{"id":"CVE-2015-2830","aliases":["BELL-CVE-2015-2830","DEBIAN-CVE-2015-2830","DLA-246-1","DSA-3237-1","EUVD-2015-2918","GHSA-mw97-2rg5-mpgw","MGASA-2015-0171","MGASA-2015-0172","MGASA-2015-0219","RHSA-2015:1137","RHSA-2015:1138","RHSA-2015:1139","RHSA-2015:1221","SUSE-RU-2015:0621-1","SUSE-SU-2015:0581-1","SUSE-SU-2015:0736-1","SUSE-SU-2015:1071-1","SUSE-SU-2015:1174-1","SUSE-SU-2015:1376-1","SUSE-SU-2015:1478-1","SUSE-SU-2015:1592-1","SUSE-SU-2015:1611-1","SUSE-SU-2015:1678-1","UBUNTU-CVE-2015-2830","USN-2589-1","USN-2614-1"],"status":"published","title":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag...","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0041,"percentile":0.35535,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2014-09-24T00:35:24Z","modified":"2026-10-28T08:17:13Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.16.7-ckt9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.16.7-ckt9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.16.7-ckt9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-53.88"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-36.48~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-48squeeze12"}]}],"versions":["2.6.32-30","2.6.32-30+m68k.5","2.6.32-31","2.6.32-31~bpo50+1","2.6.32-32","2.6.32-33","2.6.32-34","2.6.32-34squeeze1","2.6.32-35","2.6.32-35squeeze1","2.6.32-35squeeze2","2.6.32-35~bpo50+1","2.6.32-36","2.6.32-37","2.6.32-38","2.6.32-39","2.6.32-39squeeze1","2.6.32-40","2.6.32-41","2.6.32-41squeeze2","2.6.32-42","2.6.32-43","2.6.32-44","2.6.32-45","2.6.32-46","2.6.32-46squeeze1","2.6.32-47","2.6.32-48","2.6.32-48squeeze1","2.6.32-48squeeze10","2.6.32-48squeeze11","2.6.32-48squeeze3","2.6.32-48squeeze4","2.6.32-48squeeze5","2.6.32-48squeeze6","2.6.32-48squeeze7","2.6.32-48squeeze8","2.6.32-48squeeze9"],"bundled":16},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.68-1+deb7u1"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1~bpo60+1"],"bundled":9},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt9-3~deb8u1"}]}],"versions":["3.16.7-ckt9-2","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":9},{"source":"osv","ecosystem":"Mageia:4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.39-1.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.39-1.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-6.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-6.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-16.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-broadcom-wl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.30.223.141-51.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.010.1006-21.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia173","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"173.14.39-36.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.125-6.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"331.113-6.mga4.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.39-1.mga4"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.41-1.mga4"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.ael7b"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-229.rt56.153.el6rt"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-229.7.2.rt56.141.6.el7_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-504.30.3.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.3"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.43-52.6.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-53.88"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-36.48~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-36.48~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-53.88"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86"],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2631-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2632-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1032413","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3237","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1138.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://github.com/torvalds/linux/commit/956421fbb74c3a6261903f3836c0740187cf038b","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=956421fbb74c3a6261903f3836c0740187cf038b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1208598","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1137.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1221.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/04/02/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2830","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=956421fbb74c3a6261903f3836c0740187cf038b"},{"url":"https://github.com/advisories/GHSA-mw97-2rg5-mpgw"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-2830","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-2830","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0171.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15612","tags":["report"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.33","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.34","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.35","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.36","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.37","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.38","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.39","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0172.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15613","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2015-0219.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15614","tags":["report"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.40","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.41","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1137","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1175235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1192519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202855","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1137.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9420","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9529","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9529","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1573","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1573","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1593","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1593","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2830","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1138","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1217849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223077","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1138.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1139","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1212083","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1139.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1221","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/articles/1506133","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1201887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1203712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1218074","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1221.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-5321","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-5321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5321","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2922","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2922","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3636","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150621-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/599263","tags":["report"]},{"url":"https://bugzilla.suse.com/708296","tags":["report"]},{"url":"https://bugzilla.suse.com/733022","tags":["report"]},{"url":"https://bugzilla.suse.com/745640","tags":["report"]},{"url":"https://bugzilla.suse.com/755743","tags":["report"]},{"url":"https://bugzilla.suse.com/760407","tags":["report"]},{"url":"https://bugzilla.suse.com/763463","tags":["report"]},{"url":"https://bugzilla.suse.com/763968","tags":["report"]},{"url":"https://bugzilla.suse.com/765523","tags":["report"]},{"url":"https://bugzilla.suse.com/767610","tags":["report"]},{"url":"https://bugzilla.suse.com/769035","tags":["report"]},{"url":"https://bugzilla.suse.com/769644","tags":["report"]},{"url":"https://bugzilla.suse.com/770541","tags":["report"]},{"url":"https://bugzilla.suse.com/771619","tags":["report"]},{"url":"https://bugzilla.suse.com/773006","tags":["report"]},{"url":"https://bugzilla.suse.com/773255","tags":["report"]},{"url":"https://bugzilla.suse.com/773837","tags":["report"]},{"url":"https://bugzilla.suse.com/774818","tags":["report"]},{"url":"https://bugzilla.suse.com/779488","tags":["report"]},{"url":"https://bugzilla.suse.com/783475","tags":["report"]},{"url":"https://bugzilla.suse.com/785901","tags":["report"]},{"url":"https://bugzilla.suse.com/786450","tags":["report"]},{"url":"https://bugzilla.suse.com/787843","tags":["report"]},{"url":"https://bugzilla.suse.com/789010","tags":["report"]},{"url":"https://bugzilla.suse.com/789359","tags":["report"]},{"url":"https://bugzilla.suse.com/792271","tags":["report"]},{"url":"https://bugzilla.suse.com/793727","tags":["report"]},{"url":"https://bugzilla.suse.com/794824","tags":["report"]},{"url":"https://bugzilla.suse.com/797090","tags":["report"]},{"url":"https://bugzilla.suse.com/797526","tags":["report"]},{"url":"https://bugzilla.suse.com/797727","tags":["report"]},{"url":"https://bugzilla.suse.com/797909","tags":["report"]},{"url":"https://bugzilla.suse.com/798050","tags":["report"]},{"url":"https://bugzilla.suse.com/800255","tags":["report"]},{"url":"https://bugzilla.suse.com/800875","tags":["report"]},{"url":"https://bugzilla.suse.com/801341","tags":["report"]},{"url":"https://bugzilla.suse.com/801427","tags":["report"]},{"url":"https://bugzilla.suse.com/803320","tags":["report"]},{"url":"https://bugzilla.suse.com/804482","tags":["report"]},{"url":"https://bugzilla.suse.com/804609","tags":["report"]},{"url":"https://bugzilla.suse.com/804950","tags":["report"]},{"url":"https://bugzilla.suse.com/805114","tags":["report"]},{"url":"https://bugzilla.suse.com/805371","tags":["report"]},{"url":"https://bugzilla.suse.com/805740","tags":["report"]},{"url":"https://bugzilla.suse.com/805804","tags":["report"]},{"url":"https://bugzilla.suse.com/806396","tags":["report"]},{"url":"https://bugzilla.suse.com/806976","tags":["report"]},{"url":"https://bugzilla.suse.com/806988","tags":["report"]},{"url":"https://bugzilla.suse.com/806990","tags":["report"]},{"url":"https://bugzilla.suse.com/807434","tags":["report"]},{"url":"https://bugzilla.suse.com/807471","tags":["report"]},{"url":"https://bugzilla.suse.com/807502","tags":["report"]},{"url":"https://bugzilla.suse.com/808015","tags":["report"]},{"url":"https://bugzilla.suse.com/808079","tags":["report"]},{"url":"https://bugzilla.suse.com/808136","tags":["report"]},{"url":"https://bugzilla.suse.com/808837","tags":["report"]},{"url":"https://bugzilla.suse.com/808855","tags":["report"]},{"url":"https://bugzilla.suse.com/808940","tags":["report"]},{"url":"https://bugzilla.suse.com/809122","tags":["report"]},{"url":"https://bugzilla.suse.com/809130","tags":["report"]},{"url":"https://bugzilla.suse.com/809463","tags":["report"]},{"url":"https://bugzilla.suse.com/809895","tags":["report"]},{"url":"https://bugzilla.suse.com/809975","tags":["report"]},{"url":"https://bugzilla.suse.com/810323","tags":["report"]},{"url":"https://bugzilla.suse.com/810722","tags":["report"]},{"url":"https://bugzilla.suse.com/812274","tags":["report"]},{"url":"https://bugzilla.suse.com/812281","tags":["report"]},{"url":"https://bugzilla.suse.com/812332","tags":["report"]},{"url":"https://bugzilla.suse.com/812526","tags":["report"]},{"url":"https://bugzilla.suse.com/812974","tags":["report"]},{"url":"https://bugzilla.suse.com/813245","tags":["report"]},{"url":"https://bugzilla.suse.com/813604","tags":["report"]},{"url":"https://bugzilla.suse.com/813733","tags":["report"]},{"url":"https://bugzilla.suse.com/813922","tags":["report"]},{"url":"https://bugzilla.suse.com/814336","tags":["report"]},{"url":"https://bugzilla.suse.com/815256","tags":["report"]},{"url":"https://bugzilla.suse.com/815320","tags":["report"]},{"url":"https://bugzilla.suse.com/815356","tags":["report"]},{"url":"https://bugzilla.suse.com/816043","tags":["report"]},{"url":"https://bugzilla.suse.com/816099","tags":["report"]},{"url":"https://bugzilla.suse.com/816451","tags":["report"]},{"url":"https://bugzilla.suse.com/816708","tags":["report"]},{"url":"https://bugzilla.suse.com/817035","tags":["report"]},{"url":"https://bugzilla.suse.com/817377","tags":["report"]},{"url":"https://bugzilla.suse.com/818047","tags":["report"]},{"url":"https://bugzilla.suse.com/818064","tags":["report"]},{"url":"https://bugzilla.suse.com/818371","tags":["report"]},{"url":"https://bugzilla.suse.com/818465","tags":["report"]},{"url":"https://bugzilla.suse.com/818545","tags":["report"]},{"url":"https://bugzilla.suse.com/819018","tags":["report"]},{"url":"https://bugzilla.suse.com/819195","tags":["report"]},{"url":"https://bugzilla.suse.com/819363","tags":["report"]},{"url":"https://bugzilla.suse.com/819523","tags":["report"]},{"url":"https://bugzilla.suse.com/819610","tags":["report"]},{"url":"https://bugzilla.suse.com/819655","tags":["report"]},{"url":"https://bugzilla.suse.com/819979","tags":["report"]},{"url":"https://bugzilla.suse.com/820102","tags":["report"]},{"url":"https://bugzilla.suse.com/820172","tags":["report"]},{"url":"https://bugzilla.suse.com/820338","tags":["report"]},{"url":"https://bugzilla.suse.com/820434","tags":["report"]},{"url":"https://bugzilla.suse.com/820848","tags":["report"]},{"url":"https://bugzilla.suse.com/821052","tags":["report"]},{"url":"https://bugzilla.suse.com/821070","tags":["report"]},{"url":"https://bugzilla.suse.com/821235","tags":["report"]},{"url