{"id":"CVE-2015-5707","aliases":["DEBIAN-CVE-2015-5707","DLA-310-1","DSA-3329-1","EUVD-2015-5654","GHSA-rfcp-m7v6-h4ff","MGASA-2015-0386","MGASA-2015-0390","MGASA-2016-0015","SUSE-SU-2015:1478-1","SUSE-SU-2015:1592-1","SUSE-SU-2015:1611-1","SUSE-SU-2015:1678-1","SUSE-SU-2015:2084-1","SUSE-SU-2015:2085-1","SUSE-SU-2015:2086-1","SUSE-SU-2015:2087-1","SUSE-SU-2015:2089-1","SUSE-SU-2015:2090-1","SUSE-SU-2015:2091-1","SUSE-SU-2015:2167-1","SUSE-SU-2016:0585-1","SUSE-SU-2016:0785-1","UBUNTU-CVE-2015-5707","USN-2734-1","USN-2737-1","USN-2750-1"],"status":"published","title":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x...","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00513,"percentile":0.43962,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2015-08-03T00:00:00Z","modified":"2026-09-09T06:47:19Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.1.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.1.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.1.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-63.103"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-50.66~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-28.30~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-48squeeze14"}]}],"versions":["2.6.32-30","2.6.32-30+m68k.5","2.6.32-31","2.6.32-31~bpo50+1","2.6.32-32","2.6.32-33","2.6.32-34","2.6.32-34squeeze1","2.6.32-35","2.6.32-35squeeze1","2.6.32-35squeeze2","2.6.32-35~bpo50+1","2.6.32-36","2.6.32-37","2.6.32-38","2.6.32-39","2.6.32-39squeeze1","2.6.32-40","2.6.32-41","2.6.32-41squeeze2","2.6.32-42","2.6.32-43","2.6.32-44","2.6.32-45","2.6.32-46","2.6.32-46squeeze1","2.6.32-47","2.6.32-48","2.6.32-48squeeze1","2.6.32-48squeeze10","2.6.32-48squeeze11","2.6.32-48squeeze12","2.6.32-48squeeze13","2.6.32-48squeeze3","2.6.32-48squeeze4","2.6.32-48squeeze5","2.6.32-48squeeze6","2.6.32-48squeeze7","2.6.32-48squeeze8","2.6.32-48squeeze9"],"bundled":7},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.68-1+deb7u3"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1","3.2.68-1+deb7u1~bpo60+1","3.2.68-1+deb7u2","3.2.68-1+deb7u2~bpo60+1","3.2.68-1+deb7u3~bpo60+1"],"bundled":4},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt11-1+deb8u3"}]}],"versions":["3.16.7-ckt11-1","3.16.7-ckt11-1+deb8u1","3.16.7-ckt11-1+deb8u2","3.16.7-ckt11-1+deb8u2~bpo70+1","3.16.7-ckt11-1+deb8u3~bpo70+1","3.16.7-ckt11-1~bpo70+1","3.16.7-ckt9-2","3.16.7-ckt9-3","3.16.7-ckt9-3~deb8u1","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20150722-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"btrfs-progs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-4.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-firmware-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20150824-1.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"radeon-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20150824-1.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-broadcom-wl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.30.223.248-36.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.200.1046-5.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.125-5.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.125-41.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"nvidia340","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"340.76-2.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia340","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"340.76-31.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"346.82-3.mga5.nonfree"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-1.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-1.mga5"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2-4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4-2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4-2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-45.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-45.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-45.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-45.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP1_Update_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"lttng-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"lttng-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.55-52.42.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-63.103"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-50.66~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-28.30~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-63.103"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-28.30~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-50.66~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"suse","product":"suse_linux_enterprise_desktop"},{"vendor":"suse","product":"suse_linux_enterprise_server"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2738-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.ubuntu.com/usn/USN-2733-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.ubuntu.com/usn/USN-2750-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2737-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://source.android.com/security/bulletin/2017-07-01","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.debian.org/security/2015/dsa-3329","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1033521","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250030","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.ubuntu.com/usn/USN-2760-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.ubuntu.com/usn/USN-2759-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.ubuntu.com/usn/USN-2734-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/08/01/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.securityfocus.com/bid/76145","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5707"},{"url":"https://github.com/advisories/GHSA-rfcp-m7v6-h4ff"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5707","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0386.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16655","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_4.0","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_4.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.2","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.3","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.7","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.8","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0390.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16654","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2016-0015.