]},{"url":"https://bugzilla.suse.com/820982","tags":["report"]},{"url":"https://bugzilla.suse.com/821560","tags":["report"]},{"url":"https://bugzilla.suse.com/821802","tags":["report"]},{"url":"https://bugzilla.suse.com/822942","tags":["report"]},{"url":"https://bugzilla.suse.com/823191","tags":["report"]},{"url":"https://bugzilla.suse.com/855885","tags":["report"]},{"url":"https://bugzilla.suse.com/857919","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2850","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151174-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151376-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151478-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/798406","tags":["report"]},{"url":"https://bugzilla.suse.com/821931","tags":["report"]},{"url":"https://bugzilla.suse.com/879878","tags":["report"]},{"url":"https://bugzilla.suse.com/897995","tags":["report"]},{"url":"https://bugzilla.suse.com/898693","tags":["report"]},{"url":"https://bugzilla.suse.com/908870","tags":["report"]},{"url":"https://bugzilla.suse.com/912916","tags":["report"]},{"url":"https://bugzilla.suse.com/915517","tags":["report"]},{"url":"https://bugzilla.suse.com/916010","tags":["report"]},{"url":"https://bugzilla.suse.com/923245","tags":["report"]},{"url":"https://bugzilla.suse.com/928801","tags":["report"]},{"url":"https://bugzilla.suse.com/929360","tags":["report"]},{"url":"https://bugzilla.suse.com/930934","tags":["report"]},{"url":"https://bugzilla.suse.com/931474","tags":["report"]},{"url":"https://bugzilla.suse.com/933429","tags":["report"]},{"url":"https://bugzilla.suse.com/935705","tags":["report"]},{"url":"https://bugzilla.suse.com/936831","tags":["report"]},{"url":"https://bugzilla.suse.com/937032","tags":["report"]},{"url":"https://bugzilla.suse.com/937986","tags":["report"]},{"url":"https://bugzilla.suse.com/940338","tags":["report"]},{"url":"https://bugzilla.suse.com/940398","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5707","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/851068","tags":["report"]},{"url":"https://bugzilla.suse.com/873385","tags":["report"]},{"url":"https://bugzilla.suse.com/886785","tags":["report"]},{"url":"https://bugzilla.suse.com/894936","tags":["report"]},{"url":"https://bugzilla.suse.com/920110","tags":["report"]},{"url":"https://bugzilla.suse.com/920733","tags":["report"]},{"url":"https://bugzilla.suse.com/921430","tags":["report"]},{"url":"https://bugzilla.suse.com/924701","tags":["report"]},{"url":"https://bugzilla.suse.com/925705","tags":["report"]},{"url":"https://bugzilla.suse.com/925881","tags":["report"]},{"url":"https://bugzilla.suse.com/925903","tags":["report"]},{"url":"https://bugzilla.suse.com/926953","tags":["report"]},{"url":"https://bugzilla.suse.com/927355","tags":["report"]},{"url":"https://bugzilla.suse.com/927786","tags":["report"]},{"url":"https://bugzilla.suse.com/929142","tags":["report"]},{"url":"https://bugzilla.suse.com/929143","tags":["report"]},{"url":"https://bugzilla.suse.com/930092","tags":["report"]},{"url":"https://bugzilla.suse.com/930761","tags":["report"]},{"url":"https://bugzilla.suse.com/931538","tags":["report"]},{"url":"https://bugzilla.suse.com/932348","tags":["report"]},{"url":"https://bugzilla.suse.com/932458","tags":["report"]},{"url":"https://bugzilla.suse.com/933896","tags":["report"]},{"url":"https://bugzilla.suse.com/933904","tags":["report"]},{"url":"https://bugzilla.suse.com/933907","tags":["report"]},{"url":"https://bugzilla.suse.com/933936","tags":["report"]},{"url":"https://bugzilla.suse.com/934742","tags":["report"]},{"url":"https://bugzilla.suse.com/934944","tags":["report"]},{"url":"https://bugzilla.suse.com/935053","tags":["report"]},{"url":"https://bugzilla.suse.com/935572","tags":["report"]},{"url":"https://bugzilla.suse.com/935866","tags":["report"]},{"url":"https://bugzilla.suse.com/935906","tags":["report"]},{"url":"https://bugzilla.suse.com/936077","tags":["report"]},{"url":"https://bugzilla.suse.com/936423","tags":["report"]},{"url":"https://bugzilla.suse.com/936637","tags":["report"]},{"url":"https://bugzilla.suse.com/936875","tags":["report"]},{"url":"https://bugzilla.suse.com/936925","tags":["report"]},{"url":"https://bugzilla.suse.com/937402","tags":["report"]},{"url":"https://bugzilla.suse.com/937444","tags":["report"]},{"url":"https://bugzilla.suse.com/937503","tags":["report"]},{"url":"https://bugzilla.suse.com/937641","tags":["report"]},{"url":"https://bugzilla.suse.com/937855","tags":["report"]},{"url":"https://bugzilla.suse.com/939910","tags":["report"]},{"url":"https://bugzilla.suse.com/939994","tags":["report"]},{"url":"https://bugzilla.suse.com/942350","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151611-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151678-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/777565","tags":["report"]},{"url":"https://bugzilla.suse.com/891116","tags":["report"]},{"url":"https://bugzilla.suse.com/917968","tags":["report"]},{"url":"https://bugzilla.suse.com/920016","tags":["report"]},{"url":"https://bugzilla.suse.com/923002","tags":["report"]},{"url":"https://bugzilla.suse.com/923431","tags":["report"]},{"url":"https://bugzilla.suse.com/928988","tags":["report"]},{"url":"https://bugzilla.suse.com/929076","tags":["report"]},{"url":"https://bugzilla.suse.com/931620","tags":["report"]},{"url":"https://bugzilla.suse.com/932350","tags":["report"]},{"url":"https://bugzilla.suse.com/932882","tags":["report"]},{"url":"https://bugzilla.suse.com/933721","tags":["report"]},{"url":"https://bugzilla.suse.com/935055","tags":["report"]},{"url":"https://bugzilla.suse.com/936095","tags":["report"]},{"url":"https://bugzilla.suse.com/936118","tags":["report"]},{"url":"https://bugzilla.suse.com/936921","tags":["report"]},{"url":"https://bugzilla.suse.com/937256","tags":["report"]},{"url":"https://bugzilla.suse.com/938485","tags":["report"]},{"url":"https://bugzilla.suse.com/940925","tags":["report"]},{"url":"https://bugzilla.suse.com/940966","tags":["report"]},{"url":"https://bugzilla.suse.com/942204","tags":["report"]},{"url":"https://bugzilla.suse.com/942305","tags":["report"]},{"url":"https://bugzilla.suse.com/942367","tags":["report"]},{"url":"https://bugzilla.suse.com/942404","tags":["report"]},{"url":"https://bugzilla.suse.com/942605","tags":["report"]},{"url":"https://bugzilla.suse.com/942688","tags":["report"]},{"url":"https://bugzilla.suse.com/942938","tags":["report"]},{"url":"https://bugzilla.suse.com/943477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6252","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-2150","tags":["report"]},{"url":"http://xenbits.xen.org/xsa/xsa120.patch","tags":["report"]},{"url":"http://xenbits.xen.org/xsa/xsa120-classic.patch","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2589-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2590-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2613-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2614-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2631-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2632-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-3331","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-2150","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","status":"published","published":"2015-03-12T14:00:00Z","modified":"2024-08-06T05:02:43.453Z","updated_at":"2026-11-02T14:35:41.621934Z"}],"euvd":[{"id":"EUVD-2015-2260","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","status":"published","published":"2015-03-12T14:00:00Z","modified":"2024-08-06T05:02:43Z","updated_at":"2026-11-03T02:22:12.830256Z"}],"ghsa":[{"id":"GHSA-w7jv-fgrf-v497","title":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to...","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","status":"published","published":"2022-05-14T02:13:58Z","modified":"2025-04-12T12:47:07Z","updated_at":"2026-11-02T15:01:21.34906Z"}],"nvd":[{"id":"CVE-2015-2150","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","status":"published","published":"2015-03-12T14:59:02.633Z","modified":"2026-06-17T00:23:40.377Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:03.313464Z"}],"osv":[{"id":"BELL-CVE-2015-2150","title":"CVE-2015-2150 does not affect BellSoft