":"https://bugzilla.suse.com/821259","tags":["report"]},{"url":"https://bugzilla.suse.com/821465","tags":["report"]},{"url":"https://bugzilla.suse.com/821619","tags":["report"]},{"url":"https://bugzilla.suse.com/821799","tags":["report"]},{"url":"https://bugzilla.suse.com/821859","tags":["report"]},{"url":"https://bugzilla.suse.com/821930","tags":["report"]},{"url":"https://bugzilla.suse.com/821948","tags":["report"]},{"url":"https://bugzilla.suse.com/821980","tags":["report"]},{"url":"https://bugzilla.suse.com/822052","tags":["report"]},{"url":"https://bugzilla.suse.com/822066","tags":["report"]},{"url":"https://bugzilla.suse.com/822077","tags":["report"]},{"url":"https://bugzilla.suse.com/822080","tags":["report"]},{"url":"https://bugzilla.suse.com/822164","tags":["report"]},{"url":"https://bugzilla.suse.com/822225","tags":["report"]},{"url":"https://bugzilla.suse.com/822340","tags":["report"]},{"url":"https://bugzilla.suse.com/822431","tags":["report"]},{"url":"https://bugzilla.suse.com/822433","tags":["report"]},{"url":"https://bugzilla.suse.com/822575","tags":["report"]},{"url":"https://bugzilla.suse.com/822579","tags":["report"]},{"url":"https://bugzilla.suse.com/822722","tags":["report"]},{"url":"https://bugzilla.suse.com/822825","tags":["report"]},{"url":"https://bugzilla.suse.com/822878","tags":["report"]},{"url":"https://bugzilla.suse.com/823082","tags":["report"]},{"url":"https://bugzilla.suse.com/823223","tags":["report"]},{"url":"https://bugzilla.suse.com/823342","tags":["report"]},{"url":"https://bugzilla.suse.com/823386","tags":["report"]},{"url":"https://bugzilla.suse.com/823517","tags":["report"]},{"url":"https://bugzilla.suse.com/823597","tags":["report"]},{"url":"https://bugzilla.suse.com/823618","tags":["report"]},{"url":"https://bugzilla.suse.com/823795","tags":["report"]},{"url":"https://bugzilla.suse.com/824159","tags":["report"]},{"url":"https://bugzilla.suse.com/824256","tags":["report"]},{"url":"https://bugzilla.suse.com/824295","tags":["report"]},{"url":"https://bugzilla.suse.com/824568","tags":["report"]},{"url":"https://bugzilla.suse.com/824915","tags":["report"]},{"url":"https://bugzilla.suse.com/825006","tags":["report"]},{"url":"https://bugzilla.suse.com/825037","tags":["report"]},{"url":"https://bugzilla.suse.com/825048","tags":["report"]},{"url":"https://bugzilla.suse.com/825142","tags":["report"]},{"url":"https://bugzilla.suse.com/825227","tags":["report"]},{"url":"https://bugzilla.suse.com/825291","tags":["report"]},{"url":"https://bugzilla.suse.com/825591","tags":["report"]},{"url":"https://bugzilla.suse.com/825657","tags":["report"]},{"url":"https://bugzilla.suse.com/825696","tags":["report"]},{"url":"https://bugzilla.suse.com/825887","tags":["report"]},{"url":"https://bugzilla.suse.com/825896","tags":["report"]},{"url":"https://bugzilla.suse.com/826102","tags":["report"]},{"url":"https://bugzilla.suse.com/826186","tags":["report"]},{"url":"https://bugzilla.suse.com/826350","tags":["report"]},{"url":"https://bugzilla.suse.com/826486","tags":["report"]},{"url":"https://bugzilla.suse.com/826602","tags":["report"]},{"url":"https://bugzilla.suse.com/826756","tags":["report"]},{"url":"https://bugzilla.suse.com/826960","tags":["report"]},{"url":"https://bugzilla.suse.com/826978","tags":["report"]},{"url":"https://bugzilla.suse.com/827246","tags":["report"]},{"url":"https://bugzilla.suse.com/827271","tags":["report"]},{"url":"https://bugzilla.suse.com/827372","tags":["report"]},{"url":"https://bugzilla.suse.com/827376","tags":["report"]},{"url":"https://bugzilla.suse.com/827378","tags":["report"]},{"url":"https://bugzilla.suse.com/827416","tags":["report"]},{"url":"https://bugzilla.suse.com/827527","tags":["report"]},{"url":"https://bugzilla.suse.com/827670","tags":["report"]},{"url":"https://bugzilla.suse.com/827749","tags":["report"]},{"url":"https://bugzilla.suse.com/827750","tags":["report"]},{"url":"https://bugzilla.suse.com/827767","tags":["report"]},{"url":"https://bugzilla.suse.com/827930","tags":["report"]},{"url":"https://bugzilla.suse.com/827966","tags":["report"]},{"url":"https://bugzilla.suse.com/828087","tags":["report"]},{"url":"https://bugzilla.suse.com/828119","tags":["report"]},{"url":"https://bugzilla.suse.com/828192","tags":["report"]},{"url":"https://bugzilla.suse.com/828236","tags":["report"]},{"url":"https://bugzilla.suse.com/828265","tags":["report"]},{"url":"https://bugzilla.suse.com/828574","tags":["report"]},{"url":"https://bugzilla.suse.com/828714","tags":["report"]},{"url":"https://bugzilla.suse.com/828886","tags":["report"]},{"url":"https://bugzilla.suse.com/828894","tags":["report"]},{"url":"https://bugzilla.suse.com/828914","tags":["report"]},{"url":"https://bugzilla.suse.com/829001","tags":["report"]},{"url":"https://bugzilla.suse.com/829082","tags":["report"]},{"url":"https://bugzilla.suse.com/829110","tags":["report"]},{"url":"https://bugzilla.suse.com/829357","tags":["report"]},{"url":"https://bugzilla.suse.com/829539","tags":["report"]},{"url":"https://bugzilla.suse.com/829622","tags":["report"]},{"url":"https://bugzilla.suse.com/829682","tags":["report"]},{"url":"https://bugzilla.suse.com/830346","tags":["report"]},{"url":"https://bugzilla.suse.com/830478","tags":["report"]},{"url":"https://bugzilla.suse.com/830766","tags":["report"]},{"url":"https://bugzilla.suse.com/830822","tags":["report"]},{"url":"https://bugzilla.suse.com/830901","tags":["report"]},{"url":"https://bugzilla.suse.com/830985","tags":["report"]},{"url":"https://bugzilla.suse.com/831029","tags":["report"]},{"url":"https://bugzilla.suse.com/831055","tags":["report"]},{"url":"https://bugzilla.suse.com/831058","tags":["report"]},{"url":"https://bugzilla.suse.com/831103","tags":["report"]},{"url":"https://bugzilla.suse.com/831143","tags":["report"]},{"url":"https://bugzilla.suse.com/831380","tags":["report"]},{"url":"https://bugzilla.suse.com/831410","tags":["report"]},{"url":"https://bugzilla.suse.com/831422","tags":["report"]},{"url":"https://bugzilla.suse.com/831424","tags":["report"]},{"url":"https://bugzilla.suse.com/831438","tags":["report"]},{"url":"https://bugzilla.suse.com/831623","tags":["report"]},{"url":"https://bugzilla.suse.com/831949","tags":["report"]},{"url":"https://bugzilla.suse.com/832292","tags":["report"]},{"url":"https://bugzilla.suse.com/832309","tags":["report"]},{"url":"https://bugzilla.suse.com/832318","tags":["report"]},{"url":"https://bugzilla.suse.com/832710","tags":["report"]},{"url":"https://bugzilla.suse.com/833073","tags":["report"]},{"url":"https://bugzilla.suse.com/833097","tags":["report"]},{"url":"https://bugzilla.suse.com/833148","tags":["report"]},{"url":"https://bugzilla.suse.com/833151","tags":["report"]},{"url":"https://bugzilla.suse.com/833321","tags":["report"]},{"url":"https://bugzilla.suse.com/833588","tags":["report"]},{"url":"https://bugzilla.suse.com/833635","tags":["report"]},{"url":"https://bugzilla.suse.com/833820","tags":["report"]},{"url":"https://bugzilla.suse.com/833858","tags":["report"]},{"url":"https://bugzilla.suse.com/833968","tags":["report"]},{"url":"https://bugzilla.suse.com/834116","tags":["report"]},{"url":"https://bugzilla.suse.com/834204","tags":["report"]},{"url":"https://bugzilla.suse.com/834473","tags":["report"]},{"url":"https://bugzilla.suse.com/834600","tags":["report"]},{"url":"https://bugzilla.suse.com/834647","tags":["report"]},{"url":"https://bugzilla.suse.com/834708","tags":["report"]},{"url":"https://bugzilla.suse.com/834742","tags":["report"]},{"url":"https://bugzilla.suse.com/834808","tags":["report"]},{"url":"https://bugzilla.suse.com/834905","tags":["report"]},{"url":"https://bugzilla.suse.com/835074","tags":["report"]},{"url":"https://bugzilla.suse.com/835094","tags":["report"]},{"url":"https://bugzilla.suse.com/835175","tags":["report"]},{"url":"https://bugzilla.suse.com/835186","tags":["report"]},{"url":"https://bugzilla.suse.com/835189","tags":["report"]},{"url":"https://bugzilla.suse.com/835684","tags":["report"]},{"url":"https://bugzilla.suse.com/835839","tags":["report"]},{"url":"https://bugzilla.suse.com/835930","tags":["report"]},{"url":"https://bugzilla.suse.com/836218","tags":["report"]},{"url":"https://bugzilla.suse.com/836347","tags":["report"]},{"url":"https://bugzilla.suse.com/836718","tags":["report"]},{"url":"https://bugzilla.suse.com/836801","tags":["report"]},{"url":"https://bugzilla.suse.com/837206","tags":["report"]},{"url":"https://bugzilla.suse.com/837372","tags":["report"]},{"url":"https://bugzilla.suse.com/837563","tags":["report"]},{"url":"https://bugzilla.suse.com/837596","tags":["report"]},{"url":"https://bugzilla.suse.com/837739","tags":["report"]},{"url":"https://bugzilla.suse.com/837741","tags":["report"]},{"url":"https://bugzilla.suse.com/837803","tags":["report"]},{"url":"https://bugzilla.suse.com/838346","tags":["report"]},{"url":"https://bugzilla.suse.com/838448","tags":["report"]},{"url":"https://bugzilla.suse.com/838623","tags":["report"]},{"url":"https://bugzilla.suse.com/839407","tags":["report"]},{"url":"https://bugzilla.suse.com/839973","tags":["report"]},{"url":"https://bugzilla.suse.com/840116","tags":["report"]},{"url":"https://bugzilla.suse.com/840226","tags":["report"]},{"url":"https://bugzilla.suse.com/840524","tags":["report"]},{"url":"https://bugzilla.suse.com/840830","tags":["report"]},{"url":"https://bugzilla.suse.com/841050","tags":["report"]},{"url":"https://bugzilla.suse.com/841094","tags":["report"]},{"url":"https://bugzilla.suse.com/841402","tags":["report"]},{"url":"https://bugzilla.suse.com/841445","tags":["report"]},{"url":"https://bugzilla.suse.com/841498","tags":["report"]},{"url":"https://bugzilla.suse.com/841654","tags":["report"]},{"url":"https://bugzilla.suse.com/841656","tags":["report"]},{"url":"https://bugzilla.suse.com/842057","tags":["report"]},{"url":"https://bugzilla.suse.com/842063","tags":["report"]},{"url":"https://bugzilla.suse.com/842239","tags":["report"]},{"url":"https://bugzilla.suse.com/842604","tags":["report"]},{"url":"https://bugzilla.suse.com/842820","tags":["report"]},{"url":"https://bugzilla.suse.com/843185","tags":["report"]},{"url":"https://bugzilla.suse.com/843419","tags":["report"]},{"url":"https://bugzilla.suse.com/843429","tags":["report"]},{"url":"https://bugzilla.suse.com/843445","tags":["report"]},{"url":"https://bugzilla.suse.com/843642","tags":["report"]},{"url":"https://bugzilla.suse.com/843645","tags":["report"]},{"url":"https://bugzilla.suse.com/843654","tags":["report"]},{"url":"https://bugzilla.suse.com/843732","tags":["report"]},{"url":"https://bugzilla.suse.com/843753","tags":["report"]},{"url":"https://bugzilla.suse.com/843950","tags":["report"]},{"url":"https://bugzilla.suse.com/844513","tags":["report"]},{"url":"https://bugzilla.suse.com/845352","tags":["report"]},{"url":"https://bugzilla.suse.com/845378","tags":["report"]},{"url":"https://bugzilla.suse.com/845621","tags":["report"]},{"url":"https://bugzilla.suse.com/845729","tags":["report"]},{"url":"https://bugzilla.suse.com/846036","tags":["report"]},{"url":"https://bugzilla.suse.com/846298","tags":["report"]},{"url":"https://bugzilla.suse.com/846404","tags":["report"]},{"url":"https://bugzilla.suse.com/846654","tags":["report"]},{"url":"https://bugzilla.suse.com/846656","tags":["report"]},{"url":"https://bugzilla.suse.com/846690","tags":["report"]},{"url":"https://bugzilla.suse.com/846790","tags":["report"]},{"url":"https://bugzilla.suse.com/846984","tags":["report"]},{"url":"https://bugzilla.suse.com/846989","tags":["report"]},{"url":"https://bugzilla.suse.com/847261","tags":["report"]},{"url":"https://bugzilla.suse.com/847319","tags":["report"]},{"url":"https://bugzilla.suse.com/847652","tags":["report"]},{"url":"https://bugzilla.suse.com/847660","tags":["report"]},{"url":"https://bugzilla.suse.com/847672","tags":["report"]},{"url":"https://bugzilla.suse.com/847721","tags":["report"]},{"url":"https://bugzilla.suse.com/847842","tags":["report"]},{"url":"https://bugzilla.suse.com/848055","tags":["report"]},{"url":"https://bugzilla.suse.com/848317","tags":["report"]},{"url":"https://bugzilla.suse.com/848321","tags":["report"]},{"url":"https://bugzilla.suse.com/848335","tags":["report"]},{"url":"https://bugzilla.suse.com/848336","tags":["report"]},{"url":"https://bugzilla.suse.com/848544","tags":["report"]},{"url":"https://bugzilla.suse.com/848652","tags":["report"]},{"url":"https://bugzilla.suse.com/848864","tags":["report"]},{"url":"https://bugzilla.suse.com/849021","tags":["report"]},{"url":"https://bugzilla.suse.com/849029","tags":["report"]},{"url":"https://bugzilla.suse.com/849034","tags":["report"]},{"url":"https://bugzilla.suse.com/849123","tags":["report"]},{"url":"https://bugzilla.suse.com/849256","tags":["report"]},{"url":"https://bugzilla.suse.com/849362","tags":["report"]},{"url":"https://bugzilla.suse.com/849364","tags":["report"]},{"url":"https://bugzilla.suse.com/849404","tags":["report"]},{"url":"https://bugzilla.suse.com/849675","tags":["report"]},{"url":"https://bugzilla.suse.com/849809","tags":["report"]},{"url":"https://bugzilla.suse.com/849855","tags":["report"]},{"url":"https://bugzilla.suse.com/849950","tags":["report"]},{"url":"https://bugzilla.suse.com/850072","tags":["report"]},{"url":"https://bugzilla.suse.com/850103","tags":["report"]},{"url":"https://bugzilla.suse.com/850324","tags":["report"]},{"url":"https://bugzilla.suse.com/850493","tags":["report"]},{"url":"https://bugzilla.suse.com/850640","tags":["report"]},{"url":"https://bugzilla.suse.com/850915","tags":["report"]},{"url":"https://bugzilla.suse.com/851066","tags":["report"]},{"url":"https://bugzilla.suse.com/851101","tags":["report"]},{"url":"https://bugzilla.suse.com/851290","tags":["report"]},{"url":"https://bugzilla.suse.com/851314","tags":["report"]},{"url":"https://bugzilla.suse.com/851426","tags":["report"]},{"url":"https://bugzilla.suse.com/851603","tags":["report"]},{"url":"https://bugzilla.suse.com/851879","tags":["report"]},{"url":"https://bugzilla.suse.com/852153","tags":["report"]},{"url":"https://bugzilla.suse.com/852373","tags":["report"]},{"url":"https://bugzilla.suse.com/852488","tags":["report"]},{"url":"https://bugzilla.suse.com/852553","tags":["report"]},{"url":"https://bugzilla.suse.com/852558","tags":["report"]},{"url":"https://bugzilla.suse.com/852559","tags":["report"]},{"url":"https://bugzilla.suse.com/852624","tags":["report"]},{"url":"https://bugzilla.suse.com/852652","tags":["report"]},{"url":"https://bugzilla.suse.com/852761","tags":["report"]},{"url":"https://bugzilla.suse.com/852967","tags":["report"]},{"url":"https://bugzilla.suse.com/853040","tags":["report"]},{"url":"https://bugzilla.suse.com/853050","tags":["report"]},{"url":"https://bugzilla.suse.com/853051","tags":["report"]},{"url":"https://bugzilla.suse.com/853052","tags":["report"]},{"url":"https://bugzilla.suse.com/853053","tags":["report"]},{"url":"https://bugzilla.suse.com/853162","tags":["report"]},{"url":"https://bugzilla.suse.com/853166","tags":["report"]},{"url":"https://bugzilla.suse.com/853428","tags":["report"]},{"url":"https://bugzilla.suse.com/853455","tags":["report"]},{"url":"https://bugzilla.suse.com/853465","tags":["report"]},{"url":"https://bugzilla.suse.com/854025","tags":["report"]},{"url":"https://bugzilla.suse.com/854445","tags":["report"]},{"url":"https://bugzilla.suse.com/854516","tags":["report"]},{"url":"https://bugzilla.suse.com/854546","tags":["report"]},{"url":"https://bugzilla.suse.com/854634","tags":["report"]},{"url":"https://bugzilla.suse.com/854722","tags":["report"]},{"url":"https://bugzilla.suse.com/855126","tags":["report"]},{"url":"https://bugzilla.suse.com/855657","tags":["report"]},{"url":"https://bugzilla.suse.com/855825","tags":["report"]},{"url":"https://bugzilla.suse.com/856307","tags":["report"]},{"url":"https://bugzilla.suse.com/856481","tags":["report"]},{"url":"https://bugzilla.suse.com/856760","tags":["report"]},{"url":"https://bugzilla.suse.com/856848","tags":["report"]},{"url":"https://bugzilla.suse.com/857358","tags":["report"]},{"url":"https://bugzilla.suse.com/857643","tags":["report"]},{"url":"https://bugzilla.suse.com/857926","tags":["report"]},{"url":"https://bugzilla.suse.com/858534","tags":["report"]},{"url":"https://bugzilla.suse.com/858604","tags":["report"]},{"url":"https://bugzilla.suse.com/858831","tags":["report"]},{"url":"https://bugzilla.suse.com/858869","tags":["report"]},{"url":"https://bugzilla.suse.com/858870","tags":["report"]},{"url":"https://bugzilla.suse.com/858872","tags":["report"]},{"url":"https://bugzilla.suse.com/859225","tags":["report"]},{"url":"https://bugzilla.suse.com/859342","tags":["report"]},{"url":"https://bugzilla.suse.com/859840","tags":["report"]},{"url":"https://bugzilla.suse.com/860441","tags":["report"]},{"url":"https://bugzilla.suse.com/860593","tags":["report"]},{"url":"https://bugzilla.suse.com/861093","tags":["report"]},{"url":"https://bugzilla.suse.com/861636","tags":["report"]},{"url":"https://bugzilla.suse.com/861980","tags":["report"]},{"url":"https://bugzilla.suse.com/862429","tags":["report"]},{"url":"https://bugzilla.suse.com/862796","tags":["report"]},{"url":"https://bugzilla.suse.com/862934","tags":["report"]},{"url":"https://bugzilla.suse.com/862957","tags":["report"]},{"url":"https://bugzilla.suse.com/863178","tags":["report"]},{"url":"https://bugzilla.suse.com/863300","tags":["report"]},{"url":"https://bugzilla.suse.com/863335","tags":["report"]},{"url":"https://bugzilla.suse.com/863410","tags":["report"]},{"url":"https://bugzilla.suse.com/863526","tags":["report"]},{"url":"https://bugzilla.suse.com/863586","tags":["report"]},{"url":"https://bugzilla.suse.com/863873","tags":["report"]},{"url":"https://bugzilla.suse.com/864025","tags":["report"]},{"url":"https://bugzilla.suse.com/864058","tags":["report"]},{"url":"https://bugzilla.suse.com/864401","tags":["report"]},{"url":"https://bugzilla.suse.com/864404","tags":["report"]},{"url":"https://bugzilla.suse.com/864409","tags":["report"]},{"url":"https://bugzilla.suse.com/864411","tags":["report"]},{"url":"https://bugzilla.suse.com/864464","tags":["report"]},{"url":"https://bugzilla.suse.com/864833","tags":["report"]},{"url":"https://bugzilla.suse.com/864880","tags":["report"]},{"url":"https://bugzilla.suse.com/865310","tags":["report"]},{"url":"https://bugzilla.suse.com/865330","tags":["report"]},{"url":"https://bugzilla.suse.com/865342","tags":["report"]},{"url":"https://bugzilla.suse.com/865419","tags":["report"]},{"url":"https://bugzilla.suse.com/865783","tags":["report"]},{"url":"https://bugzilla.suse.com/865882","tags":["report"]},{"url":"https://bugzilla.suse.com/866081","tags":["report"]},{"url":"https://bugzilla.suse.com/866102","tags":["report"]},{"url":"https://bugzilla.suse.com/866130","tags":["report"]},{"url":"https://bugzilla.suse.com/866253","tags":["report"]},{"url":"https://bugzilla.suse.com/866428","tags":["report"]},{"url":"https://bugzilla.suse.com/866615","tags":["report"]},{"url":"https://bugzilla.suse.com/866800","tags":["report"]},{"url":"https://bugzilla.suse.com/866864","tags":["report"]},{"url":"https://bugzilla.suse.com/866911","tags":["report"]},{"url":"https://bugzilla.suse.com/867362","tags":["report"]},{"url":"https://bugzilla.suse.com/867517","tags":["report"]},{"url":"https://bugzilla.suse.com/867531","tags":["report"]},{"url":"https://bugzilla.suse.com/867723","tags":["report"]},{"url":"https://bugzilla.suse.com/867953","tags":["report"]},{"url":"https://bugzilla.suse.com/868049","tags":["report"]},{"url":"https://bugzilla.suse.com/868488","tags":["report"]},{"url":"https://bugzilla.suse.com/868528","tags":["report"]},{"url":"https://bugzilla.suse.com/868653","tags":["report"]},{"url":"https://bugzilla.suse.com/868748","tags":["report"]},{"url":"https://bugzilla.suse.com/869033","tags":["report"]},{"url":"https://bugzilla.suse.com/869055","tags":["report"]},{"url":"https://bugzilla.suse.com/869414","tags":["report"]},{"url":"https://bugzilla.suse.com/869563","tags":["report"]},{"url":"https://bugzilla.suse.com/869934","tags":["report"]},{"url":"https://bugzilla.suse.com/870161","tags":["report"]},{"url":"https://bugzilla.suse.com/870173","tags":["report"]},{"url":"https://bugzilla.suse.com/870335","tags":["report"]},{"url":"https://bugzilla.suse.com/870450","tags":["report"]},{"url":"https://bugzilla.suse.com/870496","tags":["report"]},{"url":"https://bugzilla.suse.com/870498","tags":["report"]},{"url":"https://bugzilla.suse.com/870576","tags":["report"]},{"url":"https://bugzilla.suse.com/870591","tags":["report"]},{"url":"https://bugzilla.suse.com/870618","tags":["report"]},{"url":"https://bugzilla.suse.com/870801","tags":["report"]},{"url":"https://bugzilla.suse.com/870877","tags":["report"]},{"url":"https://bugzilla.suse.com/870958","tags":["report"]},{"url":"https://bugzilla.suse.com/871134","tags":["report"]},{"url":"https://bugzilla.suse.com/871561","tags":["report"]},{"url":"https://bugzilla.suse.com/871634","tags":["report"]},{"url":"https://bugzilla.suse.com/871676","tags":["report"]},{"url":"https://bugzilla.suse.com/871728","tags":["report"]},{"url":"https://bugzilla.suse.com/871797","tags":["report"]},{"url":"https://bugzilla.suse.com/871854","tags":["report"]},{"url":"https://bugzilla.suse.com/871861","tags":["report"]},{"url":"https://bugzilla.suse.com/871899","tags":["report"]},{"url":"https://bugzilla.suse.com/872188","tags":["report"]},{"url":"https://bugzilla.suse.com/872540","tags":["report"]},{"url":"https://bugzilla.suse.com/872634","tags":["report"]},{"url":"https://bugzilla.suse.com/873061","tags":["report"]},{"url":"https://bugzilla.suse.com/873228","tags":["report"]},{"url":"https://bugzilla.suse.com/873374","tags":["report"]},{"url":"https://bugzilla.suse.com/873463","tags":["report"]},{"url":"https://bugzilla.suse.com/874108","tags":["report"]},{"url":"https://bugzilla.suse.com/874145","tags":["report"]},{"url":"https://bugzilla.suse.com/874440","tags":["report"]},{"url":"https://bugzilla.suse.com/874577","tags":["report"]},{"url":"https://bugzilla.suse.com/875051","tags":["report"]},{"url":"https://bugzilla.suse.com/875386","tags":["report"]},{"url":"https://bugzilla.suse.com/875690","tags":["report"]},{"url":"https://bugzilla.suse.com/875798","tags":["report"]},{"url":"https://bugzilla.suse.com/876017","tags":["report"]},{"url":"https://bugzilla.suse.com/876055","tags":["report"]},{"url":"https://bugzilla.suse.com/876086","tags":["report"]},{"url":"https://bugzilla.suse.com/876102","tags":["report"]},{"url":"https://bugzilla.suse.com/876114","tags":["report"]},{"url":"https://bugzilla.suse.com/876176","tags":["report"]},{"url":"https://bugzilla.suse.com/876463","tags":["report"]},{"url":"https://bugzilla.suse.com/876590","tags":["report"]},{"url":"https://bugzilla.suse.com/876594","tags":["report"]},{"url":"https://bugzilla.suse.com/876633","tags":["report"]},{"url":"https://bugzilla.suse.com/877013","tags":["report"]},{"url":"https://bugzilla.suse.com/877257","tags":["report"]},{"url":"https://bugzilla.suse.com/877456","tags":["report"]},{"url":"https://bugzilla.suse.com/877497","tags":["report"]},{"url":"https://bugzilla.suse.com/877593","tags":["report"]},{"url":"https://bugzilla.suse.com/877775","tags":["report"]},{"url":"https://bugzilla.suse.com/878115","tags":["report"]},{"url":"https://bugzilla.suse.com/878123","tags":["report"]},{"url":"https://bugzilla.suse.com/878274","tags":["report"]},{"url":"https://bugzilla.suse.com/878407","tags":["report"]},{"url":"https://bugzilla.suse.com/878509","tags":["report"]},{"url":"https://bugzilla.suse.com/879304","tags":["report"]},{"url":"https://bugzilla.suse.com/879921","tags":["report"]},{"url":"https://bugzilla.suse.com/879957","tags":["report"]},{"url":"https://bugzilla.suse.com/880007","tags":["report"]},{"url":"https://bugzilla.suse.com/880344","tags":["report"]},{"url":"https://bugzilla.suse.com/880357","tags":["report"]},{"url":"https://bugzilla.suse.com/880370","tags":["report"]},{"url":"https://bugzilla.suse.com/880437","tags":["report"]},{"url":"https://bugzilla.suse.com/880484","tags":["report"]},{"url":"https://bugzilla.suse.com/880892","tags":["report"]},{"url":"https://bugzilla.suse.com/881051","tags":["report"]},{"url":"https://bugzilla.suse.com/881571","tags":["report"]},{"url":"https://bugzilla.suse.com/881759","tags":["report"]},{"url":"https://bugzilla.suse.com/881761","tags":["report"]},{"url":"https://bugzilla.suse.com/881939","tags":["report"]},{"url":"https://bugzilla.suse.com/882317","tags":["report"]},{"url":"https://bugzilla.suse.com/882324","tags":["report"]},{"url":"https://bugzilla.suse.com/882470","tags":["report"]},{"url":"https://bugzilla.suse.com/882639","tags":["report"]},{"url":"https://bugzilla.suse.com/882804","tags":["report"]},{"url":"https://bugzilla.suse.com/882900","tags":["report"]},{"url":"https://bugzilla.suse.com/883096","tags":["report"]},{"url":"https://bugzilla.suse.com/883376","tags":["report"]},{"url":"https://bugzilla.suse.com/883380","tags":["report"]},{"url":"https://bugzilla.suse.com/883518","tags":["report"]},{"url":"https://bugzilla.suse.com/883724","tags":["report"]},{"url":"https://bugzilla.suse.com/883795","tags":["report"]},{"url":"https://bugzilla.suse.com/883948","tags":["report"]},{"url":"https://bugzilla.suse.com/884333","tags":["report"]},{"url":"https://bugzilla.suse.com/884582","tags":["report"]},{"url":"https://bugzilla.suse.com/884725","tags":["report"]},{"url":"https://bugzilla.suse.com/884767","tags":["report"]},{"url":"https://bugzilla.suse.com/884817","tags":["report"]},{"url":"https://bugzilla.suse.com/885077","tags":["report"]},{"url":"https://bugzilla.suse.com/885262","tags":["report"]},{"url":"https://bugzilla.suse.com/885382","tags":["report"]},{"url":"https://bugzilla.suse.com/885422","tags":["report"]},{"url":"https://bugzilla.suse.com/885509","tags":["report"]},{"url":"https://bugzilla.suse.com/885725","tags":["report"]},{"url":"https://bugzilla.suse.com/886840","tags":["report"]},{"url":"https://bugzilla.suse.com/887082","tags":["report"]},{"url":"https://bugzilla.suse.com/887418","tags":["report"]},{"url":"https://bugzilla.suse.com/887503","tags":["report"]},{"url":"https://bugzilla.suse.com/887597","tags":["report"]},{"url":"https://bugzilla.suse.com/887608","tags":["report"]},{"url":"https://bugzilla.suse.com/887645","tags":["report"]},{"url":"https://bugzilla.suse.com/887680","tags":["report"]},{"url":"https://bugzilla.suse.com/888058","tags":["report"]},{"url":"https://bugzilla.suse.com/888105","tags":["report"]},{"url":"https://bugzilla.suse.com/888591","tags":["report"]},{"url":"https://bugzilla.suse.com/888607","tags":["report"]},{"url":"https://bugzilla.suse.com/888847","tags":["report"]},{"url":"https://bugzilla.suse.com/888849","tags":["report"]},{"url":"https://bugzilla.suse.com/888968","tags":["report"]},{"url":"https://bugzilla.suse.com/889061","tags":["report"]},{"url":"https://bugzilla.suse.com/889173","tags":["report"]},{"url":"https://bugzilla.suse.com/889221","tags":["report"]},{"url":"https://bugzilla.suse.com/889451","tags":["report"]},{"url":"https://bugzilla.suse.com/889614","tags":["report"]},{"url":"https://bugzilla.suse.com/889727","tags":["report"]},{"url":"https://bugzilla.suse.com/890297","tags":["report"]},{"url":"https://bugzilla.suse.com/890426","tags":["report"]},{"url":"https://bugzilla.suse.com/890513","tags":["report"]},{"url":"https://bugzilla.suse.com/890526","tags":["report"]},{"url":"https://bugzilla.suse.com/891087","tags":["report"]},{"url":"https://bugzilla.suse.com/891211","tags":["report"]},{"url":"https://bugzilla.suse.com/891212","tags":["report"]},{"url":"https://bugzilla.suse.com/891259","tags":["report"]},{"url":"https://bugzilla.suse.com/891277","tags":["report"]},{"url":"https://bugzilla.suse.com/891281","tags":["report"]},{"url":"https://bugzilla.suse.com/891368","tags":["report"]},{"url":"https://bugzilla.suse.com/891619","tags":["report"]},{"url":"https://bugzilla.suse.com/891641","tags":["report"]},{"url":"https://bugzilla.suse.com/891746","tags":["report"]},{"url":"https://bugzilla.suse.com/891790","tags":["report"]},{"url":"https://bugzilla.suse.com/892200","tags":["report"]},{"url":"https://bugzilla.suse.com/892