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17401","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16915","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17010","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17034","tags":["report"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.9","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.10","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.11","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.12","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.13","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.14","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.15","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151478-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/798406","tags":["report"]},{"url":"https://bugzilla.suse.com/821931","tags":["report"]},{"url":"https://bugzilla.suse.com/860593","tags":["report"]},{"url":"https://bugzilla.suse.com/879878","tags":["report"]},{"url":"https://bugzilla.suse.com/891087","tags":["report"]},{"url":"https://bugzilla.suse.com/897995","tags":["report"]},{"url":"https://bugzilla.suse.com/898693","tags":["report"]},{"url":"https://bugzilla.suse.com/900881","tags":["report"]},{"url":"https://bugzilla.suse.com/904671","tags":["report"]},{"url":"https://bugzilla.suse.com/908870","tags":["report"]},{"url":"https://bugzilla.suse.com/909477","tags":["report"]},{"url":"https://bugzilla.suse.com/912916","tags":["report"]},{"url":"https://bugzilla.suse.com/914742","tags":["report"]},{"url":"https://bugzilla.suse.com/915200","tags":["report"]},{"url":"https://bugzilla.suse.com/915517","tags":["report"]},{"url":"https://bugzilla.suse.com/915577","tags":["report"]},{"url":"https://bugzilla.suse.com/916010","tags":["report"]},{"url":"https://bugzilla.suse.com/917093","tags":["report"]},{"url":"https://bugzilla.suse.com/917830","tags":["report"]},{"url":"https://bugzilla.suse.com/918333","tags":["report"]},{"url":"https://bugzilla.suse.com/919007","tags":["report"]},{"url":"https://bugzilla.suse.com/919018","tags":["report"]},{"url":"https://bugzilla.suse.com/919463","tags":["report"]},{"url":"https://bugzilla.suse.com/921769","tags":["report"]},{"url":"https://bugzilla.suse.com/922583","tags":["report"]},{"url":"https://bugzilla.suse.com/923245","tags":["report"]},{"url":"https://bugzilla.suse.com/926240","tags":["report"]},{"url":"https://bugzilla.suse.com/927257","tags":["report"]},{"url":"https://bugzilla.suse.com/928801","tags":["report"]},{"url":"https://bugzilla.suse.com/929148","tags":["report"]},{"url":"https://bugzilla.suse.com/929283","tags":["report"]},{"url":"https://bugzilla.suse.com/929360","tags":["report"]},{"url":"https://bugzilla.suse.com/929525","tags":["report"]},{"url":"https://bugzilla.suse.com/930284","tags":["report"]},{"url":"https://bugzilla.suse.com/930934","tags":["report"]},{"url":"https://bugzilla.suse.com/931474","tags":["report"]},{"url":"https://bugzilla.suse.com/933429","tags":["report"]},{"url":"https://bugzilla.suse.com/935705","tags":["report"]},{"url":"https://bugzilla.suse.com/936831","tags":["report"]},{"url":"https://bugzilla.suse.com/937032","tags":["report"]},{"url":"https://bugzilla.suse.com/937986","tags":["report"]},{"url":"https://bugzilla.suse.com/940338","tags":["report"]},{"url":"https://bugzilla.suse.com/940398","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5707","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/851068","tags":["report"]},{"url":"https://bugzilla.suse.com/867362","tags":["report"]},{"url":"https://bugzilla.suse.com/873385","tags":["report"]},{"url":"https://bugzilla.suse.com/883380","tags":["report"]},{"url":"https://bugzilla.suse.com/886785","tags":["report"]},{"url":"https://bugzilla.suse.com/894936","tags":["report"]},{"url":"https://bugzilla.suse.com/920110","tags":["report"]},{"url":"https://bugzilla.suse.com/920250","tags":["report"]},{"url":"https://bugzilla.suse.com/920733","tags":["report"]},{"url":"https://bugzilla.suse.com/921430","tags":["report"]},{"url":"https://bugzilla.suse.com/924701","tags":["report"]},{"url":"https://bugzilla.suse.com/925705","tags":["report"]},{"url":"https://bugzilla.suse.com/925881","tags":["report"]},{"url":"https://bugzilla.suse.com/925903","tags":["report"]},{"url":"https://bugzilla.suse.com/926953","tags":["report"]},{"url":"https://bugzilla.suse.com/927355","tags":["report"]},{"url":"https://bugzilla.suse.com/927786","tags":["report"]},{"url":"https://bugzilla.suse.com/929142","tags":["report"]},{"url":"https://bugzilla.suse.com/929143","tags":["report"]},{"url":"https://bugzilla.suse.com/930092","tags":["report"]},{"url":"https://bugzilla.suse.com/930761","tags":["report"]},{"url":"https://bugzilla.suse.com/931538","tags":["report"]},{"url":"https://bugzilla.suse.com/932348","tags":["report"]},{"url":"https://bugzilla.suse.com/932458","tags":["report"]},{"url":"https://bugzilla.suse.com/933896","tags":["report"]},{"url":"https://bugzilla.suse.com/933904","tags":["report"]},{"url":"https://bugzilla.suse.com/933907","tags":["report"]},{"url":"https://bugzilla.suse.com/933936","tags":["report"]},{"url":"https://bugzilla.suse.com/934742","tags":["report"]},{"url":"https://bugzilla.suse.com/934944","tags":["report"]},{"url":"https://bugzilla.suse.com/935053","tags":["report"]},{"url":"https://bugzilla.suse.com/935572","tags":["report"]},{"url":"https://bugzilla.suse.com/935866","tags":["report"]},{"url":"https://bugzilla.suse.com/935906","tags":["report"]},{"url":"https://bugzilla.suse.com/936077","tags":["report"]},{"url":"https://bugzilla.suse.com/936423","tags":["report"]},{"url":"https://bugzilla.suse.com/936637","tags":["report"]},{"url":"https://bugzilla.suse.com/936875","tags":["report"]},{"url":"https://bugzilla.suse.com/936925","tags":["report"]},{"url":"https://bugzilla.suse.com/937402","tags":["report"]},{"url":"https://bugzilla.suse.com/937444","tags":["report"]},{"url":"https://bugzilla.suse.com/937503","tags":["report"]},{"url":"https://bugzilla.suse.com/937641","tags":["report"]},{"url":"https://bugzilla.suse.com/937855","tags":["report"]},{"url":"https://bugzilla.suse.com/939910","tags":["report"]},{"url":"https://bugzilla.suse.com/939994","tags":["report"]},{"url":"https://bugzilla.suse.com/942350","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151611-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151678-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/777565","tags":["report"]},{"url":"https://bugzilla.suse.com/884333","tags":["report"]},{"url":