software","status":"withdrawn","published":"2015-03-12T14:59:00Z","modified":"2026-01-28T07:21:40.809785Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2015-2150","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","status":"published","published":"2015-03-12T14:59:02Z","modified":"2026-04-16T06:17:40.925661789Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-2150","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","status":"published","published":"2015-03-12T14:59:02.633Z","modified":"2026-09-09T06:47:18.506546503Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DSA-3237-1","title":"linux - security update","status":"published","published":"2015-04-26T00:00:00Z","modified":"2026-03-09T01:18:26.980254Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0171","title":"Updated kernel package fixes security vulnerabilities","description":"This kernel update is based on upstream -longterm 3.14.39 and fixes the\nfollowing security issues:\n\nIt was found that the Linux kernel's Infiniband subsystem did not properly\nsanitize input parameters while registering memory regions from user space\nvia the (u)verbs API. A local user with access to a /dev/infiniband/uverbsX\ndevice could use this flaw to crash the system or, potentially, escalate\ntheir privileges on the system (CVE-2014-8159)\n\nThe stack randomization feature in the Linux kernel before 3.19.1 on 64-bit\nplatforms uses incorrect data types for the results of bitwise left-shift\noperations, which makes it easier for attackers to bypass the ASLR\nprotection mechanism by predicting the address of the top of the stack,\nrelated to the randomize_stack_top function in fs/binfmt_elf.c and the\nstack_maxrandom_size function in arch/x86/mm/mmap.c (CVE-2015-1593)\n\nXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly\nrestrict access to PCI command registers, which might allow local guest\nusers to cause a denial of service (non-maskable interrupt and host crash)\nby disabling the (1) memory or (2) I/O decoding for a PCI Express device\nand then accessing the device, which triggers an Unsupported Request\n(UR) response (CVE-2015-2150)\n\nSasha Levin discovered that the LLC subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this possibly allows\nprivilege escalation from a process with CAP_NET_ADMIN capability; it\nalso results in a trivial information leak (CVE-2015-2041).\n\nSasha Levin discovered that the RDS subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this results in a\ntrivial information leak (CVE-2015-2042).\n\nAndrew Lutomirski discovered that when a 64-bit task on an amd64 kernel\nmakes a fork(2) or clone(2) system call using int $0x80, the 32-bit\ncompatibility flag is set (correctly) but is not cleared on return.\nAs a result, both seccomp and audit will misinterpret the following\nsystem call by the task(s), possibly leading to a violation of security\npolicy (CVE-2015-2830).\n\nStephan Mueller discovered that the optimised implementation of RFC4106\nGCM for x86 processors that support AESNI miscalculated buffer addresses\nin some cases.  If an IPsec tunnel is configured to use this mode (also\nknown as AES-GCM-ESP) this can lead to memory corruption and crashes\n(even without malicious traffic).  This could potentially also result\nin remote code execution (CVE-2015-3331).\n\nBen Hutchings discovered that the TCP Fast Open feature regressed in\nLinux 3.16.7-ckt9, resulting in a kernel BUG when it is used.\nThis can be used as a local denial of service (CVE-2015-3332)\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2015-04-30T21:57:25Z","modified":"2026-04-16T06:22:55.241782077Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2015-0172","title":"Updated kernel-linus package fixes security vulnerabilities","description":"This kernel-linus update is based on upstream -longterm 3.14.39 and fixes\nthe following security issues:\n\nIt was found that the Linux kernel's Infiniband subsystem did not properly\nsanitize input parameters while registering memory regions from user space\nvia the (u)verbs API. A local user with access to a /dev/infiniband/uverbsX\ndevice could use this flaw to crash the system or, potentially, escalate\ntheir privileges on the system (CVE-2014-8159)\n\nThe stack randomization feature in the Linux kernel before 3.19.1 on 64-bit\nplatforms uses incorrect data types for the results of bitwise left-shift\noperations, which makes it easier for attackers to bypass the ASLR\nprotection mechanism by predicting the address of the top of the stack,\nrelated to the randomize_stack_top function in fs/binfmt_elf.c and the\nstack_maxrandom_size function in arch/x86/mm/mmap.c (CVE-2015-1593)\n\nXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly\nrestrict access to PCI command registers, which might allow local guest\nusers to cause a denial of service (non-maskable interrupt and host crash)\nby disabling the (1) memory or (2) I/O decoding for a PCI Express device\nand then accessing the device, which triggers an Unsupported Request\n(UR) response (CVE-2015-2150)\n\nSasha Levin discovered that the LLC subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this possibly allows\nprivilege escalation from a process with CAP_NET_ADMIN capability; it\nalso results in a trivial information leak (CVE-2015-2041).\n\nSasha Levin discovered that the RDS subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this results in a\ntrivial information leak (CVE-2015-2042).\n\nAndrew Lutomirski discovered that when a 64-bit task on an amd64 kernel\nmakes a fork(2) or clone(2) system call using int $0x80, the 32-bit\ncompatibility flag is set (correctly) but is not cleared on return.\nAs a result, both seccomp and audit will misinterpret the following\nsystem call by the task(s), possibly leading to a violation of security\npolicy (CVE-2015-2830).\n\nStephan Mueller discovered that the optimised implementation of RFC4106\nGCM for x86 processors that support AESNI miscalculated buffer addresses\nin some cases.  If an IPsec tunnel is configured to use this mode (also\nknown as AES-GCM-ESP) this can lead to memory corruption and crashes\n(even without malicious traffic).  This could potentially also result\nin remote code execution (CVE-2015-3331).\n\nBen Hutchings discovered that the TCP Fast Open feature regressed in\nLinux 3.16.7-ckt9, resulting in a kernel BUG when it is used.\nThis can be used as a local denial of service (CVE-2015-3332)\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2015-04-30T21:57:25Z","modified":"2026-04-16T06:24:12.981170402Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2015-0219","title":"Updated kernel-tmb packages fix security vulnerabilities","description":"This kernel-tmb update is based on upstream -longterm 3.14.41 and fixes\nthe following security issues:\n\nIt was found that the Linux kernel's Infiniband subsystem did not properly\nsanitize input parameters while registering memory regions from user space\nvia the (u)verbs API. A local user with access to a /dev/infiniband/uverbsX\ndevice could use this flaw to crash the system or, potentially, escalate\ntheir privileges on the system (CVE-2014-8159)\n\nnet/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before\n3.18 generates incorrect conntrack entries during handling of certain\niptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols,\nwhich allows remote attackers to bypass intended access restrictions\nvia packets with disallowed port numbers (CVE-2014-8160).\n\nThe em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel\nbefore 3.18.5, when the guest OS lacks SYSENTER MSR initialization,\nallows guest OS users to gain guest OS privileges or cause a denial of\nservice (guest OS crash) by triggering use of a 16-bit code segment for\nemulation of a SYSENTER instruction (CVE-2015-0239).\n\nThe stack randomization feature in the Linux kernel before 3.19.1 on 64-bit\nplatforms uses incorrect data types for the results of bitwise left-shift\noperations, which makes it easier for attackers to bypass the ASLR\nprotection mechanism by predicting the address of the top of the stack,\nrelated to the randomize_stack_top function in fs/binfmt_elf.c and the\nstack_maxrandom_size function in arch/x86/mm/mmap.c (CVE-2015-1593)\n\nXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly\nrestrict access to PCI command registers, which might allow local guest\nusers to cause a denial of service (non-maskable interrupt and host crash)\nby disabling the (1) memory or (2) I/O decoding for a PCI Express device\nand then accessing the device, which triggers an Unsupported Request\n(UR) response (CVE-2015-2150)\n\nSasha Levin discovered that the LLC subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this possibly allows\nprivilege escalation from a process with CAP_NET_ADMIN capability; it\nalso results in a trivial information leak (CVE-2015-2041).