490","tags":["report"]},{"url":"https://bugzilla.suse.com/892723","tags":["report"]},{"url":"https://bugzilla.suse.com/892782","tags":["report"]},{"url":"https://bugzilla.suse.com/893064","tags":["report"]},{"url":"https://bugzilla.suse.com/893496","tags":["report"]},{"url":"https://bugzilla.suse.com/893596","tags":["report"]},{"url":"https://bugzilla.suse.com/893758","tags":["report"]},{"url":"https://bugzilla.suse.com/894058","tags":["report"]},{"url":"https://bugzilla.suse.com/894200","tags":["report"]},{"url":"https://bugzilla.suse.com/894213","tags":["report"]},{"url":"https://bugzilla.suse.com/894895","tags":["report"]},{"url":"https://bugzilla.suse.com/895221","tags":["report"]},{"url":"https://bugzilla.suse.com/895387","tags":["report"]},{"url":"https://bugzilla.suse.com/895468","tags":["report"]},{"url":"https://bugzilla.suse.com/895608","tags":["report"]},{"url":"https://bugzilla.suse.com/895680","tags":["report"]},{"url":"https://bugzilla.suse.com/895841","tags":["report"]},{"url":"https://bugzilla.suse.com/895983","tags":["report"]},{"url":"https://bugzilla.suse.com/896382","tags":["report"]},{"url":"https://bugzilla.suse.com/896390","tags":["report"]},{"url":"https://bugzilla.suse.com/896391","tags":["report"]},{"url":"https://bugzilla.suse.com/896392","tags":["report"]},{"url":"https://bugzilla.suse.com/896415","tags":["report"]},{"url":"https://bugzilla.suse.com/896484","tags":["report"]},{"url":"https://bugzilla.suse.com/896689","tags":["report"]},{"url":"https://bugzilla.suse.com/897502","tags":["report"]},{"url":"https://bugzilla.suse.com/897694","tags":["report"]},{"url":"https://bugzilla.suse.com/897708","tags":["report"]},{"url":"https://bugzilla.suse.com/898295","tags":["report"]},{"url":"https://bugzilla.suse.com/898375","tags":["report"]},{"url":"https://bugzilla.suse.com/898554","tags":["report"]},{"url":"https://bugzilla.suse.com/899192","tags":["report"]},{"url":"https://bugzilla.suse.com/899574","tags":["report"]},{"url":"https://bugzilla.suse.com/899843","tags":["report"]},{"url":"https://bugzilla.suse.com/900279","tags":["report"]},{"url":"https://bugzilla.suse.com/900644","tags":["report"]},{"url":"https://bugzilla.suse.com/900881","tags":["report"]},{"url":"https://bugzilla.suse.com/901638","tags":["report"]},{"url":"https://bugzilla.suse.com/902232","tags":["report"]},{"url":"https://bugzilla.suse.com/902286","tags":["report"]},{"url":"https://bugzilla.suse.com/902346","tags":["report"]},{"url":"https://bugzilla.suse.com/902349","tags":["report"]},{"url":"https://bugzilla.suse.com/902351","tags":["report"]},{"url":"https://bugzilla.suse.com/902675","tags":["report"]},{"url":"https://bugzilla.suse.com/903096","tags":["report"]},{"url":"https://bugzilla.suse.com/903331","tags":["report"]},{"url":"https://bugzilla.suse.com/903640","tags":["report"]},{"url":"https://bugzilla.suse.com/903653","tags":["report"]},{"url":"https://bugzilla.suse.com/904013","tags":["report"]},{"url":"https://bugzilla.suse.com/904053","tags":["report"]},{"url":"https://bugzilla.suse.com/904242","tags":["report"]},{"url":"https://bugzilla.suse.com/904358","tags":["report"]},{"url":"https://bugzilla.suse.com/904659","tags":["report"]},{"url":"https://bugzilla.suse.com/904671","tags":["report"]},{"url":"https://bugzilla.suse.com/904700","tags":["report"]},{"url":"https://bugzilla.suse.com/904883","tags":["report"]},{"url":"https://bugzilla.suse.com/904901","tags":["report"]},{"url":"https://bugzilla.suse.com/905100","tags":["report"]},{"url":"https://bugzilla.suse.com/905304","tags":["report"]},{"url":"https://bugzilla.suse.com/905312","tags":["report"]},{"url":"https://bugzilla.suse.com/905522","tags":["report"]},{"url":"https://bugzilla.suse.com/905799","tags":["report"]},{"url":"https://bugzilla.suse.com/906027","tags":["report"]},{"url":"https://bugzilla.suse.com/906586","tags":["report"]},{"url":"https://bugzilla.suse.com/907196","tags":["report"]},{"url":"https://bugzilla.suse.com/907338","tags":["report"]},{"url":"https://bugzilla.suse.com/907551","tags":["report"]},{"url":"https://bugzilla.suse.com/907611","tags":["report"]},{"url":"https://bugzilla.suse.com/907818","tags":["report"]},{"url":"https://bugzilla.suse.com/908069","tags":["report"]},{"url":"https://bugzilla.suse.com/908163","tags":["report"]},{"url":"https://bugzilla.suse.com/908393","tags":["report"]},{"url":"https://bugzilla.suse.com/908550","tags":["report"]},{"url":"https://bugzilla.suse.com/908551","tags":["report"]},{"url":"https://bugzilla.suse.com/908572","tags":["report"]},{"url":"https://bugzilla.suse.com/908706","tags":["report"]},{"url":"https://bugzilla.suse.com/908825","tags":["report"]},{"url":"https://bugzilla.suse.com/909077","tags":["report"]},{"url":"https://bugzilla.suse.com/909078","tags":["report"]},{"url":"https://bugzilla.suse.com/909088","tags":["report"]},{"url":"https://bugzilla.suse.com/909092","tags":["report"]},{"url":"https://bugzilla.suse.com/909093","tags":["report"]},{"url":"https://bugzilla.suse.com/909095","tags":["report"]},{"url":"https://bugzilla.suse.com/909264","tags":["report"]},{"url":"https://bugzilla.suse.com/909309","tags":["report"]},{"url":"https://bugzilla.suse.com/909312","tags":["report"]},{"url":"https://bugzilla.suse.com/909477","tags":["report"]},{"url":"https://bugzilla.suse.com/909565","tags":["report"]},{"url":"https://bugzilla.suse.com/909684","tags":["report"]},{"url":"https://bugzilla.suse.com/909740","tags":["report"]},{"url":"https://bugzilla.suse.com/909846","tags":["report"]},{"url":"https://bugzilla.suse.com/910013","tags":["report"]},{"url":"https://bugzilla.suse.com/910150","tags":["report"]},{"url":"https://bugzilla.suse.com/910159","tags":["report"]},{"url":"https://bugzilla.suse.com/910251","tags":["report"]},{"url":"https://bugzilla.suse.com/910321","tags":["report"]},{"url":"https://bugzilla.suse.com/910322","tags":["report"]},{"url":"https://bugzilla.suse.com/910517","tags":["report"]},{"url":"https://bugzilla.suse.com/911181","tags":["report"]},{"url":"https://bugzilla.suse.com/911325","tags":["report"]},{"url":"https://bugzilla.suse.com/911326","tags":["report"]},{"url":"https://bugzilla.suse.com/912171","tags":["report"]},{"url":"https://bugzilla.suse.com/912202","tags":["report"]},{"url":"https://bugzilla.suse.com/912705","tags":["report"]},{"url":"https://bugzilla.suse.com/912741","tags":["report"]},{"url":"https://bugzilla.suse.com/913059","tags":["report"]},{"url":"https://bugzilla.suse.com/913080","tags":["report"]},{"url":"https://bugzilla.suse.com/913598","tags":["report"]},{"url":"https://bugzilla.suse.com/914355","tags":["report"]},{"url":"https://bugzilla.suse.com/914423","tags":["report"]},{"url":"https://bugzilla.suse.com/914726","tags":["report"]},{"url":"https://bugzilla.suse.com/914742","tags":["report"]},{"url":"https://bugzilla.suse.com/914818","tags":["report"]},{"url":"https://bugzilla.suse.com/914987","tags":["report"]},{"url":"https://bugzilla.suse.com/915045","tags":["report"]},{"url":"https://bugzilla.suse.com/915200","tags":["report"]},{"url":"https://bugzilla.suse.com/915209","tags":["report"]},{"url":"https://bugzilla.suse.com/915322","tags":["report"]},{"url":"https://bugzilla.suse.com/915335","tags":["report"]},{"url":"https://bugzilla.suse.com/915577","tags":["report"]},{"url":"https://bugzilla.suse.com/915791","tags":["report"]},{"url":"https://bugzilla.suse.com/915826","tags":["report"]},{"url":"https://bugzilla.suse.com/916515","tags":["report"]},{"url":"https://bugzilla.suse.com/916521","tags":["report"]},{"url":"https://bugzilla.suse.com/916848","tags":["report"]},{"url":"https://bugzilla.suse.com/916982","tags":["report"]},{"url":"https://bugzilla.suse.com/917093","tags":["report"]},{"url":"https://bugzilla.suse.com/917120","tags":["report"]},{"url":"https://bugzilla.suse.com/917648","tags":["report"]},{"url":"https://bugzilla.suse.com/917684","tags":["report"]},{"url":"https://bugzilla.suse.com/917830","tags":["report"]},{"url":"https://bugzilla.suse.com/917839","tags":["report"]},{"url":"https://bugzilla.suse.com/917884","tags":["report"]},{"url":"https://bugzilla.suse.com/918333","tags":["report"]},{"url":"https://bugzilla.suse.com/919007","tags":["report"]},{"url":"https://bugzilla.suse.com/919018","tags":["report"]},{"url":"https://bugzilla.suse.com/919357","tags":["report"]},{"url":"https://bugzilla.suse.com/919463","tags":["report"]},{"url":"https://bugzilla.suse.com/919589","tags":["report"]},{"url":"https://bugzilla.suse.com/919682","tags":["report"]},{"url":"https://bugzilla.suse.com/919808","tags":["report"]},{"url":"https://bugzilla.suse.com/920250","tags":["report"]},{"url":"https://bugzilla.suse.com/921769","tags":["report"]},{"url":"https://bugzilla.suse.com/922583","tags":["report"]},{"url":"https://bugzilla.suse.com/923344","tags":["report"]},{"url":"https://bugzilla.suse.com/924142","tags":["report"]},{"url":"https://bugzilla.suse.com/924271","tags":["report"]},{"url":"https://bugzilla.suse.com/924282","tags":["report"]},{"url":"https://bugzilla.suse.com/924333","tags":["report"]},{"url":"https://bugzilla.suse.com/924340","tags":["report"]},{"url":"https://bugzilla.suse.com/925012","tags":["report"]},{"url":"https://bugzilla.suse.com/925370","tags":["report"]},{"url":"https://bugzilla.suse.com/925443","tags":["report"]},{"url":"https://bugzilla.suse.com/925567","tags":["report"]},{"url":"https://bugzilla.suse.com/925729","tags":["report"]},{"url":"https://bugzilla.suse.com/926016","tags":["report"]},{"url":"https://bugzilla.suse.com/926240","tags":["report"]},{"url":"https://bugzilla.suse.com/926439","tags":["report"]},{"url":"https://bugzilla.suse.com/926767","tags":["report"]},{"url":"https://bugzilla.suse.com/927190","tags":["report"]},{"url":"https://bugzilla.suse.com/927257","tags":["report"]},{"url":"https://bugzilla.suse.com/927262","tags":["report"]},{"url":"https://bugzilla.suse.com/927338","tags":["report"]},{"url":"https://bugzilla.suse.com/928122","tags":["report"]},{"url":"https://bugzilla.suse.com/928130","tags":["report"]},{"url":"https://bugzilla.suse.com/928142","tags":["report"]},{"url":"https://bugzilla.suse.com/928333","tags":["report"]},{"url":"https://bugzilla.suse.com/928970","tags":["report"]},{"url":"https://bugzilla.suse.com/929145","tags":["report"]},{"url":"https://bugzilla.suse.com/929148","tags":["report"]},{"url":"https://bugzilla.suse.com/929283","tags":["report"]},{"url":"https://bugzilla.suse.com/929525","tags":["report"]},{"url":"https://bugzilla.suse.com/929647","tags":["report"]},{"url":"https://bugzilla.suse.com/930145","tags":["report"]},{"url":"https://bugzilla.suse.com/930171","tags":["report"]},{"url":"https://bugzilla.suse.com/930226","tags":["report"]},{"url":"https://bugzilla.suse.com/930284","tags":["report"]},{"url":"https://bugzilla.suse.com/930401","tags":["report"]},{"url":"https://bugzilla.suse.com/930669","tags":["report"]},{"url":"https://bugzilla.suse.com/930786","tags":["report"]},{"url":"https://bugzilla.suse.com/930788","tags":["report"]},{"url":"https://bugzilla.suse.com/931014","tags":["report"]},{"url":"https://bugzilla.suse.com/931015","tags":["report"]},{"url":"https://bugzilla.suse.com/931850","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3636","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150581-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150736-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/754690","tags":["report"]},{"url":"https://bugzilla.suse.com/792991","tags":["report"]},{"url":"https://bugzilla.suse.com/800907","tags":["report"]},{"url":"https://bugzilla.suse.com/803174","tags":["report"]},{"url":"https://bugzilla.suse.com/805945","tags":["report"]},{"url":"https://bugzilla.suse.com/808647","tags":["report"]},{"url":"https://bugzilla.suse.com/809220","tags":["report"]},{"url":"https://bugzilla.suse.com/809617","tags":["report"]},{"url":"https://bugzilla.suse.com/810098","tags":["report"]},{"url":"https://bugzilla.suse.com/810210","tags":["report"]},{"url":"https://bugzilla.suse.com/816065","tags":["report"]},{"url":"https://bugzilla.suse.com/816403","tags":["report"]},{"url":"https://bugzilla.suse.com/816892","tags":["report"]},{"url":"https://bugzilla.suse.com/816925","tags":["report"]},{"url":"https://bugzilla.suse.com/816971","tags":["report"]},{"url":"https://bugzilla.suse.com/817339","tags":["report"]},{"url":"https://bugzilla.suse.com/818053","tags":["report"]},{"url":"https://bugzilla.suse.com/818154","tags":["report"]},{"url":"https://bugzilla.suse.com/818497","tags":["report"]},{"url":"https://bugzilla.suse.com/819295","tags":["report"]},{"url":"https://bugzilla.suse.com/819519","tags":["report"]},{"url":"https://bugzilla.suse.com/819789","tags":["report"]},{"url":"https://bugzilla.suse.com/820183","tags":["report"]},{"url":"https://bugzilla.suse.com/820569","tags":["report"]},{"url":"https://bugzilla.suse.com/820738","tags":["report"]},{"url":"https://bugzilla.suse.com/820948","tags":["report"]},{"url":"https://bugzilla.suse.com/820982","tags":["report"]},{"url":"https://bugzilla.suse.com/821560","tags":["report"]},{"url":"https://bugzilla.suse.com/821802","tags":["report"]},{"url":"https://bugzilla.suse.com/822942","tags":["report"]},{"url":"https://bugzilla.suse.com/823191","tags":["report"]},{"url":"https://bugzilla.suse.com/855885","tags":["report"]},{"url":"https://bugzilla.suse.com/857919","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2850","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151071-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/913232","tags":["report"]},{"url":"https://bugzilla.suse.com/915540","tags":["report"]},{"url":"https://bugzilla.suse.com/916225","tags":["report"]},{"url":"https://bugzilla.suse.com/917125","tags":["report"]},{"url":"https://bugzilla.suse.com/920262","tags":["report"]},{"url":"https://bugzilla.suse.com/922734","tags":["report"]},{"url":"https://bugzilla.suse.com/922944","tags":["report"]},{"url":"https://bugzilla.suse.com/924664","tags":["report"]},{"url":"https://bugzilla.suse.com/924803","tags":["report"]},{"url":"https://bugzilla.suse.com/924809","tags":["report