"https://bugzilla.suse.com/891116","tags":["report"]},{"url":"https://bugzilla.suse.com/917968","tags":["report"]},{"url":"https://bugzilla.suse.com/920016","tags":["report"]},{"url":"https://bugzilla.suse.com/923002","tags":["report"]},{"url":"https://bugzilla.suse.com/923431","tags":["report"]},{"url":"https://bugzilla.suse.com/928988","tags":["report"]},{"url":"https://bugzilla.suse.com/929076","tags":["report"]},{"url":"https://bugzilla.suse.com/931620","tags":["report"]},{"url":"https://bugzilla.suse.com/932350","tags":["report"]},{"url":"https://bugzilla.suse.com/932882","tags":["report"]},{"url":"https://bugzilla.suse.com/933721","tags":["report"]},{"url":"https://bugzilla.suse.com/935055","tags":["report"]},{"url":"https://bugzilla.suse.com/936095","tags":["report"]},{"url":"https://bugzilla.suse.com/936118","tags":["report"]},{"url":"https://bugzilla.suse.com/936921","tags":["report"]},{"url":"https://bugzilla.suse.com/937256","tags":["report"]},{"url":"https://bugzilla.suse.com/938485","tags":["report"]},{"url":"https://bugzilla.suse.com/940925","tags":["report"]},{"url":"https://bugzilla.suse.com/940966","tags":["report"]},{"url":"https://bugzilla.suse.com/942204","tags":["report"]},{"url":"https://bugzilla.suse.com/942305","tags":["report"]},{"url":"https://bugzilla.suse.com/942367","tags":["report"]},{"url":"https://bugzilla.suse.com/942404","tags":["report"]},{"url":"https://bugzilla.suse.com/942605","tags":["report"]},{"url":"https://bugzilla.suse.com/942688","tags":["report"]},{"url":"https://bugzilla.suse.com/942938","tags":["report"]},{"url":"https://bugzilla.suse.com/943477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6252","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152084-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/940342","tags":["report"]},{"url":"https://bugzilla.suse.com/948536","tags":["report"]},{"url":"https://bugzilla.suse.com/948701","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7613","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152085-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152086-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152087-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152089-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152090-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152091-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152167-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5697","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160585-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/812259","tags":["report"]},{"url":"https://bugzilla.suse.com/855062","tags":["report"]},{"url":"https://bugzilla.suse.com/867583","tags":["report"]},{"url":"https://bugzilla.suse.com/899908","tags":["report"]},{"url":"https://bugzilla.suse.com/902606","tags":["report"]},{"url":"https://bugzilla.suse.com/924919","tags":["report"]},{"url":"https://bugzilla.suse.com/935087","tags":["report"]},{"url":"https://bugzilla.suse.com/937261","tags":["report"]},{"url":"https://bugzilla.suse.com/938577","tags":["report"]},{"url":"https://bugzilla.suse.com/940946","tags":["report"]},{"url":"https://bugzilla.suse.com/941363","tags":["report"]},{"url":"https://bugzilla.suse.com/942476","tags":["report"]},{"url":"https://bugzilla.suse.com/943989","tags":["report"]},{"url":"https://bugzilla.suse.com/944749","tags":["report"]},{"url":"https://bugzilla.suse.com/945649","tags":["report"]},{"url":"https://bugzilla.suse.com/947953","tags":["report"]},{"url":"https://bugzilla.suse.com/949440","tags":["report"]},{"url":"https://bugzilla.suse.com/949936","tags":["report"]},{"url":"https://bugzilla.suse.com/950292","tags":["report"]},{"url":"https://bugzilla.suse.com/951199","tags":["report"]},{"url":"https://bugzilla.suse.com/951392","tags":["report"]},{"url":"https://bugzilla.suse.com/951615","tags":["report"]},{"url":"https://bugzilla.suse.com/952579","tags":["report"]},{"url":"https://bugzilla.suse.com/952976","tags":["report"]},{"url":"https://bugzilla.suse.com/954992","tags":["report"]},{"url":"https://bugzilla.suse.com/955118","tags":["report"]},{"url":"https://bugzilla.suse.com/955354","tags":["report"]},{"url":"https://bugzilla.suse.com/955654","tags":["report"]},{"url":"https://bugzilla.suse.com/956514","tags":["report"]},{"url":"https://bugzilla.suse.com/956708","tags":["report"]},{"url":"https://bugzilla.suse.com/957525","tags":["report"]},{"url":"https://bugzilla.suse.com/957988","tags":["report"]},{"url":"https://bugzilla.suse.com/957990","tags":["report"]},{"url":"https://bugzilla.suse.com/958463","tags":["report"]},{"url":"https://bugzilla.suse.com/958886","tags":["report"]},{"url":"https://bugzilla.suse.com/958951","tags":["report"]},{"url":"https://bugzilla.suse.com/959090","tags":["report"]},{"url":"https://bugzilla.suse.com/959146","tags":["report"]},{"url":"https://bugzilla.suse.com/959190","tags":["report"]},{"url":"https://bugzilla.suse.com/959257","tags":["report"]},{"url":"https://bugzilla.suse.com/959364","tags":["report"]},{"url":"https://bugzilla.suse.com/959399","tags":["report"]},{"url":"https://bugzilla.suse.com/959436","tags":["report"]},{"url":"https://bugzilla.suse.com/959463","tags":["report"]},{"url":"https://bugzilla.suse.com/959629","tags":["report"]},{"url":"https://bugzilla.suse.com/960221","tags":["report"]},{"url":"https://bugzilla.suse.com/960227","tags":["report"]},{"url":"https://bugzilla.suse.com/960281","tags":["report"]},{"url":"https://bugzilla.suse.com/960300","tags":["report"]},{"url":"https://bugzilla.suse.com/961202","tags":["report"]},{"url":"https://bugzilla.suse.com/961257","tags":["report"]},{"url":"https://bugzilla.suse.com/961500","tags":["report"]},{"url":"https://bugzilla.suse.com/961509","tags":["report"]},{"url":"https://bugzilla.suse.com/961516","tags":["report"]},{"url":"https://bugzilla.suse.com/961588","tags":["report"]},{"url":"https://bugzilla.suse.com/961971","tags":["report"]},{"url":"https://bugzilla.suse.com/962336","tags":["report"]},{"url":"https://bugzilla.suse.com/962356","tags":["report"]},{"url":"https://bugzilla.suse.com/962788","tags":["report"]},{"url":"https://bugzilla.suse.com/962965","tags":["report"]},{"url":"https://bugzilla.suse.com/963449","tags":["report"]},{"url":"https://bugzilla.suse.com/963572","tags":["report"]},{"url":"https://bugzilla.suse.com/963765","tags":["report"]},{"url":"https://bugzilla.suse.com/963767","tags":["report"]},{"url":"https://bugzilla.suse.com/963825","tags":["report"]},{"url":"https://bugzilla.suse.com/964230","tags":["report"]},{"url":"