\n\nSasha Levin discovered that the RDS subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this results in a\ntrivial information leak (CVE-2015-2042).\n\nAndrew Lutomirski discovered that when a 64-bit task on an amd64 kernel\nmakes a fork(2) or clone(2) system call using int $0x80, the 32-bit\ncompatibility flag is set (correctly) but is not cleared on return.\nAs a result, both seccomp and audit will misinterpret the following\nsystem call by the task(s), possibly leading to a violation of security\npolicy (CVE-2015-2830).\n\nStephan Mueller discovered that the optimised implementation of RFC4106\nGCM for x86 processors that support AESNI miscalculated buffer addresses\nin some cases.  If an IPsec tunnel is configured to use this mode (also\nknown as AES-GCM-ESP) this can lead to memory corruption and crashes\n(even without malicious traffic).  This could potentially also result\nin remote code execution (CVE-2015-3331).\n\nBen Hutchings discovered that the TCP Fast Open feature regressed in\nLinux 3.16.7-ckt9, resulting in a kernel BUG when it is used.\nThis can be used as a local denial of service (CVE-2015-3332)\n\nIt was found that the Linux kernel's ping socket implementation didn't\nproperly handle socket unhashing during spurious disconnects which could\nlead to use-after-free flaw. On x86-64 architecture systems, a local user\nable to create ping sockets could use this flaw to crash the system. On\nnon-x86-64 architecture systems, a local user able to create ping sockets\ncould use this flaw to increase their privileges on the system.\nNote: By default ping sockets are disabled on the system \n(net.ipv4.ping_group_range = 1  0) and have to be explicitly enabled by the\nsystem administrator for specific user groups in order to exploit this issue\n(CVE-2015-3636).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2015-05-13T15:54:07Z","modified":"2026-04-16T06:25:52.349134742Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0098","title":"Updated xen packages fix security vulnerabilities","description":"This xen update is based on upstream 4.5.2 maintenance release, and fixes the\nfollowing security issues:\n\nThe vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running\non ARM hardware with general interrupt controller (GIC) version 2, allows\nlocal guest users to cause a denial of service (host crash) by writing an\ninvalid value to the GICD.SGIR register (CVE-2015-0268).\n\nThe ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local\nguests to cause a denial of service by causing a large number messages to\nbe logged (CVE-2015-1563).\n\nThe emulation routines for unspecified X86 devices in Xen 3.2.x through\n4.5.x does not properly initialize data, which allow local HVM guest users\nto obtain sensitive information via vectors involving an unsupported access\nsize (CVE-2015-2044).\n\nThe HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not\nproperly initialize data structures, which allows local guest users to\nobtain sensitive information via unspecified vectors (CVE-2015-2045).\n\nXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly\nrestrict access to PCI command registers, which might allow local guest\nusers to cause a denial of service (non-maskable interrupt and host crash)\nby disabling the (1) memory or (2) I/O decoding for a PCI Express device\nand then accessing the device, which triggers an Unsupported Request (UR)\nresponse (CVE-2015-2150).\n\nThe x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment\noverrides for instructions with register operands, which allows local guest\nusers to obtain sensitive information, cause a denial of service (memory\ncorruption), or possibly execute arbitrary code via unspecified vectors\n(CVE-2015-2151).\n\nXen 4.5.x and earlier enables certain default backends when emulating a VGA\ndevice for an x86 HVM guest qemu even when the configuration disables them,\nwhich allows local guest users to obtain access to the VGA console by (1)\nsetting the DISPLAY environment variable, when compiled with SDL support,\nor connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not\ncompiled with SDL support (CVE-2015-2152).\n\nXen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows\nremote domains with partial management control to cause a denial of service\n(host lock) via unspecified domctl operations (CVE-2015-2751). \n\nThe XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when\nusing a PCI passthrough device, is not preemptable, which allows local x86\nHVM domain users to cause a denial of service (host CPU consumption) via\na crafted request to the device model (qemu-dm) (CVE-2015-2752).\n\nQEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access\nto PCI command registers, which might allow local HVM guest users to cause\na denial of service (non-maskable interrupt and host crash) by disabling\nthe (1) memory or (2) I/O decoding for a PCI Express device and then\naccessing the device, which triggers an Unsupported Request (UR) response\n(CVE-2015-2756).\n\nHeap-based buffer overflow in the PCNET controller in QEMU allows remote\nattackers to execute arbitrary code by sending a packet with\nTXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS\nset (CVE-2015-3209).\n\nStack-based buffer overflow in the xl command line utility in Xen 4.1.x\nthrough 4.5.x allows local guest administrators to gain privileges via a\nlong configuration argument (CVE-2015-3259).\n\nXen 4.2.x through 4.5.x does not initialize certain fields, which allows\ncertain remote service domains to obtain sensitive information from memory\nvia a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request\n(CVE-2015-3340).\n\nThe Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier\nand KVM, allows local guest users to cause a denial of service (out-of-bounds\nwrite and guest crash) or possibly execute arbitrary code via the (1)\nFD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified\ncommands, aka VENOM (CVE-2015-3456).\n\nXen 3.3.x through 4.5.x does not properly restrict write access to the host\nMSI message data field, which allows local x86 HVM guest administrators\ncause a denial of service (host interrupt handling confusion) via vectors\nrelated to qemu and accessing spanning multiple fields (CVE-2015-4103).\n\nXen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask\nbits, which allows local x86 HVM guest users to cause a denial of service\n(unexpected interrupt and host crash) via unspecified vectors \n(CVE-2015-4104).\n\nXen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error\nmessages, which allows local x86 HVM guests to cause a denial of service\n(host disk consumption) via certain invalid operations (CVE-2015-4105).\n\nQEMU does not properly restrict write access to the PCI config space for\ncertain PCI pass-through devices, which mighy allow local x86 HVM guests\nto gain privileges, cause a denial of service (host crash), obtain\nsensitive information, or possibly have other unspecified impact via\nunknown vectors (CVE-2015-4106).\n\nGNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant\ntable operation version, which allows local guest domains to cause a\ndenial of service (NULL pointer dereference) via a hypercall without a\nGNTTABOP_setup_table or GNTTABOP_set_version (CVE-2015-4163).\n\nThe compat_iret function in Xen 3.1 through 4.5 iterates the wrong way\nthrough a loop, which allows local 32-bit PV guest administrators to cause\na denial of service (large loop and system hang) via a hypercall_iret call\nwith EFLAGS.VM set (CVE-2015-4164).\n\nHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen\n4.5.x and earlier, when the container has a CDROM drive enabled, allows\nlocal guest users to execute arbitrary code on the host via unspecified\nATAPI commands (CVE-2015-5154).\n\nThe C+ mode offload emulation in the RTL8139 network card device model in\nQEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read\nprocess heap memory via unspecified vectors (CVE-2015-5165).\n\nUse-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not\ncompletely unplug emulated block devices, which allows local HVM guest\nusers to gain privileges by unplugging a block device twice (CVE-2015-5166).