"]},{"url":"https://bugzilla.suse.com/926156","tags":["report"]},{"url":"https://bugzilla.suse.com/926314","tags":["report"]},{"url":"https://bugzilla.suse.com/927084","tags":["report"]},{"url":"https://bugzilla.suse.com/927115","tags":["report"]},{"url":"https://bugzilla.suse.com/927116","tags":["report"]},{"url":"https://bugzilla.suse.com/927285","tags":["report"]},{"url":"https://bugzilla.suse.com/927308","tags":["report"]},{"url":"https://bugzilla.suse.com/927455","tags":["report"]},{"url":"https://bugzilla.suse.com/928135","tags":["report"]},{"url":"https://bugzilla.suse.com/928141","tags":["report"]},{"url":"https://bugzilla.suse.com/928708","tags":["report"]},{"url":"https://bugzilla.suse.com/929092","tags":["report"]},{"url":"https://bugzilla.suse.com/929883","tags":["report"]},{"url":"https://bugzilla.suse.com/930224","tags":["report"]},{"url":"https://bugzilla.suse.com/931130","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3332","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151174-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151376-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151478-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/798406","tags":["report"]},{"url":"https://bugzilla.suse.com/821931","tags":["report"]},{"url":"https://bugzilla.suse.com/879878","tags":["report"]},{"url":"https://bugzilla.suse.com/897995","tags":["report"]},{"url":"https://bugzilla.suse.com/898693","tags":["report"]},{"url":"https://bugzilla.suse.com/908870","tags":["report"]},{"url":"https://bugzilla.suse.com/912916","tags":["report"]},{"url":"https://bugzilla.suse.com/915517","tags":["report"]},{"url":"https://bugzilla.suse.com/916010","tags":["report"]},{"url":"https://bugzilla.suse.com/923245","tags":["report"]},{"url":"https://bugzilla.suse.com/928801","tags":["report"]},{"url":"https://bugzilla.suse.com/929360","tags":["report"]},{"url":"https://bugzilla.suse.com/930934","tags":["report"]},{"url":"https://bugzilla.suse.com/931474","tags":["report"]},{"url":"https://bugzilla.suse.com/933429","tags":["report"]},{"url":"https://bugzilla.suse.com/935705","tags":["report"]},{"url":"https://bugzilla.suse.com/936831","tags":["report"]},{"url":"https://bugzilla.suse.com/937032","tags":["report"]},{"url":"https://bugzilla.suse.com/937986","tags":["report"]},{"url":"https://bugzilla.suse.com/940338","tags":["report"]},{"url":"https://bugzilla.suse.com/940398","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5707","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/851068","tags":["report"]},{"url":"https://bugzilla.suse.com/873385","tags":["report"]},{"url":"https://bugzilla.suse.com/886785","tags":["report"]},{"url":"https://bugzilla.suse.com/894936","tags":["report"]},{"url":"https://bugzilla.suse.com/920110","tags":["report"]},{"url":"https://bugzilla.suse.com/920733","tags":["report"]},{"url":"https://bugzilla.suse.com/921430","tags":["report"]},{"url":"https://bugzilla.suse.com/924701","tags":["report"]},{"url":"https://bugzilla.suse.com/925705","tags":["report"]},{"url":"https://bugzilla.suse.com/925881","tags":["report"]},{"url":"https://bugzilla.suse.com/925903","tags":["report"]},{"url":"https://bugzilla.suse.com/926953","tags":["report"]},{"url":"https://bugzilla.suse.com/927355","tags":["report"]},{"url":"https://bugzilla.suse.com/927786","tags":["report"]},{"url":"https://bugzilla.suse.com/929142","tags":["report"]},{"url":"https://bugzilla.suse.com/929143","tags":["report"]},{"url":"https://bugzilla.suse.com/930092","tags":["report"]},{"url":"https://bugzilla.suse.com/930761","tags":["report"]},{"url":"https://bugzilla.suse.com/931538","tags":["report"]},{"url":"https://bugzilla.suse.com/932348","tags":["report"]},{"url":"https://bugzilla.suse.com/932458","tags":["report"]},{"url":"https://bugzilla.suse.com/933896","tags":["report"]},{"url":"https://bugzilla.suse.com/933904","tags":["report"]},{"url":"https://bugzilla.suse.com/933907","tags":["report"]},{"url":"https://bugzilla.suse.com/933936","tags":["report"]},{"url":"https://bugzilla.suse.com/934742","tags":["report"]},{"url":"https://bugzilla.suse.com/934944","tags":["report"]},{"url":"https://bugzilla.suse.com/935053","tags":["report"]},{"url":"https://bugzilla.suse.com/935572","tags":["report"]},{"url":"https://bugzilla.suse.com/935866","tags":["report"]},{"url":"https://bugzilla.suse.com/935906","tags":["report"]},{"url":"https://bugzilla.suse.com/936077","tags":["report"]},{"url":"https://bugzilla.suse.com/936423","tags":["report"]},{"url":"https://bugzilla.suse.com/936637","tags":["report"]},{"url":"https://bugzilla.suse.com/936875","tags":["report"]},{"url":"https://bugzilla.suse.com/936925","tags":["report"]},{"url":"https://bugzilla.suse.com/937402","tags":["report"]},{"url":"https://bugzilla.suse.com/937444","tags":["report"]},{"url":"https://bugzilla.suse.com/937503","tags":["report"]},{"url":"https://bugzilla.suse.com/937641","tags":["report"]},{"url":"https://bugzilla.suse.com/937855","tags":["report"]},{"url":"https://bugzilla.suse.com/939910","tags":["report"]},{"url":"https://bugzilla.suse.com/939994","tags":["report"]},{"url":"https://bugzilla.suse.com/942350","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151611-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151678-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/777565","tags":["report"]},{"url":"https://bugzilla.suse.com/891116","tags":["report"]},{"url":"https://bugzilla.suse.com/917968","tags":["report"]},{"url":"https://bugzilla.suse.com/920016","tags":["report"]},{"url":"https://bugzilla.suse.com/923002","tags":["report"]},{"url":"https://bugzilla.suse.com/923431","tags":["report"]},{"url":"https://bugzilla.suse.com/928988","tags":["report"]},{"url":"https://bugzilla.suse.com/929076","tags":["report"]},{"url":"https://bugzilla.suse.com/931620","tags":["report"]},{"url":"https://bugzilla.suse.com/932350","tags":["report"]},{"url":"https://bugzilla.suse.com/932882","tags":["report"]},{"url":"https://bugzilla.suse.com/933721","tags":["report"]},{"url":"https://bugzilla.suse.com/935055","tags":["report"]},{"url":"https://bugzilla.suse.com/936095","tags":["report"]},{"url":"https://bugzilla.suse.com/936118","tags":["report"]},{"url":"https://bugzilla.suse.com/936921","tags":["report"]},{"url":"https://bugzilla.suse.com/937256","tags":["report"]},{"url":"https://bugzilla.suse.com/938485","tags":["report"]},{"url":"https://bugzilla.suse.com/940925","tags":["report"]},{"url":"https://bugzilla.suse.com/940966","tags":["report"]},{"url":"https://bugzilla.suse.com/942204","tags":["report"]},{"url":"https://bugzilla.suse.com/942305","tags":["report"]},{"url":"https://bugzilla.suse.com/942367","tags":["report"]},{"url":"https://bugzilla.suse.com/942404","tags":["report"]},{"url":"https://bugzilla.suse.com/942605","tags":["report"]},{"url":"https://bugzilla.suse.com/942688","tags":["report"]},{"url":"https://bugzilla.suse.com/942938","tags":["report"]},{"url":"https://bugzilla.suse.com/943477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6252","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-2830","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2589-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2590-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2613-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2614-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2631-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2632-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-2150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-2922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-9715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-3331","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-2830","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","status":"published","published":"2015-05-27T10:00:00Z","modified":"2024-08-06T05:24:39.089Z","updated_at":"2026-11-02T14:35:41.26549Z"}],"euvd":[{"id":"EUVD-2015-2918","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","status":"published","published":"2015-05-27T10:00:00Z","modified":"2024-08-06T05:24:39Z","updated_at":"2026-11-03T02:22:10.564423Z"}],"ghsa":[{"id":"GHSA-mw97-2rg5-mpgw","title":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag...","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","status":"published","published":"2022-05-14T03:59:13Z","modified":"2025-04-12T12:49:20Z","updated_at":"2026-11-02T15:01:22.356916Z"}],"nvd":[{"id":"CVE-2015-2830","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","status":"published","published":"2015-05-27T10:59:06.127Z","modified":"2026-06-17T00:24:50.347Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"BELL-CVE-2015-2830","title":"CVE-2015-2830 does not affect BellSoft software","status":"withdrawn","published":"2015-05-27T10:59:00Z","modified":"2026-01-28T07:19:53.880512Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2015-2830","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","status":"published","published":"2015-05-27T10:59:06Z","modified":"2026-04-16T06:16:29.551361212Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-2830","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","status":"published","published":"2015-05-27T10:59:06.127Z","modified":"2026-09-09T06:47:22.815732153Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-246-1","title":"linux-2.6 - security update","status":"published","published":"2015-06-14T00:00:00Z","modified":"2026-03-09T01:20:43.748182Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-3237-1","title":"linux - security update","status":"published","published":"2015-04-26T00:00:00Z","modified":"2026-03-09T01:18:26.980254Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0171","title":"Updated kernel package fixes security vulnerabilities","description":"This kernel update is based on upstream -longterm 3.14.39 and fixes the\nfollowing security issues:\n\nIt was found that the Linux kernel's Infiniband subsystem did not properly\nsanitize input parameters while registering memory regions from user space\nvia the (u)verbs API. A local user with access to a /dev/infiniband/uverbsX\ndevice could use this flaw to crash the system or, potentially, escalate\ntheir privileges on the system (CVE-2014-8159)\n\nThe stack randomization feature in the Linux kernel before 3.19.1 on 64-bit\nplatforms uses incorrect data types for the results of bitwise left-shift\noperations, which makes it easier for attackers to bypass the ASLR\nprotection mechanism by predicting the address of the top of the stack,\nrelated to the randomize_stack_top function in fs/binfmt_elf.c and the\nstack_maxrandom_size function in arch/x86/mm/mmap.c (CVE-2015-1593)\n\nXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly\nrestrict access to PCI command registers, which might allow local guest\nusers to cause a denial of service (non-maskable interrupt and host crash)\nby disabling the (1) memory or (2) I/O decoding for a PCI Express device\nand then accessing the device, which triggers an Unsupported Request\n(UR) response (CVE-2015-2150)\n\nSasha Levin discovered that the LLC subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this possibly allows\nprivilege escalation from a process with CAP_NET_ADMIN capability; it\nalso results in a trivial information leak (CVE-2015-2041).\n\nSasha Levin discovered that the RDS subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this results in a\ntrivial information leak (CVE-2015-2042).\n\nAndrew Lutomirski discovered that when a 64-bit task on an amd64 kernel\nmakes a fork(2) or clone(2) system call using int $0x80, the 32-bit\ncompatibility flag is set (correctly) but is not cleared on return.\nAs a result, both seccomp and audit will misinterpret the following\nsystem call by the task(s), possibly leading to a violation of security\npolicy (CVE-2015-2830).\n\nStephan Mueller discovered that the optimised implementation of RFC4106\nGCM for x86 processors that support AESNI miscalculated buffer addresses\nin some cases.  If an IPsec tunnel is configured to use this mode (also\nknown as AES-GCM-ESP) this can lead to memory corruption and crashes\n(even without malicious traffic).  This could potentially also result\nin remote code execution (CVE-2015-3331).\n\nBen Hutchings discovered that the TCP Fast Open feature regressed in\nLinux 3.16.7-ckt9, resulting in a kernel BUG when it is used.\nThis can be used as a local denial of service (CVE-2015-3332)\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2015-04-30T21:57:25Z","modified":"2026-04-16T06:22:55.241782077Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2015-0172","title":"Updated kernel-linus package fixes security vulnerabilities","description":"This kernel-linus update is based on upstream -longterm 3.14.39 and fixes\nthe following security issues:\n\nIt was found that the Linux kernel's Infiniband subsystem did not properly\nsanitize input parameters while registering memory regions from user space\nvia the (u)verbs API. A local user with access to a /dev/infiniband/uverbsX\ndevice could use this flaw to crash the system or, potentially, escalate\ntheir privileges on the system (CVE-2014-8159)\n\nThe stack randomization feature in the Linux kernel before 3.19.1 on 64-bit\nplatforms uses incorrect data types for the results of bitwise left-shift\noperations, which makes it easier for attackers to bypass the ASLR\nprotection mechanism by predicting the address of the top of the stack,\nrelated to the randomize_stack_top function in fs/binfmt_elf.c and the\nstack_maxrandom_size function in arch/x86/mm/mmap.c (CVE-2015-1593)\n\nXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly\nrestrict access to PCI command registers, which might allow local guest\nusers to cause a denial of service (non-maskable interrupt and host crash)\nby disabling the (1) memory or (2) I/O decoding for a PCI Express device\nand then accessing the device, which triggers an Unsupported Request\n(UR) response (CVE-2015-2150)\n\nSasha Levin discovered that the LLC subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this possibly allows\nprivilege escalation from a process with CAP_NET_ADMIN capability; it\nalso results in a trivial information leak (CVE-2015-2041).