https://bugzilla.suse.com/964821","tags":["report"]},{"url":"https://bugzilla.suse.com/965344","tags":["report"]},{"url":"https://bugzilla.suse.com/965840","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2069","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160785-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/816099","tags":["report"]},{"url":"https://bugzilla.suse.com/884701","tags":["report"]},{"url":"https://bugzilla.suse.com/922071","tags":["report"]},{"url":"https://bugzilla.suse.com/945219","tags":["report"]},{"url":"https://bugzilla.suse.com/949752","tags":["report"]},{"url":"https://bugzilla.suse.com/951155","tags":["report"]},{"url":"https://bugzilla.suse.com/955308","tags":["report"]},{"url":"https://bugzilla.suse.com/956084","tags":["report"]},{"url":"https://bugzilla.suse.com/957986","tags":["report"]},{"url":"https://bugzilla.suse.com/959709","tags":["report"]},{"url":"https://bugzilla.suse.com/960174","tags":["report"]},{"url":"https://bugzilla.suse.com/960458","tags":["report"]},{"url":"https://bugzilla.suse.com/960561","tags":["report"]},{"url":"https://bugzilla.suse.com/960629","tags":["report"]},{"url":"https://bugzilla.suse.com/961658","tags":["report"]},{"url":"https://bugzilla.suse.com/963193","tags":["report"]},{"url":"https://bugzilla.suse.com/963746","tags":["report"]},{"url":"https://bugzilla.suse.com/963960","tags":["report"]},{"url":"https://bugzilla.suse.com/964201","tags":["report"]},{"url":"https://bugzilla.suse.com/964730","tags":["report"]},{"url":"https://bugzilla.suse.com/965199","tags":["report"]},{"url":"https://bugzilla.suse.com/965830","tags":["report"]},{"url":"https://bugzilla.suse.com/965891","tags":["report"]},{"url":"https://bugzilla.suse.com/966026","tags":["report"]},{"url":"https://bugzilla.suse.com/966094","tags":["report"]},{"url":"https://bugzilla.suse.com/966278","tags":["report"]},{"url":"https://bugzilla.suse.com/966437","tags":["report"]},{"url":"https://bugzilla.suse.com/966471","tags":["report"]},{"url":"https://bugzilla.suse.com/966693","tags":["report"]},{"url":"https://bugzilla.suse.com/966864","tags":["report"]},{"url":"https://bugzilla.suse.com/966910","tags":["report"]},{"url":"https://bugzilla.suse.com/967802","tags":["report"]},{"url":"https://bugzilla.suse.com/968018","tags":["report"]},{"url":"https://bugzilla.suse.com/968074","tags":["report"]},{"url":"https://bugzilla.suse.com/968206","tags":["report"]},{"url":"https://bugzilla.suse.com/968230","tags":["report"]},{"url":"https://bugzilla.suse.com/968234","tags":["report"]},{"url":"https://bugzilla.suse.com/968253","tags":["report"]},{"url":"https://bugzilla.suse.com/969112","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2384","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-5707","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2734-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2733-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2738-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2737-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2750-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2760-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2759-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5707","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5707","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","status":"published","published":"2015-10-19T10:00:00Z","modified":"2024-08-06T06:59:04.042Z","updated_at":"2026-11-02T14:35:39.846011Z"}],"euvd":[{"id":"EUVD-2015-5654","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","status":"published","published":"2015-10-19T10:00:00Z","modified":"2024-08-06T06:59:04Z","updated_at":"2026-11-03T02:21:58.760301Z"}],"ghsa":[{"id":"GHSA-rfcp-m7v6-h4ff","title":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x...","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","status":"published","published":"2022-05-13T01:26:11Z","modified":"2023-02-01T05:07:43Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:50:35.618049Z"}],"nvd":[{"id":"CVE-2015-5707","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","status":"published","published":"2015-10-19T10:59:05.037Z","modified":"2026-06-17T00:29:37.933Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:03:10.919251Z"}],"osv":[{"id":"CVE-2015-5707","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","status":"published","published":"2015-10-19T10:59:05Z","modified":"2026-04-16T06:20:59.529945129Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-5707","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","status":"published","published":"2015-10-19T10:59:05.037Z","modified":"2026-09-09T06:47:19.541315996Z","updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"DLA-310-1","title":"linux-2.6 - security update","status":"published","published":"2015-09-19T00:00:00Z","modified":"2026-03-09T01:21:20.361551Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-3329-1","title":"linux - security update","status":"published","published":"2015-08-07T00:00:00Z","modified":"2026-03-09T01:19:32.323556Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0386","title":"Updated kernel packages provides 4.1 longterm and fixes security issues","description":"This kernel update provides an upgrade to the upstream 4.1 longterm kernel\nseries, currently based on 4.1.8 and resolves at least the following\nsecurity issues:\n\nIt was found that the Linux kernel's keyring implementation would leak\nmemory when adding a key to a keyring via the add_key() function. A\nlocal attacker could use this flaw to exhaust all available memory on\nthe system. (CVE-2015-1333)\n\nA flaw was found in the Linux kernel where the deletion of a file or\ndirectory could trigger an unmount and reveal data under a mount point.\nThis flaw was inadvertently introduced with the new feature of being able\nto lazily unmount a mount tree when using file system user namespaces.