\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"alignment\ncheck\" (#AC) exceptions. This causes the microcode to enter an infinite loop\nwhere the core never receives another interrupt. The host kernel panics due\nto this effect (CVE-2015-5307).\n\nThe xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x,\n4.4.x, and earlier does not limit the number of printk console messages\nwhen reporting a failure to retrieve a reference on a foreign page, which\nallows remote domains to cause a denial of service by leveraging\npermissions to map the memory of a foreign guest (CVE-2015-6654).\n\nlibxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag\non disks when using the qemu-xen device model, which allows local guest\nusers to write to a read-only disk image (CVE-2015-7311).\n\nA heap-based buffer overflow flaw was discovered in the way QEMU's AMD\nPC-Net II Ethernet Controller emulation received certain packets in\nloopback mode. A privileged user (with the CAP_SYS_RAWIO capability)\ninside a guest could use this flaw to crash the host QEMU process\n(resulting in denial of service) or, potentially, execute arbitrary\ncode with privileges of the host QEMU process (CVE-2015-7504).\n\nMulticall support for arm in xen 4.4.x and later was not correctly set\nup with correct functionality and therefore exposed to guests a code path\nwhich crashes the host. Any guest can issue a preemptable hypercall via the\nmulticall interface to exploit this vulnerability (CVE-2015-7812).\n\nXen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console\nmessages when reporting unimplemented hypercalls, which allows local guests\nto cause a denial of service via a sequence of (1) HYPERVISOR_physdev_op\nhypercalls, which are not properly handled in the do_physdev_op function\nin arch/arm/physdev.c, or (2) HYPERVISOR_hvm_op hypercalls, which are not\nproperly handled in the do_hvm_op function in arch/arm/hvm.c (CVE-2015-7813).\n\nRace condition in the relinquish_memory function in arch/arm/domain.c in\nXen 4.6.x and earlier allows local domains with partial management control\nto cause a denial of service (host crash) via vectors involving the\ndestruction of a domain and using XENMEM_decrease_reservation to reduce\nthe memory of the domain (CVE-2015-7814).\n\nThe mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does\nnot properly validate level 2 page table entries, which allows local PV\nguest administrators to gain privileges via a crafted superpage mapping\n(CVE-2015-7835).\n\nMultiple memory leaks in Xen 4.0 through 4.6.x allow local guest\nadministrators or domains with certain permission to cause a denial of\nservice (memory consumption) via a large number of \"teardowns\" of domains\nwith the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus\nhypercall or the xenoprofile state vcpu pointer array allocated using the\n(2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall\n(CVE-2015-7969).\n\nThe p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x,\n3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest\nadministrators to cause a denial of service (CPU consumption and possibly\nreboot) via crafted memory contents that triggers a \"time-consuming linear\nscan,\" related to Populate-on-Demand (CVE-2015-7970).\n\nXen 3.2.x through 4.6.x does not limit the number of printk console messages\nwhen logging certain pmu and profiling hypercalls, which allows local guests\nto cause a denial of service via a sequence of crafted (1) \nHYPERCALL_xenoprof_op hypercalls, which are not properly handled in the \ndo_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op\nhypercalls, which are not properly handled in the do_xenpmu_op function in\narch/x86/cpu/vpmu.c (CVE-2015-7971).\n\nThe (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) \nlibxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through\n4.6.x do not properly calculate the balloon size when using the\npopulate-on-demand (PoD) system, which allows local HVM guest users to\ncause a denial of service (guest crash) via unspecified vectors related\nto \"heavy memory pressure.\" (CVE-2015-7972)\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"debug check\"\n(#DB) exceptions. This causes the microcode to enter an infinite loop where\nthe core never receives another interrupt. The host kernel panics due to\nthis effect (CVE-2015-8104).\n\nXen 4.6.x and earlier does not properly enforce limits on page order inputs\nfor the (1) XENMEM_increase_reservation, (2) XENMEM_populate_physmap,\n(3) XENMEM_exchange, and possibly other HYPERVISOR_memory_op suboperations,\nwhich allows ARM guest OS administrators to cause a denial of service (CPU\nconsumption, guest reboot, or watchdog timeout and host reboot) and possibly\nhave unspecified other impact via unknown vectors (CVE-2015-8338).\n\nThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x\ndoes not properly hand back pages to a domain, which might allow guest OS\nadministrators to cause a denial of service (host crash) via unspecified\nvectors related to domain teardown (CVE-2015-8339).\n\nThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x\ndoes not properly release locks, which might allow guest OS administrators\nto cause a denial of service (deadlock or host crash) via unspecified\nvectors, related to XENMEM_exchange error handling (CVE-2015-8340).\n\nFelix Wilhelm discovered a race condition in the Xen paravirtualized\ndrivers which can cause double fetch vulnerabilities. An attacker in the\nparavirtualized guest could exploit this flaw to cause a denial of service\n(crash the host) or potentially execute arbitrary code on the host\n(CVE-2015-8550).\n\nInformation leak in legacy x86 FPU/XMM initialization (CVE-2015-8555).\n\nThe PV superpage functionality lacks certain validity checks on data\nbeing passed to the hypervisor by guests.  This is the case for the\npage identifier (MFN) passed to MMUEXT_MARK_SUPER and\nMMUEXT_UNMARK_SUPER sub-ops of the HYPERVISOR_mmuext_op hypercall as\nwell as for various forms of page table updates. Use of the feature,\nwhich is disabled by default, may have unknown effects, ranging from\ninformation leaks through Denial of Service to privilege escalation.\n(CVE-2016-1570)\n\nWhile INVLPG does not cause a General Protection Fault when used on a\nnon-canonical address, INVVPID in its \"individual address\" variant,\nwhich is used to back the intercepted INVLPG in certain cases, fails in\nsuch cases. Failure of INVVPID results in a hypervisor bug check.\nA malicious guest can crash the host, leading to a Denial of Service.\n(CVE-2016-1571)\n\nXen 4.6.x and earlier allows local guest administrators to cause a denial\nof service (host reboot) via vectors related to multiple mappings of MMIO\npages with different cachability settings (CVE-2016-2270).\n\nVMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows\nlocal HVM guest users to cause a denial of service (guest crash) via\nvectors related to a non-canonical RIP (CVE-2016-2271).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2016-03-07T11:20:30Z","modified":"2026-04-16T06:26:13.002854919Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"SUSE-RU-2015:0621-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T02:56:26.296013Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0581-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T03:39:09.914782Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0658-1","title":"Security Update for Linux Kernel","description":"\nThe SUSE Linux Enterprise Server 12 kernel was updated to 3.12.39 to\nreceive various security and bugfixes.\n\nFollowing security bugs were fixed:\n- CVE-2015-0777: The XEN usb backend could leak information to the guest\n  system due to copying uninitialized memory.\n\n- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access\n  to PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response.\n\nThe following non-security bugs were fixed:\n- Added Little Endian support to vtpm module (bsc#918620).\n- Add support for pnfs block layout. Patches not included by default yet\n- ALSA: hda - Fix regression of HD-audio controller fallback modes (bsc#921313).\n- btrfs: add missing blk_finish_plug in btrfs_sync_log() (bnc#922284).\n- btrfs: cleanup orphans while looking up default subvolume (bsc#914818).\n- btrfs: do not ignore errors from btrfs_lookup_xattr in do_setxattr (bnc#922272).\n- btrfs: fix BUG_ON in btrfs_orphan_add() when delete unused block group (bnc#922278).