\n\nSasha Levin discovered that the RDS subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this results in a\ntrivial information leak (CVE-2015-2042).\n\nAndrew Lutomirski discovered that when a 64-bit task on an amd64 kernel\nmakes a fork(2) or clone(2) system call using int $0x80, the 32-bit\ncompatibility flag is set (correctly) but is not cleared on return.\nAs a result, both seccomp and audit will misinterpret the following\nsystem call by the task(s), possibly leading to a violation of security\npolicy (CVE-2015-2830).\n\nStephan Mueller discovered that the optimised implementation of RFC4106\nGCM for x86 processors that support AESNI miscalculated buffer addresses\nin some cases.  If an IPsec tunnel is configured to use this mode (also\nknown as AES-GCM-ESP) this can lead to memory corruption and crashes\n(even without malicious traffic).  This could potentially also result\nin remote code execution (CVE-2015-3331).\n\nBen Hutchings discovered that the TCP Fast Open feature regressed in\nLinux 3.16.7-ckt9, resulting in a kernel BUG when it is used.\nThis can be used as a local denial of service (CVE-2015-3332)\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2015-04-30T21:57:25Z","modified":"2026-04-16T06:24:12.981170402Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2015-0219","title":"Updated kernel-tmb packages fix security vulnerabilities","description":"This kernel-tmb update is based on upstream -longterm 3.14.41 and fixes\nthe following security issues:\n\nIt was found that the Linux kernel's Infiniband subsystem did not properly\nsanitize input parameters while registering memory regions from user space\nvia the (u)verbs API. A local user with access to a /dev/infiniband/uverbsX\ndevice could use this flaw to crash the system or, potentially, escalate\ntheir privileges on the system (CVE-2014-8159)\n\nnet/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before\n3.18 generates incorrect conntrack entries during handling of certain\niptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols,\nwhich allows remote attackers to bypass intended access restrictions\nvia packets with disallowed port numbers (CVE-2014-8160).\n\nThe em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel\nbefore 3.18.5, when the guest OS lacks SYSENTER MSR initialization,\nallows guest OS users to gain guest OS privileges or cause a denial of\nservice (guest OS crash) by triggering use of a 16-bit code segment for\nemulation of a SYSENTER instruction (CVE-2015-0239).\n\nThe stack randomization feature in the Linux kernel before 3.19.1 on 64-bit\nplatforms uses incorrect data types for the results of bitwise left-shift\noperations, which makes it easier for attackers to bypass the ASLR\nprotection mechanism by predicting the address of the top of the stack,\nrelated to the randomize_stack_top function in fs/binfmt_elf.c and the\nstack_maxrandom_size function in arch/x86/mm/mmap.c (CVE-2015-1593)\n\nXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly\nrestrict access to PCI command registers, which might allow local guest\nusers to cause a denial of service (non-maskable interrupt and host crash)\nby disabling the (1) memory or (2) I/O decoding for a PCI Express device\nand then accessing the device, which triggers an Unsupported Request\n(UR) response (CVE-2015-2150)\n\nSasha Levin discovered that the LLC subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this possibly allows\nprivilege escalation from a process with CAP_NET_ADMIN capability; it\nalso results in a trivial information leak (CVE-2015-2041).\n\nSasha Levin discovered that the RDS subsystem exposed some variables as\nsysctls with the wrong type.  On a 64-bit kernel, this results in a\ntrivial information leak (CVE-2015-2042).\n\nAndrew Lutomirski discovered that when a 64-bit task on an amd64 kernel\nmakes a fork(2) or clone(2) system call using int $0x80, the 32-bit\ncompatibility flag is set (correctly) but is not cleared on return.\nAs a result, both seccomp and audit will misinterpret the following\nsystem call by the task(s), possibly leading to a violation of security\npolicy (CVE-2015-2830).\n\nStephan Mueller discovered that the optimised implementation of RFC4106\nGCM for x86 processors that support AESNI miscalculated buffer addresses\nin some cases.  If an IPsec tunnel is configured to use this mode (also\nknown as AES-GCM-ESP) this can lead to memory corruption and crashes\n(even without malicious traffic).  This could potentially also result\nin remote code execution (CVE-2015-3331).\n\nBen Hutchings discovered that the TCP Fast Open feature regressed in\nLinux 3.16.7-ckt9, resulting in a kernel BUG when it is used.\nThis can be used as a local denial of service (CVE-2015-3332)\n\nIt was found that the Linux kernel's ping socket implementation didn't\nproperly handle socket unhashing during spurious disconnects which could\nlead to use-after-free flaw. On x86-64 architecture systems, a local user\nable to create ping sockets could use this flaw to crash the system. On\nnon-x86-64 architecture systems, a local user able to create ping sockets\ncould use this flaw to increase their privileges on the system.\nNote: By default ping sockets are disabled on the system \n(net.ipv4.ping_group_range = 1  0) and have to be explicitly enabled by the\nsystem administrator for specific user groups in order to exploit this issue\n(CVE-2015-3636).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2015-05-13T15:54:07Z","modified":"2026-04-16T06:25:52.349134742Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2015:1137","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-13T10:36:50Z","modified":"2026-06-29T10:09:23Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1138","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T10:36:56Z","modified":"2026-06-29T10:09:24Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1139","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T10:36:10Z","modified":"2026-06-29T10:09:24Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1221","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:37:28Z","modified":"2026-06-29T10:09:34Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-RU-2015:0621-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T02:56:26.296013Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0581-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T03:39:09.914782Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0736-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel was \nupdated to fix various bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-25T15:06:22Z","modified":"2026-02-04T02:56:53.720404Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1071-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 12 kernel was updated to version 3.12.43 to receive various security and bugfixes.\n\nFollowing security bugs were fixed:\n\n- CVE-2014-3647: arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 did not properly perform RIP changes, which allowed guest OS users to cause a denial of service (guest OS crash) via a crafted application (bsc#899192).\n- CVE-2014-8086: Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allowed local users to cause a denial of service (file unavailability) via a combination of a write action and an F_SETFL fcntl operation for the O_DIRECT flag (bsc#900881).\n- CVE-2014-8159: The InfiniBand (IB) implementation did not properly restrict use of User Verbs for registration of memory regions, which allowed local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/ (bsc#914742).\n- CVE-2015-1465: The IPv4 implementation in the Linux kernel before 3.18.8 did not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allowed remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets (bsc#916225).\n- CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 used an incorrect data type in a sysctl table, which allowed local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry (bsc#919007).\n- CVE-2015-2042: net/rds/sysctl.c in the Linux kernel before 3.19 used an incorrect data type in a sysctl table, which allowed local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry (bsc#919018).\n- CVE-2015-2666: Fixed a flaw that allowed crafted microcode to overflow the kernel stack (bsc#922944).\n- CVE-2015-2830: Fixed int80 fork from 64-bit tasks mishandling (bsc#926240).\n- CVE-2015-2922: Fixed possible denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements (bsc#922583).\n- CVE-2015-3331: Fixed buffer overruns in RFC4106 implementation using AESNI (bsc#927257).\n- CVE-2015-3332: Fixed TCP Fast Open local DoS (bsc#928135).\n- CVE-2015-3339: Fixed race condition flaw between the chown() and execve() system calls which could have lead to local privilege escalation (bsc#928130).\n- CVE-2015-3636: Fixed use-after-free in ping sockets which could have lead to local privilege escalation (bsc#929525).\n\nThe following non-security bugs were fixed:\n\n- /proc/stat: convert to single_open_size() (bsc#928122).\n- ACPI / sysfs: Treat the count field of counter_show() as unsigned (bsc#909312).\n- Automatically Provide/Obsolete all subpackages of old flavors (bsc#925567)\n- Btrfs: btrfs_release_extent_buffer_page did not free pages of dummy extent (bsc#930226).\n- Btrfs: fix inode eviction infinite loop after cloning into it (bsc#930224).\n- Btrfs: fix inode eviction infinite loop after extent_same ioctl (bsc#930224).\n- Btrfs: fix log tree corruption when fs mounted with -o discard (bsc#927116).\n- Btrfs: fix up bounds checking in lseek (bsc#927115).\n- Fix rtworkqueues crash. Calling __sched_setscheduler() in interrupt context is forbidden, and destroy_worker() did so in the timer interrupt with a nohz_full config. Preclude that possibility for both boot options.\n- Input: psmouse - add psmouse_matches_pnp_id helper function (bsc#929092).\n- Input: synaptics - fix middle button on Lenovo 2015 products (bsc#929092).\n- Input: synaptics - handle spurious release of trackstick buttons (bsc#929092).\n- Input: synaptics - re-route tracksticks buttons on the Lenovo 2015 series (bsc#929092).\n- Input: synaptics - remove TOPBUTTONPAD property for Lenovos 2015 (bsc#929092).\n- Input: synaptics - retrieve the extended capabilities in query $10 (bsc#929092).\n- NFS: Add attribute update barriers to nfs_setattr_update_inode() (bsc#920262).\n- NFS: restore kabi after change to nfs_setattr_update_inode (bsc#920262).\n- af_iucv: fix AF_IUCV sendmsg() errno (bsc#927308, LTC#123304).\n- audit: do not reject all AUDIT_INODE filter types (bsc#927455).\n- bnx2x: Fix kdump when iommu=on (bsc#921769).\n- cpufreq: fix a NULL pointer dereference in __cpufreq_governor() (bsc#924664).\n- dasd: Fix device having no paths after suspend/resume (bsc#927308, LTC#123896).\n- dasd: Fix inability to set a DASD device offline (bsc#927308, LTC#123905).\n- dasd: Fix unresumed device after suspend/resume (bsc#927308, LTC#123892).\n- dasd: Missing partition after online processing (bsc#917125, LTC#120565).\n- drm/radeon/cik: Add macrotile mode array query (bsc#927285).\n- drm/radeon: fix display tiling setup on SI (bsc#927285).\n- drm/radeon: set correct number of banks for CIK chips in DCE (bsc#927285).\n- iommu/amd: Correctly encode huge pages in iommu page tables (bsc#931014).\n- iommu/amd: Optimize alloc_new_range for new fetch_pte interface (bsc#931014).\n- iommu/amd: Optimize amd_iommu_iova_to_phys for new fetch_pte interface (bsc#931014).\n- iommu/amd: Optimize iommu_unmap_page for new fetch_pte interface (bsc#931014).\n- iommu/amd: Return the pte page-size in fetch_pte (bsc#931014).\n- ipc/shm.c: fix overly aggressive shmdt() when calls span multiple segments (ipc fixes).\n- ipmi: Turn off all activity on an idle ipmi interface (bsc#915540).\n- ixgbe: fix detection of SFP+ capable interfaces (bsc#922734).\n- kgr: add error code to the message in kgr_revert_replaced_funs.\n- kgr: add kgraft annotations to kthreads wait_event_freezable() API calls.\n- kgr: correct error handling of the first patching stage.\n- kgr: handle the delayed patching of the modules.\n- kgr: handle the failure of finalization stage.\n- kgr: return error in kgr_init if notifier registration fails.\n- kgr: take switching of the fops out of kgr_patch_code to new function.\n- kgr: use for_each_process_thread (bsc#929883).\n- kgr: use kgr_in_progress for all threads (bnc#929883).\n- libata: Blacklist queued TRIM on Samsung SSD 850 Pro (bsc#926156).\n- mlx4: Call dev_kfree_skby_any instead of dev_kfree_skb (bsc#928708).\n- mm, numa: really disable NUMA balancing by default on single node machines (Automatic NUMA Balancing).\n- mm: vmscan: do not throttle based on pfmemalloc reserves if node has no reclaimable pages (bsc#924803, VM Functionality).\n- net/mlx4: Cache line CQE/EQE stride fixes (bsc#927084).\n- net/mlx4_core: Cache line EQE size support (bsc#927084).\n- net/mlx4_core: Enable CQE/EQE stride support (bsc#927084).\n- net/mlx4_en: Add mlx4_en_get_cqe helper (bsc#927084).\n- perf/x86/amd/ibs: Update IBS MSRs and feature definitions.\n- powerpc/mm: Fix mmap errno when MAP_FIXED is set and mapping exceeds the allowed address space (bsc#930669).\n- powerpc/numa: Add ability to disable and debug topology updates (bsc#924809).\n- powerpc/numa: Enable CONFIG_HAVE_MEMORYLESS_NODES (bsc#924809).\n- powerpc/numa: Enable USE_PERCPU_NUMA_NODE_ID (bsc#924809).\n- powerpc/numa: check error return from proc_create (bsc#924809).\n- powerpc/numa: ensure per-cpu NUMA mappings are correct on topology update (bsc#924809).\n- powerpc/numa: use cached value of update-\u0026gt;cpu in update_cpu_topology (bsc#924809).\n- powerpc/perf: Cap 64bit userspace backtraces to PERF_MAX_STACK_DEPTH (bsc#928141).\n- powerpc/pseries: Introduce api_version to migration sysfs interface (bsc#926314).\n- powerpc/pseries: Little endian fixes for post mobility device tree update (bsc#926314).