\n(CVE-2015-4176)\n\nA flaw was discovered in the kernel's collect_mounts function. If the kernel\naudit subsystem called collect_mounts to audit an unmounted path, it could\npanic the system. With this flaw, an unprivileged user could call umount\n(MNT_DETACH) to launch a denial-of-service attack. (CVE-2015-4177)\n\nA flaw was found in the Linux kernel which is related to the user namespace\nlazily unmounting file systems. The fs_pin struct has two members (m_list\nand s_list) which are usually initialized on use in the pin_insert_group\nfunction. However, these members might go unmodified; in this case, the\nsystem panics when it attempts to destroy or free them. This flaw could be\nused to launch a denial-of-service attack. (CVE-2015-4178)\n\nA DoS flaw was found for a Linux kernel built for the x86 architecture which\nhad the KVM virtualization support(CONFIG_KVM) enabled. The kernel would be\nvulnerable to a NULL pointer dereference flaw in Linux kernel's\nkvm_apic_has_events() function while doing an ioctl. An unprivileged user\nable to access the \"/dev/kvm\" device could use this flaw to crash the system\nkernel. (CVE-2015-4692)\n\nA flaw was found in the kernel's implementation of the Berkeley Packet\nFilter (BPF). A local attacker could craft BPF code to crash the system\nby creating a situation in which the JIT compiler would fail to correctly\noptimize the JIT image on the last pass. This would lead to the CPU\nexecuting instructions that were not part of the JIT code. (CVE-2015-4700)\n\nThe get_bitmap_file function in drivers/md/md.c in the Linux kernel before\n4.1.6 does not initialize a certain bitmap data structure, which allows\nlocal users to obtain sensitive information from kernel memory via a\nGET_BITMAP_FILE ioctl call. (CVE-2015-5697)\n\nUse-after-free vulnerability in the path_openat function in fs/namei.c in\nthe Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a\ndenial of service or possibly have unspecified other impact via O_TMPFILE\nfilesystem operations that leverage a duplicate cleanup operation.\n(CVE-2015-5706)\n\nIt was discovered that an integer overflow error existed in the SCSIgeneric\n(sg) driver in the Linux kernel. A local attacker with writepermission to a\nSCSI generic device could use this to cause a denial of service (system\ncrash) or potentially escalate their privileges. (CVE-2015-5707)\n\nAdditionally the following packages have been updated to add or improve \nsupport for the 4.1 series kernels: btrfs-progs, iproute2, xtables-addons,\nnvidia304, nvidia340, kernel-firmware-nonfree, radeon-firmware.\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2015-09-30T21:35:18Z","modified":"2026-04-16T06:23:54.800942025Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2015-0390","title":"Updated kernel-linus package provides 4.1 longterm and fixes security issues","description":"This kernel-linus update provides an upgrade to the upstream 4.1 longterm\nkernel series, currently based on 4.1.8 and resolves at least the following\nsecurity issues:\n\nIt was found that the Linux kernel's keyring implementation would leak\nmemory when adding a key to a keyring via the add_key() function. A\nlocal attacker could use this flaw to exhaust all available memory on\nthe system. (CVE-2015-1333)\n\nA flaw was found in the Linux kernel where the deletion of a file or\ndirectory could trigger an unmount and reveal data under a mount point.\nThis flaw was inadvertently introduced with the new feature of being able\nto lazily unmount a mount tree when using file system user namespaces.\n(CVE-2015-4176)\n\nA flaw was discovered in the kernel's collect_mounts function. If the kernel\naudit subsystem called collect_mounts to audit an unmounted path, it could\npanic the system. With this flaw, an unprivileged user could call umount\n(MNT_DETACH) to launch a denial-of-service attack. (CVE-2015-4177)\n\nA flaw was found in the Linux kernel which is related to the user namespace\nlazily unmounting file systems. The fs_pin struct has two members (m_list\nand s_list) which are usually initialized on use in the pin_insert_group\nfunction. However, these members might go unmodified; in this case, the\nsystem panics when it attempts to destroy or free them. This flaw could be\nused to launch a denial-of-service attack. (CVE-2015-4178)\n\nA DoS flaw was found for a Linux kernel built for the x86 architecture which\nhad the KVM virtualization support(CONFIG_KVM) enabled. The kernel would be\nvulnerable to a NULL pointer dereference flaw in Linux kernel's\nkvm_apic_has_events() function while doing an ioctl. An unprivileged user\nable to access the \"/dev/kvm\" device could use this flaw to crash the system\nkernel. (CVE-2015-4692)\n\nA flaw was found in the kernel's implementation of the Berkeley Packet\nFilter (BPF). A local attacker could craft BPF code to crash the system\nby creating a situation in which the JIT compiler would fail to correctly\noptimize the JIT image on the last pass. This would lead to the CPU\nexecuting instructions that were not part of the JIT code. (CVE-2015-4700)\n\nThe get_bitmap_file function in drivers/md/md.c in the Linux kernel before\n4.1.6 does not initialize a certain bitmap data structure, which allows\nlocal users to obtain sensitive information from kernel memory via a\nGET_BITMAP_FILE ioctl call. (CVE-2015-5697)\n\nUse-after-free vulnerability in the path_openat function in fs/namei.c in\nthe Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a\ndenial of service or possibly have unspecified other impact via O_TMPFILE\nfilesystem operations that leverage a duplicate cleanup operation.\n(CVE-2015-5706)\n\nIt was discovered that an integer overflow error existed in the SCSIgeneric\n(sg) driver in the Linux kernel. A local attacker with writepermission to a\nSCSI generic device could use this to cause a denial of service (system\ncrash) or potentially escalate their privileges. (CVE-2015-5707)\n\nFor other changes, see the referenced changelogs:\n","status":"published","published":"2015-10-09T18:47:39Z","modified":"2026-04-16T06:22:39.105102835Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0015","title":"Updated kernel-tmb packages provides 4.1 longterm kernel and fixes security issues","description":"This kernel-tmb update provides an upgrade to the upstream 4.1 longterm\nkernel series, currently based on 4.1.15 and resolves at least the\nfollowing security issues:\n\nIt was found that the Linux kernel's keyring implementation would leak\nmemory when adding a key to a keyring via the add_key() function. A\nlocal attacker could use this flaw to exhaust all available memory on\nthe system. (CVE-2015-1333)\n\nA flaw was found in the Linux kernel where the deletion of a file or\ndirectory could trigger an unmount and reveal data under a mount point.\nThis flaw was inadvertently introduced with the new feature of being able\nto lazily unmount a mount tree when using file system user namespaces.