\n- btrfs: fix data loss in the fast fsync path (bnc#922275).\n- btrfs: fix fsync data loss after adding hard link to inode (bnc#922275).\n- cgroup: revert cgroup_mutex removal from idr_remove (bnc#918644).\n- cifs: fix use-after-free bug in find_writable_file (bnc#909477).\n- crypto: rng - RNGs must return 0 in success case (bsc#920805).\n- crypto: testmgr - fix RNG return code enforcement (bsc#920805).\n- exit: Always reap resource stats in __exit_signal() (Time scalability).\n- fork: report pid reservation failure properly (bnc#909684).\n- fsnotify: Fix handling of renames in audit (bnc#915200).\n- HID: hyperv: match wait_for_completion_timeout return type.\n- hv: address compiler warnings for hv_fcopy_daemon.c.\n- hv: address compiler warnings for hv_kvp_daemon.c.\n- hv: check vmbus_device_create() return value in vmbus_process_offer().\n- hv: do not add redundant / in hv_start_fcopy().\n- hv: hv_balloon: Do not post pressure status from interrupt context.\n- hv: hv_balloon: Fix a locking bug in the balloon driver.\n- hv: hv_balloon: Make adjustments in computing the floor.\n- hv: hv_fcopy: drop the obsolete message on transfer failure.\n- hv: kvp_daemon: make IPv6-only-injection work.\n- hv: remove unused bytes_written from kvp_update_file().\n- hv: rename sc_lock to the more generic lock.\n- hv: vmbus: Fix a bug in vmbus_establish_gpadl().\n- hv: vmbus: hv_process_timer_expiration() can be static.\n- hv: vmbus: Implement a clockevent device.\n- hv: vmbus: serialize Offer and Rescind offer.\n- hv: vmbus: Support a vmbus API for efficiently sending page arrays.\n- hv: vmbus: Use get_cpu() to get the current CPU.\n- hyperv: fix sparse warnings.\n- hyperv: Fix the error processing in netvsc_send().\n- hyperv: match wait_for_completion_timeout return type.\n- hyperv: netvsc.c: match wait_for_completion_timeout return type.\n- iommu/vt-d: Fix dmar_domain leak in iommu_attach_device (bsc#924460).\n- kabi, mm: prevent endless growth of anon_vma hierarchy (bnc#904242).\n- kABI: protect linux/namei.h include in procfs.\n- kABI: protect struct hif_scatter_req.\n- kabi/severities: Stop maintaining the kgraft kabi\n- kernel/sched/clock.c: add another clock for use with the soft lockup watchdog (bsc#919939).\n- kgr: Allow patches to require an exact kernel version (bnc#920615).\n- KVM: PPC: Book3S HV: ptes are big endian (bsc#920839).\n- mm: convert the rest to new page table lock api (the suse-only cases) (fate#315482).\n- mm: fix anon_vma-\u0026gt;degree underflow in anon_vma endless growing prevention (bnc#904242).\n- mm: fix corner case in anon_vma endless growing prevention (bnc#904242).\n- mm: prevent endless growth of anon_vma hierarchy (bnc#904242).\n- mm: prevent endless growth of anon_vma hierarchy  mm: prevent endless growth of anon_vma hierarchy (bnc#904242).\n- mm: vmscan: count only dirty pages as congested (VM Performance, bnc#910517).\n- module: Clean up ro/nx after early module load failures (bsc#921990).\n- module: set nx before marking module MODULE_STATE_COMING (bsc#921990).\n- net: add sysfs helpers for netdev_adjacent logic (bnc#915660).\n- net: correct error path in rtnl_newlink() (bnc#915660).\n- net: fix creation adjacent device symlinks (bnc#915660).\n- net: prevent of emerging cross-namespace symlinks (bnc#915660).\n- net: rename sysfs symlinks on device name change (bnc#915660).\n- nfs: cap request size to fit a kmalloced page array (bnc#898675).\n- nfs: commit layouts in fdatasync (bnc#898675).\n- NFSv4.1: Do not trust attributes if a pNFS LAYOUTCOMMIT is outstanding (bnc#898675).\n- NFSv4.1: Ensure that the layout recall callback matches layout stateids (bnc#898675).\n- NFSv4.1: Ensure that we free existing layout segments if we get a new layout (bnc#898675).\n- NFSv4.1: Fix a race in nfs4_write_inode (bnc#898675).\n- NFSv4.1: Fix wraparound issues in pnfs_seqid_is_newer() (bnc#898675).\n- NFSv4.1: Minor optimisation in get_layout_by_fh_locked() (bnc#898675).\n- NFSv4: Do not update the open stateid unless it is newer than the old one (bnc#898675).\n- pnfs: add a common GETDEVICELIST implementation (bnc#898675).\n- pnfs: add a nfs4_get_deviceid helper (bnc#898675).\n- pnfs: add flag to force read-modify-write in -\u0026gt;write_begin (bnc#898675).\n- pnfs: add return_range method (bnc#898675).\n- pnfs: allow splicing pre-encoded pages into the layoutcommit args (bnc#898675).\n- pnfs: avoid using stale stateids after layoutreturn (bnc#898675).\n- pnfs/blocklayout: allocate separate pages for the layoutcommit payload (bnc#898675).\n- pnfs/blocklayout: correctly decrement extent length (bnc#898675).\n- pnfs/blocklayout: do not set pages uptodate (bnc#898675).\n- pnfs/blocklayout: Fix a 64-bit division/remainder issue in bl_map_stripe (bnc#898675).\n- pnfs/blocklayout: implement the return_range method (bnc#898675).\n- pnfs/blocklayout: improve GETDEVICEINFO error reporting (bnc#898675).\n- pnfs/blocklayout: include vmalloc.h for __vmalloc (bnc#898675).\n- pnfs/blocklayout: in-kernel GETDEVICEINFO XDR parsing (bnc#898675).\n- pnfs/blocklayout: move all rpc_pipefs related code into a single file (bnc#898675).\n- pnfs/blocklayout: move extent processing to blocklayout.c (bnc#898675).\n- pnfs/blocklayout: plug block queues (bnc#898675).\n- pnfs/blocklayout: refactor extent processing (bnc#898675).\n- pnfs/blocklayout: reject pnfs blocksize larger than page size (bnc#898675).\n- pNFS/blocklayout: Remove a couple of unused variables (bnc#898675).\n- pnfs/blocklayout: remove read-modify-write handling in bl_write_pagelist (bnc#898675).\n- pnfs/blocklayout: remove some debugging (bnc#898675).\n- pnfs/blocklayout: return layouts on setattr (bnc#898675).\n- pnfs/blocklayout: rewrite extent tracking (bnc#898675).\n- pnfs/blocklayout: use the device id cache (bnc#898675).\n- pnfs: do not check sequence on new stateids in layoutget (bnc#898675).\n- pnfs: do not pass uninitialized lsegs to -\u0026gt;free_lseg (bnc#898675).\n- pnfs: enable CB_NOTIFY_DEVICEID support (bnc#898675).\n- pnfs: factor GETDEVICEINFO implementations (bnc#898675).\n- pnfs: force a layout commit when encountering busy segments during recall (bnc#898675).\n- pnfs: remove GETDEVICELIST implementation (bnc#898675).\n- pnfs: retry after a bad stateid error from layoutget (bnc#898675).\n- powerpc: add running_clock for powerpc to prevent spurious softlockup warnings (bsc#919939).\n- powerpc/pseries: Fix endian problems with LE migration (bsc#918584).\n- remove cgroup_mutex around deactivate_super because it might be dangerous.\n- rtmutex: Document pi chain walk (mutex scalability).\n- rtmutex: No need to keep task ref for lock owner check (mutex scalability).\n- rtmutex: Simplify rtmutex_slowtrylock() (mutex scalability).\n- rtnetlink: fix a memory leak when -\u0026gt;newlink fails (bnc#915660).\n- sched: Change thread_group_cputime() to use for_each_thread() (Time scalability).\n- sched: replace INIT_COMPLETION with reinit_completion.\n- sched, time: Atomically increment stime \u0026 utime (Time scalability).\n- scsi: storvsc: Always send on the selected outgoing channel.\n- scsi: storvsc: Do not assume that the scatterlist is not chained.\n- scsi: storvsc: Enable clustering.\n- scsi: storvsc: Fix a bug in copy_from_bounce_buffer().\n- scsi: storvsc: Increase the ring buffer size.\n- scsi: storvsc: Retrieve information about the capability of the target.\n- scsi: storvsc: Set the tablesize based on the information given by the host.\n- scsi: storvsc: Size the queue depth based on the ringbuffer size.\n- storvsc: fix a bug in storvsc limits.\n- storvsc: force discovery of LUNs that may have been removed.\n- storvsc: force SPC-3 compliance on win8 and win8 r2 hosts.\n- storvsc: in responce to a scan event, scan the host.\n- take read_seqbegin_or_lock() and friends to seqlock.h (Time scalability).\n- tcp: prevent fetching dst twice in early demux code (bnc#903997 bnc#919719).\n- time, signal: Protect resource use statistics with seqlock -kabi (Time scalability).\n- time, signal: Protect resource use statistics with seqlock (Time scalability).\n- udp: only allow UFO for packets from SOCK_DGRAM sockets (bnc#909309).\n- Update Xen patches to 3.12.39.\n- virtio: rng: add derating factor for use by hwrng core (bsc#918615).\n- x86, AVX-512: AVX-512 Feature Detection (bsc#921527).\n- x86, AVX-512: Enable AVX-512 States Context Switch (bsc#921527).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: xfs_alloc_fix_minleft can underflow near ENOSPC (bnc#913080).