\n- powerpc/pseries: Simplify check for suspendability during suspend/migration (bsc#926314).\n- powerpc: Fix sys_call_table declaration to enable syscall tracing.\n- powerpc: Fix warning reported by verify_cpu_node_mapping() (bsc#924809).\n- powerpc: Only set numa node information for present cpus at boottime (bsc#924809).\n- powerpc: reorder per-cpu NUMA information initialization (bsc#924809).\n- powerpc: some changes in numa_setup_cpu() (bsc#924809).\n- quota: Fix use of units in quota getting / setting interfaces (bsc#913232).\n- rpm/kernel-binary.spec.in: Fix build if there is no *.crt file\n- rpm/kernel-obs-qa.spec.in: Do not fail if the kernel versions do not match\n- s390/bpf: Fix ALU_NEG (A = -A) (bsc#917125, LTC#121759).\n- s390/bpf: Fix JMP_JGE_K (A \u003e= K) and JMP_JGT_K (A \u003e K) (bsc#917125, LTC#121759).\n- s390/bpf: Fix JMP_JGE_X (A \u003e X) and JMP_JGT_X (A \u003e= X) (bsc#917125, LTC#121759).\n- s390/bpf: Fix offset parameter for skb_copy_bits() (bsc#917125, LTC#121759).\n- s390/bpf: Fix sk_load_byte_msh() (bsc#917125, LTC#121759).\n- s390/bpf: Fix skb_copy_bits() parameter passing (bsc#917125, LTC#121759).\n- s390/bpf: Zero extend parameters before calling C function (bsc#917125, LTC#121759).\n- s390/sclp: Consolidate early sclp init calls to sclp_early_detect() (bsc#917125, LTC#122429).\n- s390/sclp: Determine HSA size dynamically for zfcpdump (bsc#917125, LTC#122429).\n- s390/sclp: Move declarations for sclp_sdias into separate header file (bsc#917125, LTC#122429).\n- s390/sclp: Move early code from sclp_cmd.c to sclp_early.c (bsc#917125, LTC#122429).\n- s390/sclp: replace uninitialized early_event_mask_sccb variable with sccb_early (bsc#917125, LTC#122429).\n- s390/sclp: revert smp-detect-possible-cpus.patch (bsc#917125, LTC#122429).\n- s390/sclp_early: Add function to detect sclp console capabilities (bsc#917125, LTC#122429).\n- s390/sclp_early: Get rid of sclp_early_read_info_sccb_valid (bsc#917125, LTC#122429).\n- s390/sclp_early: Pass sccb pointer to every *_detect() function (bsc#917125, LTC#122429).\n- s390/sclp_early: Replace early_read_info_sccb with sccb_early (bsc#917125, LTC#122429).\n- s390/sclp_early: Return correct HSA block count also for zero (bsc#917125, LTC#122429).\n- s390/smp: limit number of cpus in possible cpu mask (bsc#917125, LTC#122429).\n- s390: kgr, change the kgraft state only if enabled.\n- sched, time: Fix lock inversion in thread_group_cputime()\n- sched: Fix potential near-infinite distribute_cfs_runtime() loop (bsc#930786)\n- sched: Robustify topology setup (bsc#924809).\n- seqlock: Add irqsave variant of read_seqbegin_or_lock() (Time scalability).\n- storvsc: Set the SRB flags correctly when no data transfer is needed (bsc#931130).\n- x86/apic/uv: Update the APIC UV OEM check (bsc#929145).\n- x86/apic/uv: Update the UV APIC HUB check (bsc#929145).\n- x86/apic/uv: Update the UV APIC driver check (bsc#929145).\n- x86/microcode/intel: Guard against stack overflow in the loader (bsc#922944).\n","status":"published","published":"2015-06-11T16:05:11Z","modified":"2026-02-04T03:49:21.444179Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1174-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T03:52:02.093682Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1376-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel was \nupdated to fix various bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-25T15:06:22Z","modified":"2026-02-04T02:49:28.322135Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1478-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Server 11 SP2 LTSS kernel was updated to\nreceive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code.\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c in the Linux kernel\n  allowed guest OS users to obtain sensitive information from uninitialized\n  locations in host OS kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access\n  to PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bnc#919463).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: CVE-2015-1420: Race condition in the handle_to_path\n  function in fs/fhandle.c in the Linux kernel allowed local users to bypass\n  intended size restrictions and trigger read operations on additional\n  memory locations by changing the handle_bytes value of a file handle\n  during the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel did not properly consider the side effects\n  of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls,\n  which allowed local users to cause a denial of service (system crash)\n  or possibly gain privileges via a crafted application, aka an 'I/O vector\n  array overrun' (bnc#933429).\n- CVE-2015-3331: The __driver_rfc4106_decrypt function in\n  arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly\n  determine the memory locations used for encrypted data, which allowed\n  context-dependent attackers to cause a denial of service (buffer overflow\n  and system crash) or possibly execute arbitrary code by triggering a\n  crypto API call, as demonstrated by use of a libkcapi test program with\n  an AF_ALG(aead) socket (bnc#927257).\n- CVE-2015-2922: The ndisc_router_discovery function in net/ipv6/ndisc.c\n  in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack\n  in the Linux kernel allowed remote attackers to reconfigure a hop-limit\n  setting via a small hop_limit value in a Router Advertisement (RA)\n  message (bnc#922583).\n- CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel used an\n  incorrect data type in a sysctl table, which allowed local users to\n  obtain potentially sensitive information from kernel memory or possibly\n  have unspecified other impact by accessing a sysctl entry (bnc#919007).\n- CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the\n  Linux kernel did not initialize a certain list data structure during an\n  unhash operation, which allowed local users to gain privileges or cause\n  a denial of service (use-after-free and system crash) by leveraging the\n  ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or\n  IPPROTO_ICMPV6 protocol, and then making a connect system call after a\n  disconnect (bnc#929525).\n- CVE-2014-8086: Race condition in the ext4_file_write_iter function\n  in fs/ext4/file.c in the Linux kernel allowed local users to cause a\n  denial of service (file unavailability) via a combination of a write\n  action and an F_SETFL fcntl operation for the O_DIRECT flag (bnc#900881).\n- CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel\n  did not properly restrict use of User Verbs for registration of memory\n  regions, which allowed local users to access arbitrary physical memory\n  locations, and consequently cause a denial of service (system crash)\n  or gain privileges, by leveraging permissions on a uverbs device under\n  /dev/infiniband/ (bnc#914742).\n- CVE-2014-9683: Off-by-one error in the ecryptfs_decode_from_filename\n  function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux\n  kernel allowed local users to cause a denial of service (buffer overflow\n  and system crash) or possibly gain privileges via a crafted filename\n  (bnc#918333).\n- CVE-2015-2042: net/rds/sysctl.c in the Linux kernel used an incorrect\n  data type in a sysctl table, which allowed local users to obtain\n  potentially sensitive information from kernel memory or possibly have\n  unspecified other impact by accessing a sysctl entry (bnc#919018).\n- CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update\n  function in net/sctp/associola.c in the Linux kernel allowed remote\n  attackers to cause a denial of service (slab corruption and panic) or\n  possibly have unspecified other impact by triggering an INIT collision\n  that leads to improper handling of shared-key data (bnc#915577).\n\nThe following non-security bugs were fixed:\n- HID: add ALWAYS_POLL quirk for a Logitech 0xc007 (bnc#931474).\n- HID: add HP OEM mouse to quirk ALWAYS_POLL (bnc#931474).\n- HID: add quirk for PIXART OEM mouse used by HP (bnc#931474).\n- HID: usbhid: add always-poll quirk (bnc#931474).\n- HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen.\n- HID: usbhid: fix PIXART optical mouse (bnc#931474).\n- HID: usbhid: more mice with ALWAYS_POLL (bnc#931474).\n- HID: usbhid: yet another mouse with ALWAYS_POLL (bnc#931474).\n- bnx2x: Fix kdump when iommu=on (bug#921769).\n- cifs: fix use-after-free bug in find_writable_file (bnc#909477).\n- coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bsc#904671, bsc#929360).\n- dm: fixed that LVM merge snapshot of root logical volume were not working (bsc#928801)\n- deal with deadlock in d_walk fix (bnc#929148, bnc#929283).\n- e1000: do not enable dma receives until after dma address has been setup (bsc#821931).\n- fsnotify: Fix handling of renames in audit (bnc#915200).\n- inet: add a redirect generation id in inetpeer (bnc#860593).\n- inetpeer: initialize -\u0026gt;redirect_genid in inet_getpeer() (bnc#860593).\n- kabi: hide bnc#860593 changes of struct inetpeer_addr_base (bnc#860593).\n- kernel: fix data corruption when reading /proc/sysinfo (bsc#891087, bsc#937986, LTC#114480).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- time, ntp: Do not update time_state in middle of leap second (bsc#912916).\n- s390-3215-tty-close-crash.patch: kernel: 3215 tty close crash (bsc#916010, LTC#120873).\n- s390-3215-tty-close-race.patch: kernel: 3215 console crash (bsc#916010, LTC#94302).\n- s390-3215-tty-hang.patch: Renamed from patches.arch/s390-tty-hang.patch.\n- s390-3215-tty-hang.patch: Update references (bnc#898693, bnc#897995, LTC#114562).\n- s390-dasd-retry-partition-detection.patch: s390/dasd: retry partition detection (bsc#916010, LTC#94302).\n- s390-dasd-retry-partition-detection.patch: Update references (bsc#916010, LTC#120565).\n- s390-sclp-tty-refcount.patch: kernel: sclp console tty reference counting (bsc#916010, LTC#115466).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi/sg: sg_start_req(): make sure that there is not too many elements in iovec (bsc#940338).\n- x86, xsave: remove thread_has_fpu() bug check in __sanitize_i387_state() (bsc#904671, bsc#929360).\n- x86-mm-send-tlb-flush-ipis-to-online-cpus-only.patch: x86, mm: Send tlb flush IPIs to online cpus only (bnc#798406).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/reboot: Fix a warning message triggered by stop_other_cpus() (bnc#930284).\n- xen: Correctly re-enable interrupts in xen_spin_wait() (bsc#879878, bsc#908870).\n- xfs: prevent deadlock trying to cover an active log (bsc#917093).\n  ","status":"published","published":"2015-08-20T15:22:44Z","modified":"2026-02-04T04:09:53.876805Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1592-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes.\n\nThe following feature was added for RT:\n- FATE#317131: The SocketCAN (Peak PCI) driver was added for CAN bus support.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-09-09T17:05:11Z","modified":"2025-05-02T04:04:15.298019Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1611-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-08-21T19:44:59Z","modified":"2026-02-04T02:19:26.768156Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1678-1","title":"Security update for kernel-source","description":"The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various\nsecurity and bugfixes.\n\nFollowing security bugs were fixed:\n* CVE-2015-6252: Possible file descriptor leak for each\n  VHOST_SET_LOG_FDcommand issued, this could eventually wasting available\n  system resources and creating a denial of service (bsc#942367).\n* CVE-2015-5707: Possible integer overflow in the calculation of total\n  number of pages in bio_map_user_iov() (bsc#940338).\n* CVE-2015-5364: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 do not properly consider yielding a\n  processor, which allowed remote attackers to cause a denial of service\n  (system hang) via incorrect checksums within a UDP packet flood\n  (bsc#936831).\n* CVE-2015-5366: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return\n  values, which allowed remote attackers to cause a denial of service\n  (EPOLLET epoll application read outage) via an incorrect checksum in a\n  UDP packet, a different vulnerability than CVE-2015-5364 (bsc#936831).\n* CVE-2015-1420: Race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel through 3.19.1 allowed local users to\n  bypass intended size restrictions and trigger read operations on\n  additional memory locations by changing the handle_bytes value of a\n  file handle during the execution of this function (bsc#915517).\n* CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel before 3.16 do not properly consider the\n  side effects of failed __copy_to_user_inatomic and\n  __copy_from_user_inatomic calls, which allows local users to cause a\n  denial of service (system crash) or possibly gain privileges via a\n  crafted application, aka an 'I/O' vector array overrun. (bsc#933429)\n* CVE-2015-2150: Xen 3.3.x through 4.5.x and the Linux kernel through\n  3.19.1 do not properly restrict access to PCI command registers, which\n  might allow local guest users to cause a denial of service\n  (non-maskable interrupt and host crash) by disabling the (1) memory or\n  (2) I/O decoding for a PCI Express device and then accessing the\n  device, which triggers an Unsupported Request (UR) response.\n  (bsc#919463)\n* CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel before\n  3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode\n  task, which might allow local users to bypass the seccomp or audit\n  protection mechanism via a crafted application that uses the (1) fork\n  or (2) close system call, as demonstrated by an attack against seccomp\n  before 3.16. (bsc#926240)\n* CVE-2015-4700: The bpf_int_jit_compile function in\n  arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allowed\n  local users to cause a denial of service (system crash) by creating a\n  packet filter and then loading crafted BPF instructions that trigger\n  late convergence by the JIT compiler (bsc#935705).