\n(CVE-2015-4176)\n\nA flaw was discovered in the kernel's collect_mounts function. If the kernel\naudit subsystem called collect_mounts to audit an unmounted path, it could\npanic the system. With this flaw, an unprivileged user could call umount\n(MNT_DETACH) to launch a denial-of-service attack. (CVE-2015-4177)\n\nA flaw was found in the Linux kernel which is related to the user namespace\nlazily unmounting file systems. The fs_pin struct has two members (m_list\nand s_list) which are usually initialized on use in the pin_insert_group\nfunction. However, these members might go unmodified; in this case, the\nsystem panics when it attempts to destroy or free them. This flaw could be\nused to launch a denial-of-service attack. (CVE-2015-4178)\n\nA DoS flaw was found for a Linux kernel built for the x86 architecture which\nhad the KVM virtualization support(CONFIG_KVM) enabled. The kernel would be\nvulnerable to a NULL pointer dereference flaw in Linux kernel's\nkvm_apic_has_events() function while doing an ioctl. An unprivileged user\nable to access the \"/dev/kvm\" device could use this flaw to crash the system\nkernel. (CVE-2015-4692)\n\nA flaw was found in the kernel's implementation of the Berkeley Packet\nFilter (BPF). A local attacker could craft BPF code to crash the system\nby creating a situation in which the JIT compiler would fail to correctly\noptimize the JIT image on the last pass. This would lead to the CPU\nexecuting instructions that were not part of the JIT code. (CVE-2015-4700)\n\nThe virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel\nbefore 4.2 attempts to support a FRAGLIST feature without proper memory\nallocation, which allows guest OS users to cause a denial of service (buffer\noverflow and memory corruption) via a crafted sequence of fragmented packets.\n(CVE-2015-5156)\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash) (CVE-2015-5257).\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"alignment\ncheck\" (#AC) exceptions. This causes the microcode to enter an infinite loop\nwhere the core never receives another interrupt. The host kernel panics due\nto this effect (CVE-2015-5307).\n\nThe get_bitmap_file function in drivers/md/md.c in the Linux kernel before\n4.1.6 does not initialize a certain bitmap data structure, which allows\nlocal users to obtain sensitive information from kernel memory via a\nGET_BITMAP_FILE ioctl call. (CVE-2015-5697)\n\nUse-after-free vulnerability in the path_openat function in fs/namei.c in\nthe Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a\ndenial of service or possibly have unspecified other impact via O_TMPFILE\nfilesystem operations that leverage a duplicate cleanup operation.\n(CVE-2015-5706)\n\nIt was discovered that an integer overflow error existed in the SCSIgeneric\n(sg) driver in the Linux kernel. A local attacker with writepermission to a\nSCSI generic device could use this to cause a denial of service (system\ncrash) or potentially escalate their privileges. (CVE-2015-5707)\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe key_gc_unused_keys function in security/keys/gc.c in the Linux kernel\nthrough 4.2.6 allows local users to cause a denial of service (OOPS) via\ncrafted keyctl commands (CVE-2015-7872).\n\nThe vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in\nthe Linux kernel through 4.3.3 does not initialize a certain structure\nmember, which allows local users to obtain sensitive information from\nkernel memory via a crafted application (CVE-2015-7884).\n\nThe dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the\nLinux kernel through 4.3.3 does not initialize a certain structure member,\nwhich allows local users to obtain sensitive information from kernel memory\nvia a crafted application (CVE-2015-7885).\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"debug check\"\n(#DB) exceptions. This causes the microcode to enter an infinite loop where\nthe core never receives another interrupt. The host kernel panics due to\nthis effect (CVE-2015-8104).\n\nFelix Wilhelm discovered a race condition in the Xen paravirtualized\ndrivers which can cause double fetch vulnerabilities. An attacker in the\nparavirtualized guest could exploit this flaw to cause a denial of service\n(crash the host) or potentially execute arbitrary code on the host\n(CVE-2015-8550 / XSA-155).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service (NULL dereference) on the host\n(CVE-2015-8551 / XSA-157).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service by flooding the logging system\nwith WARN() messages causing the initial domain to exhaust disk space\n(CVE-2015-8552 / XSA-157).\n\nThe ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel\nthrough 4.3.3 attempts to merge distinct setattr operations, which allows\nlocal users to bypass intended access restrictions and modify the\nattributes of arbitrary overlay files via a crafted application\n(CVE-2015-8660).\n\nFor other upstream fixes, see the referenced changelogs.\n\nOther fixes in this update:\n* improve ath10k (QCA99X0, QCA988X, QCA6174) support (mga#16915)\n* silence a harmless warning on 32bit non-dt hardware (mga#17010)\n* fix regression with AlpsPS/2 ALPS DualPoint TouchPad of a Dell\n  Latitude D600 (mga#17034)\n","status":"published","published":"2016-01-14T01:44:39Z","modified":"2026-04-16T06:23:47.399673436Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"SUSE-SU-2015:1478-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Server 11 SP2 LTSS kernel was updated to\nreceive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code.\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c in the Linux kernel\n  allowed guest OS users to obtain sensitive information from uninitialized\n  locations in host OS kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access\n  to PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bnc#919463).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: CVE-2015-1420: Race condition in the handle_to_path\n  function in fs/fhandle.c in the Linux kernel allowed local users to bypass\n  intended size restrictions and trigger read operations on additional\n  memory locations by changing the handle_bytes value of a file handle\n  during the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel did not properly consider the side effects\n  of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls,\n  which allowed local users to cause a denial of service (system crash)\n  or possibly gain privileges via a crafted application, aka an 'I/O vector\n  array overrun' (bnc#933429).