\n","status":"published","published":"2015-03-26T17:36:44Z","modified":"2026-02-04T03:16:12.3849Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0736-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel was \nupdated to fix various bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-25T15:06:22Z","modified":"2026-02-04T02:56:53.720404Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1174-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T03:52:02.093682Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1376-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel was \nupdated to fix various bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-25T15:06:22Z","modified":"2026-02-04T02:49:28.322135Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1478-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Server 11 SP2 LTSS kernel was updated to\nreceive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code.\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c in the Linux kernel\n  allowed guest OS users to obtain sensitive information from uninitialized\n  locations in host OS kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access\n  to PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bnc#919463).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: CVE-2015-1420: Race condition in the handle_to_path\n  function in fs/fhandle.c in the Linux kernel allowed local users to bypass\n  intended size restrictions and trigger read operations on additional\n  memory locations by changing the handle_bytes value of a file handle\n  during the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel did not properly consider the side effects\n  of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls,\n  which allowed local users to cause a denial of service (system crash)\n  or possibly gain privileges via a crafted application, aka an 'I/O vector\n  array overrun' (bnc#933429).\n- CVE-2015-3331: The __driver_rfc4106_decrypt function in\n  arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly\n  determine the memory locations used for encrypted data, which allowed\n  context-dependent attackers to cause a denial of service (buffer overflow\n  and system crash) or possibly execute arbitrary code by triggering a\n  crypto API call, as demonstrated by use of a libkcapi test program with\n  an AF_ALG(aead) socket (bnc#927257).\n- CVE-2015-2922: The ndisc_router_discovery function in net/ipv6/ndisc.c\n  in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack\n  in the Linux kernel allowed remote attackers to reconfigure a hop-limit\n  setting via a small hop_limit value in a Router Advertisement (RA)\n  message (bnc#922583).\n- CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel used an\n  incorrect data type in a sysctl table, which allowed local users to\n  obtain potentially sensitive information from kernel memory or possibly\n  have unspecified other impact by accessing a sysctl entry (bnc#919007).\n- CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the\n  Linux kernel did not initialize a certain list data structure during an\n  unhash operation, which allowed local users to gain privileges or cause\n  a denial of service (use-after-free and system crash) by leveraging the\n  ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or\n  IPPROTO_ICMPV6 protocol, and then making a connect system call after a\n  disconnect (bnc#929525).\n- CVE-2014-8086: Race condition in the ext4_file_write_iter function\n  in fs/ext4/file.c in the Linux kernel allowed local users to cause a\n  denial of service (file unavailability) via a combination of a write\n  action and an F_SETFL fcntl operation for the O_DIRECT flag (bnc#900881).\n- CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel\n  did not properly restrict use of User Verbs for registration of memory\n  regions, which allowed local users to access arbitrary physical memory\n  locations, and consequently cause a denial of service (system crash)\n  or gain privileges, by leveraging permissions on a uverbs device under\n  /dev/infiniband/ (bnc#914742).\n- CVE-2014-9683: Off-by-one error in the ecryptfs_decode_from_filename\n  function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux\n  kernel allowed local users to cause a denial of service (buffer overflow\n  and system crash) or possibly gain privileges via a crafted filename\n  (bnc#918333).\n- CVE-2015-2042: net/rds/sysctl.c in the Linux kernel used an incorrect\n  data type in a sysctl table, which allowed local users to obtain\n  potentially sensitive information from kernel memory or possibly have\n  unspecified other impact by accessing a sysctl entry (bnc#919018).\n- CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update\n  function in net/sctp/associola.c in the Linux kernel allowed remote\n  attackers to cause a denial of service (slab corruption and panic) or\n  possibly have unspecified other impact by triggering an INIT collision\n  that leads to improper handling of shared-key data (bnc#915577).\n\nThe following non-security bugs were fixed:\n- HID: add ALWAYS_POLL quirk for a Logitech 0xc007 (bnc#931474).\n- HID: add HP OEM mouse to quirk ALWAYS_POLL (bnc#931474).\n- HID: add quirk for PIXART OEM mouse used by HP (bnc#931474).\n- HID: usbhid: add always-poll quirk (bnc#931474).\n- HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen.\n- HID: usbhid: fix PIXART optical mouse (bnc#931474).\n- HID: usbhid: more mice with ALWAYS_POLL (bnc#931474).\n- HID: usbhid: yet another mouse with ALWAYS_POLL (bnc#931474).\n- bnx2x: Fix kdump when iommu=on (bug#921769).\n- cifs: fix use-after-free bug in find_writable_file (bnc#909477).\n- coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bsc#904671, bsc#929360).\n- dm: fixed that LVM merge snapshot of root logical volume were not working (bsc#928801)\n- deal with deadlock in d_walk fix (bnc#929148, bnc#929283).\n- e1000: do not enable dma receives until after dma address has been setup (bsc#821931).\n- fsnotify: Fix handling of renames in audit (bnc#915200).\n- inet: add a redirect generation id in inetpeer (bnc#860593).\n- inetpeer: initialize -\u0026gt;redirect_genid in inet_getpeer() (bnc#860593).\n- kabi: hide bnc#860593 changes of struct inetpeer_addr_base (bnc#860593).\n- kernel: fix data corruption when reading /proc/sysinfo (bsc#891087, bsc#937986, LTC#114480).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- time, ntp: Do not update time_state in middle of leap second (bsc#912916).\n- s390-3215-tty-close-crash.patch: kernel: 3215 tty close crash (bsc#916010, LTC#120873).\n- s390-3215-tty-close-race.patch: kernel: 3215 console crash (bsc#916010, LTC#94302).\n- s390-3215-tty-hang.patch: Renamed from patches.arch/s390-tty-hang.patch.\n- s390-3215-tty-hang.patch: Update references (bnc#898693, bnc#897995, LTC#114562).\n- s390-dasd-retry-partition-detection.patch: s390/dasd: retry partition detection (bsc#916010, LTC#94302).\n- s390-dasd-retry-partition-detection.patch: Update references (bsc#916010, LTC#120565).\n- s390-sclp-tty-refcount.patch: kernel: sclp console tty reference counting (bsc#916010, LTC#115466).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi/sg: sg_start_req(): make sure that there is not too many elements in iovec (bsc#940338).\n- x86, xsave: remove thread_has_fpu() bug check in __sanitize_i387_state() (bsc#904671, bsc#929360).\n- x86-mm-send-tlb-flush-ipis-to-online-cpus-only.patch: x86, mm: Send tlb flush IPIs to online cpus only (bnc#798406).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/reboot: Fix a warning message triggered by stop_other_cpus() (bnc#930284).\n- xen: Correctly re-enable interrupts in xen_spin_wait() (bsc#879878, bsc#908870).\n- xfs: prevent deadlock trying to cover an active log (bsc#917093).\n  ","status":"published","published":"2015-08-20T15:22:44Z","modified":"2026-02-04T04:09:53.876805Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1592-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes.\n\nThe following feature was added for RT:\n- FATE#317131: The SocketCAN (Peak PCI) driver was added for CAN bus support.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-09-09T17:05:11Z","modified":"2025-05-02T04:04:15.298019Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1611-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-08-21T19:44:59Z","modified":"2026-02-04T02:19:26.768156Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1678-1","title":"Security update for kernel-source","description":"The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various\nsecurity and bugfixes.