\n* CVE-2015-4167: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.19.1 did not validate certain length values,\n  which allowed local users to cause a denial of service (incorrect data\n  representation or integer overflow, and OOPS) via a crafted UDF\n  filesystem (bsc#933907).\n* CVE-2015-0777: drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0\n  (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as\n  used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions,\n  allows guest OS users to obtain sensitive information from\n  uninitialized locations in host OS kernel memory via unspecified\n  vectors. (bsc#917830)\n* CVE-2014-9728: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not validate certain lengths, which allowed local\n  users to cause a denial of service (buffer over-read and system crash)\n  via a crafted filesystem image, related to fs/udf/inode.c and\n  fs/udf/symlink.c (bsc#933904).\n* CVE-2014-9730: The udf_pc_to_char function in fs/udf/symlink.c in the\n  Linux kernel before 3.18.2 relies on component lengths that are unused,\n  which allowed local users to cause a denial of service (system crash)\n  via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9729: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.18.2 did not ensure a certain data-structure size\n  consistency, which allowed local users to cause a denial of service\n  (system crash) via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9731: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not ensure that space is available for storing a\n  symlink target's name along with a trailing \\0 character, which allowed\n  local users to obtain sensitive information via a crafted filesystem\n  image, related to fs/udf/symlink.c and fs/udf/unicode.c (bsc#933896).\n\nThe following non-security bugs were fixed:\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942350).\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942404).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942404).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942404).\n- Btrfs: fix hang when failing to submit bio of directIO (bnc#942688).\n- Btrfs: fix memory corruption on failure to submit bio for direct IO (bnc#942688).\n- Btrfs: fix put dio bio twice when we submit dio bio fail (bnc#942688).\n- DRM/I915: Add enum hpd_pin to intel_encoder (bsc#942938).\n- DRM/i915: Convert HPD interrupts to make use of HPD pin assignment in encoders (v2) (bsc#942938).\n- DRM/i915: Get rid of the 'hotplug_supported_mask' in struct drm_i915_private (bsc#942938).\n- DRM/i915: Remove i965_hpd_irq_setup (bsc#942938).\n- DRM/i915: Remove valleyview_hpd_irq_setup (bsc#942938).\n- Ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- IB/iser: Add Discovery support (bsc#923002).\n- IB/iser: Move informational messages from error to info level (bsc#923002).\n- NFS: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- NFSD: Fix nfsv4 opcode decoding error (bsc#935906).\n- NFSv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- PCI: Disable Bus Master only on kexec reboot (bsc#920110).\n- PCI: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- PCI: Do not try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- PCI: Lock down register access when trusted_kernel is true (fate#314486, bnc#884333)(bsc#923431).\n- PCI: disable Bus Master on PCI device shutdown (bsc#920110).\n- USB: xhci: Reset a halted endpoint immediately when we encounter a stall (bnc#933721).\n- USB: xhci: do not start a halted endpoint before its new dequeue is set (bnc#933721).\n- Apparmor: fix file_permission if profile is updated (bsc#917968).\n- block: Discard bios do not have data (bsc#928988).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/i915: (re)init HPD interrupt storm statistics (bsc#942938).\n- drm/i915: Add HPD IRQ storm detection (v5) (bsc#942938).\n- drm/i915: Add Reenable Timer to turn Hotplug Detection back on (v4) (bsc#942938).\n- drm/i915: Add bit field to record which pins have received HPD events (v3) (bsc#942938).\n- drm/i915: Add messages useful for HPD storm detection debugging (v2) (bsc#942938).\n- drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt (bsc#942938).\n- drm/i915: Disable HPD interrupt on pin when irq storm is detected (v3) (bsc#942938).\n- drm/i915: Do not WARN nor handle unexpected hpd interrupts on gmch platforms (bsc#942938).\n- drm/i915: Enable hotplug interrupts after querying hw capabilities (bsc#942938).\n- drm/i915: Fix hotplug interrupt enabling for SDVOC (bsc#942938).\n- drm/i915: Fix up sdvo hpd pins for i965g/gm (bsc#942938).\n- drm/i915: Make hpd arrays big enough to avoid out of bounds access (bsc#942938).\n- drm/i915: Mask out the HPD irq bits before setting them individually (bsc#942938).\n- drm/i915: Only print hotplug event message when hotplug bit is set (bsc#942938).\n- drm/i915: Only reprobe display on encoder which has received an HPD event (v2) (bsc#942938).\n- drm/i915: Queue reenable timer also when enable_hotplug_processing is false (bsc#942938).\n- drm/i915: Remove pch_rq_mask from struct drm_i915_private (bsc#942938).\n- drm/i915: Use an interrupt save spinlock in intel_hpd_irq_handler() (bsc#942938).\n- drm/i915: WARN_ONCE() about unexpected interrupts for all chipsets (bsc#942938).\n- drm/i915: assert_spin_locked for pipestat interrupt enable/disable (bsc#942938).\n- drm/i915: clear crt hotplug compare voltage field before setting (bsc#942938).\n- drm/i915: close tiny race in the ilk pcu even interrupt setup (bsc#942938).\n- drm/i915: fix hotplug event bit tracking (bsc#942938).\n- drm/i915: fix hpd interrupt register locking (bsc#942938).\n- drm/i915: fix hpd work vs. flush_work in the pageflip code deadlock (bsc#942938).\n- drm/i915: fix locking around ironlake_enable|disable_display_irq (bsc#942938).\n- drm/i915: fold the hpd_irq_setup call into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the no-irq check into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the queue_work into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: implement ibx_hpd_irq_setup (bsc#942938).\n- drm/i915: s/hotplug_irq_storm_detect/intel_hpd_irq_handler/ (bsc#942938).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails (FATE#317582).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (FATE#317582).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (FATE#317582, bnc#883380, bsc#935572).\n- ehci-pci: enable interrupt on BayTrail (bnc926007).\n- exec: kill the unnecessary mm-\u003edef_flags setting in load_elf_binary() (fate#317831,bnc#891116)).\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637). \n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hv_storvsc: use small sg_tablesize on x86 (bnc#937256).\n- ibmveth: Add GRO support (bsc#935055).\n- ibmveth: Add support for Large Receive Offload (bsc#935055).\n- ibmveth: Add support for TSO (bsc#935055).\n- ibmveth: add support for TSO6.\n- ibmveth: change rx buffer default allocation for CMO (bsc#935055).\n- igb: do not reuse pages with pfmemalloc flag fix (bnc#920016).\n- inotify: Fix nested sleeps in inotify_read() (bsc#940925).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipv6: probe routes asynchronous in rt6_probe (bsc#936118).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kabi: wrapper include file with __GENKSYMS__ check to avoid kabi change (bsc920110).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn.\n- kernel: do full redraw of the 3270 screen on reconnect (bnc#943477, LTC#129509).\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- libiscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#938485).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm, THP: do not hold mmap_sem in khugepaged when allocating THP (VM Performance).\n- mm, mempolicy: remove duplicate code (VM Functionality, bnc#931620).\n- mm, thp: fix collapsing of hugepages on madvise (VM Functionality).\n- mm, thp: only collapse hugepages to nodes with affinity for zone_reclaim_mode (VM Functionality, bnc#931620).\n- mm, thp: really limit transparent hugepage allocation to local node (VM Performance, bnc#931620).\n- mm, thp: respect MPOL_PREFERRED policy with non-local node (VM Performance, bnc#931620).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm/mempolicy.c: merge alloc_hugepage_vma to alloc_pages_vma (VM Performance, bnc#931620).\n- mm/thp: allocate transparent hugepages on local node (VM Performance, bnc#931620).\n- mm: make page pfmemalloc check more robust (bnc#920016).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- mm: thp: khugepaged: add policy for finding target node (VM Functionality, bnc#931620).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- netfilter: nf_conntrack_proto_sctp: minimal multihoming support (bsc#932350).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (FATE#309111, bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler (bsc#929142).\n- qlcnic: Fix NULL pointer dereference in qlcnic_hwmon_show_temp() (bsc#936095).\n- r8169: remember WOL preferences on driver load (bsc#942305).\n- s390/dasd: fix kernel panic when alias is set offline (bnc#940966, LTC#128595).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi: Correctly set the scsi host/msg/status bytes (bnc#933936).\n- scsi: fix scsi_error_handler vs. scsi_host_dev_release race (bnc#942204).\n- scsi: Moved iscsi kabi patch to patches.kabi (bsc#923002)\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: kabi: allow iscsi disocvery session support (bsc#923002).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi_transport_iscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- sg_start_req(): make sure that there's not too many elements in iovec (bsc#940338).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- supported.conf: enable sch_mqprio (bsc#932882)\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb (bnc#933721).\n- usb: xhci: handle Config Error Change (CEC) in xhci driver (bnc#933721).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86-64: Do not apply destructive erratum workaround on unaffected CPUs (bsc#929076).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/tsc: Change Fast TSC calibration failed from error to info (bnc#942605).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: fix problem when using md+XFS under high load (bnc#925705).\n- xhci: Allocate correct amount of scratchpad buffers (bnc#933721).\n- xhci: Do not enable/disable RWE on bus suspend/resume (bnc#933721).\n- xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256 (bnc#933721).\n- xhci: Treat not finding the event_seg on COMP_STOP the same as COMP_STOP_INVAL (bnc#933721).\n- xhci: Workaround for PME stuck issues in Intel xhci (bnc#933721).\n- xhci: do not report PLC when link is in internal resume state (bnc#933721).\n- xhci: fix reporting of 0-sized URBs in control endpoint (bnc#933721).\n- xhci: report U3 when link is in resume state (bnc#933721).\n- xhci: rework cycle bit checking for new dequeue pointers (bnc#933721).\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936921, bnc#936925, LTC#126491).","status":"published","published":"2015-09-08T16:29:34Z","modified":"2026-02-04T03:45:14.157452Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-2830","description":"arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.","status":"published","published":"2015-04-03T00:00:00Z","modified":"2026-10-28T08:17:13.469632585Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2589-1","title":"linux-lts-utopic vulnerabilities","description":"Jan Beulich discovered the Xen virtual machine subsystem of the Linux\nkernel did not properly restrict access to PCI command registers. A local\nguest user could exploit this flaw to cause a denial of service (host\ncrash). (CVE-2015-2150)\n\nA stack overflow was discovered in the the microcode loader for the intel\nx86 platform. A local attacker could exploit this flaw to cause a denial of\nservice (kernel crash) or to potentially execute code with kernel\nprivileges. (CVE-2015-2666)\n\nA privilege escalation was discovered in the fork syscall via the int80\nentry on 64 bit kernels with 32 bit emulation support. An unprivileged\nlocal attacker could exploit this flaw to increase their privileges on the\nsystem. (CVE-2015-2830)\n\nIt was discovered that the Linux kernel's IPv6 networking stack has a flaw\nthat allows using route advertisement (RA) messages to set the 'hop_limit'\nto values that are too low. An unprivileged attacker on a local network\ncould exploit this flaw to cause a denial of service (IPv6 messages\ndropped). (CVE-2015-2922)\n","status":"published","published":"2015-04-30T08:31:41Z","modified":"2026-02-10T04:40:53Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2614-1","title":"linux vulnerabilities","description":"Vincent Tondellier discovered an integer overflow in the Linux kernel's\nnetfilter connection tracking accounting of loaded extensions. An attacker\non the local area network (LAN) could potential exploit this flaw to cause\na denial of service (system crash of targeted system). (CVE-2014-9715)\n\nJan Beulich discovered the Xen virtual machine subsystem of the Linux\nkernel did not properly restrict access to PCI command registers. A local\nguest user could exploit this flaw to cause a denial of service (host\ncrash). (CVE-2015-2150)\n\nA privilege escalation was discovered in the fork syscall via the int80 entry\non 64 bit kernels with 32 bit emulation support. An unprivileged local\nattacker could exploit this flaw to increase their privileges on the\nsystem. (CVE-2015-2830)\n\nA memory corruption issue was discovered in AES decryption when using the\nIntel AES-NI accelerated code path. A remote attacker could exploit this\nflaw to cause a denial of service (system crash) or potentially escalate\nprivileges on Intel base machines with AEC-GCM mode IPSec security\nassociation. (CVE-2015-3331)\n","status":"published","published":"2015-05-20T11:28:12Z","modified":"2026-04-22T09:12:58.784399Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}