\n- CVE-2015-3331: The __driver_rfc4106_decrypt function in\n  arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly\n  determine the memory locations used for encrypted data, which allowed\n  context-dependent attackers to cause a denial of service (buffer overflow\n  and system crash) or possibly execute arbitrary code by triggering a\n  crypto API call, as demonstrated by use of a libkcapi test program with\n  an AF_ALG(aead) socket (bnc#927257).\n- CVE-2015-2922: The ndisc_router_discovery function in net/ipv6/ndisc.c\n  in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack\n  in the Linux kernel allowed remote attackers to reconfigure a hop-limit\n  setting via a small hop_limit value in a Router Advertisement (RA)\n  message (bnc#922583).\n- CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel used an\n  incorrect data type in a sysctl table, which allowed local users to\n  obtain potentially sensitive information from kernel memory or possibly\n  have unspecified other impact by accessing a sysctl entry (bnc#919007).\n- CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the\n  Linux kernel did not initialize a certain list data structure during an\n  unhash operation, which allowed local users to gain privileges or cause\n  a denial of service (use-after-free and system crash) by leveraging the\n  ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or\n  IPPROTO_ICMPV6 protocol, and then making a connect system call after a\n  disconnect (bnc#929525).\n- CVE-2014-8086: Race condition in the ext4_file_write_iter function\n  in fs/ext4/file.c in the Linux kernel allowed local users to cause a\n  denial of service (file unavailability) via a combination of a write\n  action and an F_SETFL fcntl operation for the O_DIRECT flag (bnc#900881).\n- CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel\n  did not properly restrict use of User Verbs for registration of memory\n  regions, which allowed local users to access arbitrary physical memory\n  locations, and consequently cause a denial of service (system crash)\n  or gain privileges, by leveraging permissions on a uverbs device under\n  /dev/infiniband/ (bnc#914742).\n- CVE-2014-9683: Off-by-one error in the ecryptfs_decode_from_filename\n  function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux\n  kernel allowed local users to cause a denial of service (buffer overflow\n  and system crash) or possibly gain privileges via a crafted filename\n  (bnc#918333).\n- CVE-2015-2042: net/rds/sysctl.c in the Linux kernel used an incorrect\n  data type in a sysctl table, which allowed local users to obtain\n  potentially sensitive information from kernel memory or possibly have\n  unspecified other impact by accessing a sysctl entry (bnc#919018).\n- CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update\n  function in net/sctp/associola.c in the Linux kernel allowed remote\n  attackers to cause a denial of service (slab corruption and panic) or\n  possibly have unspecified other impact by triggering an INIT collision\n  that leads to improper handling of shared-key data (bnc#915577).\n\nThe following non-security bugs were fixed:\n- HID: add ALWAYS_POLL quirk for a Logitech 0xc007 (bnc#931474).\n- HID: add HP OEM mouse to quirk ALWAYS_POLL (bnc#931474).\n- HID: add quirk for PIXART OEM mouse used by HP (bnc#931474).\n- HID: usbhid: add always-poll quirk (bnc#931474).\n- HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen.\n- HID: usbhid: fix PIXART optical mouse (bnc#931474).\n- HID: usbhid: more mice with ALWAYS_POLL (bnc#931474).\n- HID: usbhid: yet another mouse with ALWAYS_POLL (bnc#931474).\n- bnx2x: Fix kdump when iommu=on (bug#921769).\n- cifs: fix use-after-free bug in find_writable_file (bnc#909477).\n- coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bsc#904671, bsc#929360).\n- dm: fixed that LVM merge snapshot of root logical volume were not working (bsc#928801)\n- deal with deadlock in d_walk fix (bnc#929148, bnc#929283).\n- e1000: do not enable dma receives until after dma address has been setup (bsc#821931).\n- fsnotify: Fix handling of renames in audit (bnc#915200).\n- inet: add a redirect generation id in inetpeer (bnc#860593).\n- inetpeer: initialize -\u0026gt;redirect_genid in inet_getpeer() (bnc#860593).\n- kabi: hide bnc#860593 changes of struct inetpeer_addr_base (bnc#860593).\n- kernel: fix data corruption when reading /proc/sysinfo (bsc#891087, bsc#937986, LTC#114480).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- time, ntp: Do not update time_state in middle of leap second (bsc#912916).\n- s390-3215-tty-close-crash.patch: kernel: 3215 tty close crash (bsc#916010, LTC#120873).\n- s390-3215-tty-close-race.patch: kernel: 3215 console crash (bsc#916010, LTC#94302).\n- s390-3215-tty-hang.patch: Renamed from patches.arch/s390-tty-hang.patch.\n- s390-3215-tty-hang.patch: Update references (bnc#898693, bnc#897995, LTC#114562).\n- s390-dasd-retry-partition-detection.patch: s390/dasd: retry partition detection (bsc#916010, LTC#94302).\n- s390-dasd-retry-partition-detection.patch: Update references (bsc#916010, LTC#120565).\n- s390-sclp-tty-refcount.patch: kernel: sclp console tty reference counting (bsc#916010, LTC#115466).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi/sg: sg_start_req(): make sure that there is not too many elements in iovec (bsc#940338).\n- x86, xsave: remove thread_has_fpu() bug check in __sanitize_i387_state() (bsc#904671, bsc#929360).\n- x86-mm-send-tlb-flush-ipis-to-online-cpus-only.patch: x86, mm: Send tlb flush IPIs to online cpus only (bnc#798406).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/reboot: Fix a warning message triggered by stop_other_cpus() (bnc#930284).\n- xen: Correctly re-enable interrupts in xen_spin_wait() (bsc#879878, bsc#908870).\n- xfs: prevent deadlock trying to cover an active log (bsc#917093).\n  ","status":"published","published":"2015-08-20T15:22:44Z","modified":"2026-02-04T04:09:53.876805Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1592-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes.\n\nThe following feature was added for RT:\n- FATE#317131: The SocketCAN (Peak PCI) driver was added for CAN bus support.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-09-09T17:05:11Z","modified":"2025-05-02T04:04:15.298019Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1611-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-08-21T19:44:59Z","modified":"2026-02-04T02:19:26.768156Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1678-1","title":"Security update for kernel-source","description":"The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various\nsecurity and bugfixes.