\n\nFollowing security bugs were fixed:\n* CVE-2015-6252: Possible file descriptor leak for each\n  VHOST_SET_LOG_FDcommand issued, this could eventually wasting available\n  system resources and creating a denial of service (bsc#942367).\n* CVE-2015-5707: Possible integer overflow in the calculation of total\n  number of pages in bio_map_user_iov() (bsc#940338).\n* CVE-2015-5364: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 do not properly consider yielding a\n  processor, which allowed remote attackers to cause a denial of service\n  (system hang) via incorrect checksums within a UDP packet flood\n  (bsc#936831).\n* CVE-2015-5366: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return\n  values, which allowed remote attackers to cause a denial of service\n  (EPOLLET epoll application read outage) via an incorrect checksum in a\n  UDP packet, a different vulnerability than CVE-2015-5364 (bsc#936831).\n* CVE-2015-1420: Race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel through 3.19.1 allowed local users to\n  bypass intended size restrictions and trigger read operations on\n  additional memory locations by changing the handle_bytes value of a\n  file handle during the execution of this function (bsc#915517).\n* CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel before 3.16 do not properly consider the\n  side effects of failed __copy_to_user_inatomic and\n  __copy_from_user_inatomic calls, which allows local users to cause a\n  denial of service (system crash) or possibly gain privileges via a\n  crafted application, aka an 'I/O' vector array overrun. (bsc#933429)\n* CVE-2015-2150: Xen 3.3.x through 4.5.x and the Linux kernel through\n  3.19.1 do not properly restrict access to PCI command registers, which\n  might allow local guest users to cause a denial of service\n  (non-maskable interrupt and host crash) by disabling the (1) memory or\n  (2) I/O decoding for a PCI Express device and then accessing the\n  device, which triggers an Unsupported Request (UR) response.\n  (bsc#919463)\n* CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel before\n  3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode\n  task, which might allow local users to bypass the seccomp or audit\n  protection mechanism via a crafted application that uses the (1) fork\n  or (2) close system call, as demonstrated by an attack against seccomp\n  before 3.16. (bsc#926240)\n* CVE-2015-4700: The bpf_int_jit_compile function in\n  arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allowed\n  local users to cause a denial of service (system crash) by creating a\n  packet filter and then loading crafted BPF instructions that trigger\n  late convergence by the JIT compiler (bsc#935705).\n* CVE-2015-4167: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.19.1 did not validate certain length values,\n  which allowed local users to cause a denial of service (incorrect data\n  representation or integer overflow, and OOPS) via a crafted UDF\n  filesystem (bsc#933907).\n* CVE-2015-0777: drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0\n  (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as\n  used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions,\n  allows guest OS users to obtain sensitive information from\n  uninitialized locations in host OS kernel memory via unspecified\n  vectors. (bsc#917830)\n* CVE-2014-9728: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not validate certain lengths, which allowed local\n  users to cause a denial of service (buffer over-read and system crash)\n  via a crafted filesystem image, related to fs/udf/inode.c and\n  fs/udf/symlink.c (bsc#933904).\n* CVE-2014-9730: The udf_pc_to_char function in fs/udf/symlink.c in the\n  Linux kernel before 3.18.2 relies on component lengths that are unused,\n  which allowed local users to cause a denial of service (system crash)\n  via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9729: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.18.2 did not ensure a certain data-structure size\n  consistency, which allowed local users to cause a denial of service\n  (system crash) via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9731: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not ensure that space is available for storing a\n  symlink target's name along with a trailing \\0 character, which allowed\n  local users to obtain sensitive information via a crafted filesystem\n  image, related to fs/udf/symlink.c and fs/udf/unicode.c (bsc#933896).\n\nThe following non-security bugs were fixed:\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942350).\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942404).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942404).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942404).\n- Btrfs: fix hang when failing to submit bio of directIO (bnc#942688).\n- Btrfs: fix memory corruption on failure to submit bio for direct IO (bnc#942688).\n- Btrfs: fix put dio bio twice when we submit dio bio fail (bnc#942688).\n- DRM/I915: Add enum hpd_pin to intel_encoder (bsc#942938).\n- DRM/i915: Convert HPD interrupts to make use of HPD pin assignment in encoders (v2) (bsc#942938).\n- DRM/i915: Get rid of the 'hotplug_supported_mask' in struct drm_i915_private (bsc#942938).\n- DRM/i915: Remove i965_hpd_irq_setup (bsc#942938).\n- DRM/i915: Remove valleyview_hpd_irq_setup (bsc#942938).\n- Ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- IB/iser: Add Discovery support (bsc#923002).\n- IB/iser: Move informational messages from error to info level (bsc#923002).\n- NFS: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- NFSD: Fix nfsv4 opcode decoding error (bsc#935906).\n- NFSv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- PCI: Disable Bus Master only on kexec reboot (bsc#920110).\n- PCI: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- PCI: Do not try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- PCI: Lock down register access when trusted_kernel is true (fate#314486, bnc#884333)(bsc#923431).\n- PCI: disable Bus Master on PCI device shutdown (bsc#920110).\n- USB: xhci: Reset a halted endpoint immediately when we encounter a stall (bnc#933721).\n- USB: xhci: do not start a halted endpoint before its new dequeue is set (bnc#933721).\n- Apparmor: fix file_permission if profile is updated (bsc#917968).\n- block: Discard bios do not have data (bsc#928988).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/i915: (re)init HPD interrupt storm statistics (bsc#942938).\n- drm/i915: Add HPD IRQ storm detection (v5) (bsc#942938).\n- drm/i915: Add Reenable Timer to turn Hotplug Detection back on (v4) (bsc#942938).\n- drm/i915: Add bit field to record which pins have received HPD events (v3) (bsc#942938).\n- drm/i915: Add messages useful for HPD storm detection debugging (v2) (bsc#942938).\n- drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt (bsc#942938).\n- drm/i915: Disable HPD interrupt on pin when irq storm is detected (v3) (bsc#942938).\n- drm/i915: Do not WARN nor handle unexpected hpd interrupts on gmch platforms (bsc#942938).\n- drm/i915: Enable hotplug interrupts after querying hw capabilities (bsc#942938).\n- drm/i915: Fix hotplug interrupt enabling for SDVOC (bsc#942938).\n- drm/i915: Fix up sdvo hpd pins for i965g/gm (bsc#942938).\n- drm/i915: Make hpd arrays big enough to avoid out of bounds access (bsc#942938).\n- drm/i915: Mask out the HPD irq bits before setting them individually (bsc#942938).\n- drm/i915: Only print hotplug event message when hotplug bit is set (bsc#942938).\n- drm/i915: Only reprobe display on encoder which has received an HPD event (v2) (bsc#942938).\n- drm/i915: Queue reenable timer also when enable_hotplug_processing is false (bsc#942938).\n- drm/i915: Remove pch_rq_mask from struct drm_i915_private (bsc#942938).\n- drm/i915: Use an interrupt save spinlock in intel_hpd_irq_handler() (bsc#942938).\n- drm/i915: WARN_ONCE() about unexpected interrupts for all chipsets (bsc#942938).\n- drm/i915: assert_spin_locked for pipestat interrupt enable/disable (bsc#942938).\n- drm/i915: clear crt hotplug compare voltage field before setting (bsc#942938).\n- drm/i915: close tiny race in the ilk pcu even interrupt setup (bsc#942938).\n- drm/i915: fix hotplug event bit tracking (bsc#942938).\n- drm/i915: fix hpd interrupt register locking (bsc#942938).\n- drm/i915: fix hpd work vs. flush_work in the pageflip code deadlock (bsc#942938).\n- drm/i915: fix locking around ironlake_enable|disable_display_irq (bsc#942938).\n- drm/i915: fold the hpd_irq_setup call into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the no-irq check into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the queue_work into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: implement ibx_hpd_irq_setup (bsc#942938).\n- drm/i915: s/hotplug_irq_storm_detect/intel_hpd_irq_handler/ (bsc#942938).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails (FATE#317582).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (FATE#317582).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (FATE#317582, bnc#883380, bsc#935572).\n- ehci-pci: enable interrupt on BayTrail (bnc926007).\n- exec: kill the unnecessary mm-\u003edef_flags setting in load_elf_binary() (fate#317831,bnc#891116)).\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637). \n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hv_storvsc: use small sg_tablesize on x86 (bnc#937256).\n- ibmveth: Add GRO support (bsc#935055).\n- ibmveth: Add support for Large Receive Offload (bsc#935055).\n- ibmveth: Add support for TSO (bsc#935055).\n- ibmveth: add support for TSO6.\n- ibmveth: change rx buffer default allocation for CMO (bsc#935055).\n- igb: do not reuse pages with pfmemalloc flag fix (bnc#920016).\n- inotify: Fix nested sleeps in inotify_read() (bsc#940925).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipv6: probe routes asynchronous in rt6_probe (bsc#936118).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kabi: wrapper include file with __GENKSYMS__ check to avoid kabi change (bsc920110).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn.\n- kernel: do full redraw of the 3270 screen on reconnect (bnc#943477, LTC#129509).\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- libiscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#938485).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm, THP: do not hold mmap_sem in khugepaged when allocating THP (VM Performance).\n- mm, mempolicy: remove duplicate code (VM Functionality, bnc#931620).\n- mm, thp: fix collapsing of hugepages on madvise (VM Functionality).\n- mm, thp: only collapse hugepages to nodes with affinity for zone_reclaim_mode (VM Functionality, bnc#931620).\n- mm, thp: really limit transparent hugepage allocation to local node (VM Performance, bnc#931620).\n- mm, thp: respect MPOL_PREFERRED policy with non-local node (VM Performance, bnc#931620).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm/mempolicy.c: merge alloc_hugepage_vma to alloc_pages_vma (VM Performance, bnc#931620).\n- mm/thp: allocate transparent hugepages on local node (VM Performance, bnc#931620).\n- mm: make page pfmemalloc check more robust (bnc#920016).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- mm: thp: khugepaged: add policy for finding target node (VM Functionality, bnc#931620).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- netfilter: nf_conntrack_proto_sctp: minimal multihoming support (bsc#932350).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (FATE#309111, bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler (bsc#929142).\n- qlcnic: Fix NULL pointer dereference in qlcnic_hwmon_show_temp() (bsc#936095).\n- r8169: remember WOL preferences on driver load (bsc#942305).\n- s390/dasd: fix kernel panic when alias is set offline (bnc#940966, LTC#128595).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi: Correctly set the scsi host/msg/status bytes (bnc#933936).\n- scsi: fix scsi_error_handler vs. scsi_host_dev_release race (bnc#942204).\n- scsi: Moved iscsi kabi patch to patches.kabi (bsc#923002)\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: kabi: allow iscsi disocvery session support (bsc#923002).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi_transport_iscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- sg_start_req(): make sure that there's not too many elements in iovec (bsc#940338).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- supported.conf: enable sch_mqprio (bsc#932882)\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb (bnc#933721).\n- usb: xhci: handle Config Error Change (CEC) in xhci driver (bnc#933721).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86-64: Do not apply destructive erratum workaround on unaffected CPUs (bsc#929076).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/tsc: Change Fast TSC calibration failed from error to info (bnc#942605).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: fix problem when using md+XFS under high load (bnc#925705).\n- xhci: Allocate correct amount of scratchpad buffers (bnc#933721).\n- xhci: Do not enable/disable RWE on bus suspend/resume (bnc#933721).\n- xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256 (bnc#933721).\n- xhci: Treat not finding the event_seg on COMP_STOP the same as COMP_STOP_INVAL (bnc#933721).\n- xhci: Workaround for PME stuck issues in Intel xhci (bnc#933721).\n- xhci: do not report PLC when link is in internal resume state (bnc#933721).\n- xhci: fix reporting of 0-sized URBs in control endpoint (bnc#933721).\n- xhci: report U3 when link is in resume state (bnc#933721).\n- xhci: rework cycle bit checking for new dequeue pointers (bnc#933721).\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936921, bnc#936925, LTC#126491).","status":"published","published":"2015-09-08T16:29:34Z","modified":"2026-02-04T03:45:14.157452Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-2150","description":"Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.","status":"published","published":"2015-03-12T00:00:00Z","modified":"2026-10-28T08:17:10.811881204Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2589-1","title":"linux-lts-utopic vulnerabilities","description":"Jan Beulich discovered the Xen virtual machine subsystem of the Linux\nkernel did not properly restrict access to PCI command registers. A local\nguest user could exploit this flaw to cause a denial of service (host\ncrash). (CVE-2015-2150)\n\nA stack overflow was discovered in the the microcode loader for the intel\nx86 platform. A local attacker could exploit this flaw to cause a denial of\nservice (kernel crash) or to potentially execute code with kernel\nprivileges. (CVE-2015-2666)\n\nA privilege escalation was discovered in the fork syscall via the int80\nentry on 64 bit kernels with 32 bit emulation support. An unprivileged\nlocal attacker could exploit this flaw to increase their privileges on the\nsystem. (CVE-2015-2830)\n\nIt was discovered that the Linux kernel's IPv6 networking stack has a flaw\nthat allows using route advertisement (RA) messages to set the 'hop_limit'\nto values that are too low. An unprivileged attacker on a local network\ncould exploit this flaw to cause a denial of service (IPv6 messages\ndropped). (CVE-2015-2922)\n","status":"published","published":"2015-04-30T08:31:41Z","modified":"2026-02-10T04:40:53Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2614-1","title":"linux vulnerabilities","description":"Vincent Tondellier discovered an integer overflow in the Linux kernel's\nnetfilter connection tracking accounting of loaded extensions. An attacker\non the local area network (LAN) could potential exploit this flaw to cause\na denial of service (system crash of targeted system). (CVE-2014-9715)\n\nJan Beulich discovered the Xen virtual machine subsystem of the Linux\nkernel did not properly restrict access to PCI command registers. A local\nguest user could exploit this flaw to cause a denial of service (host\ncrash). (CVE-2015-2150)\n\nA privilege escalation was discovered in the fork syscall via the int80 entry\non 64 bit kernels with 32 bit emulation support. An unprivileged local\nattacker could exploit this flaw to increase their privileges on the\nsystem. (CVE-2015-2830)\n\nA memory corruption issue was discovered in AES decryption when using the\nIntel AES-NI accelerated code path. A remote attacker could exploit this\nflaw to cause a denial of service (system crash) or potentially escalate\nprivileges on Intel base machines with AEC-GCM mode IPSec security\nassociation. (CVE-2015-3331)\n","status":"published","published":"2015-05-20T11:28:12Z","modified":"2026-04-22T09:12:58.784399Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}