\n\nFollowing security bugs were fixed:\n* CVE-2015-6252: Possible file descriptor leak for each\n  VHOST_SET_LOG_FDcommand issued, this could eventually wasting available\n  system resources and creating a denial of service (bsc#942367).\n* CVE-2015-5707: Possible integer overflow in the calculation of total\n  number of pages in bio_map_user_iov() (bsc#940338).\n* CVE-2015-5364: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 do not properly consider yielding a\n  processor, which allowed remote attackers to cause a denial of service\n  (system hang) via incorrect checksums within a UDP packet flood\n  (bsc#936831).\n* CVE-2015-5366: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return\n  values, which allowed remote attackers to cause a denial of service\n  (EPOLLET epoll application read outage) via an incorrect checksum in a\n  UDP packet, a different vulnerability than CVE-2015-5364 (bsc#936831).\n* CVE-2015-1420: Race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel through 3.19.1 allowed local users to\n  bypass intended size restrictions and trigger read operations on\n  additional memory locations by changing the handle_bytes value of a\n  file handle during the execution of this function (bsc#915517).\n* CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel before 3.16 do not properly consider the\n  side effects of failed __copy_to_user_inatomic and\n  __copy_from_user_inatomic calls, which allows local users to cause a\n  denial of service (system crash) or possibly gain privileges via a\n  crafted application, aka an 'I/O' vector array overrun. (bsc#933429)\n* CVE-2015-2150: Xen 3.3.x through 4.5.x and the Linux kernel through\n  3.19.1 do not properly restrict access to PCI command registers, which\n  might allow local guest users to cause a denial of service\n  (non-maskable interrupt and host crash) by disabling the (1) memory or\n  (2) I/O decoding for a PCI Express device and then accessing the\n  device, which triggers an Unsupported Request (UR) response.\n  (bsc#919463)\n* CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel before\n  3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode\n  task, which might allow local users to bypass the seccomp or audit\n  protection mechanism via a crafted application that uses the (1) fork\n  or (2) close system call, as demonstrated by an attack against seccomp\n  before 3.16. (bsc#926240)\n* CVE-2015-4700: The bpf_int_jit_compile function in\n  arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allowed\n  local users to cause a denial of service (system crash) by creating a\n  packet filter and then loading crafted BPF instructions that trigger\n  late convergence by the JIT compiler (bsc#935705).\n* CVE-2015-4167: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.19.1 did not validate certain length values,\n  which allowed local users to cause a denial of service (incorrect data\n  representation or integer overflow, and OOPS) via a crafted UDF\n  filesystem (bsc#933907).\n* CVE-2015-0777: drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0\n  (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as\n  used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions,\n  allows guest OS users to obtain sensitive information from\n  uninitialized locations in host OS kernel memory via unspecified\n  vectors. (bsc#917830)\n* CVE-2014-9728: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not validate certain lengths, which allowed local\n  users to cause a denial of service (buffer over-read and system crash)\n  via a crafted filesystem image, related to fs/udf/inode.c and\n  fs/udf/symlink.c (bsc#933904).\n* CVE-2014-9730: The udf_pc_to_char function in fs/udf/symlink.c in the\n  Linux kernel before 3.18.2 relies on component lengths that are unused,\n  which allowed local users to cause a denial of service (system crash)\n  via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9729: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.18.2 did not ensure a certain data-structure size\n  consistency, which allowed local users to cause a denial of service\n  (system crash) via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9731: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not ensure that space is available for storing a\n  symlink target's name along with a trailing \\0 character, which allowed\n  local users to obtain sensitive information via a crafted filesystem\n  image, related to fs/udf/symlink.c and fs/udf/unicode.c (bsc#933896).\n\nThe following non-security bugs were fixed:\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942350).\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942404).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942404).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942404).\n- Btrfs: fix hang when failing to submit bio of directIO (bnc#942688).\n- Btrfs: fix memory corruption on failure to submit bio for direct IO (bnc#942688).\n- Btrfs: fix put dio bio twice when we submit dio bio fail (bnc#942688).\n- DRM/I915: Add enum hpd_pin to intel_encoder (bsc#942938).\n- DRM/i915: Convert HPD interrupts to make use of HPD pin assignment in encoders (v2) (bsc#942938).\n- DRM/i915: Get rid of the 'hotplug_supported_mask' in struct drm_i915_private (bsc#942938).\n- DRM/i915: Remove i965_hpd_irq_setup (bsc#942938).\n- DRM/i915: Remove valleyview_hpd_irq_setup (bsc#942938).\n- Ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- IB/iser: Add Discovery support (bsc#923002).\n- IB/iser: Move informational messages from error to info level (bsc#923002).\n- NFS: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- NFSD: Fix nfsv4 opcode decoding error (bsc#935906).\n- NFSv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- PCI: Disable Bus Master only on kexec reboot (bsc#920110).\n- PCI: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- PCI: Do not try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- PCI: Lock down register access when trusted_kernel is true (fate#314486, bnc#884333)(bsc#923431).\n- PCI: disable Bus Master on PCI device shutdown (bsc#920110).\n- USB: xhci: Reset a halted endpoint immediately when we encounter a stall (bnc#933721).\n- USB: xhci: do not start a halted endpoint before its new dequeue is set (bnc#933721).\n- Apparmor: fix file_permission if profile is updated (bsc#917968).\n- block: Discard bios do not have data (bsc#928988).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/i915: (re)init HPD interrupt storm statistics (bsc#942938).\n- drm/i915: Add HPD IRQ storm detection (v5) (bsc#942938).\n- drm/i915: Add Reenable Timer to turn Hotplug Detection back on (v4) (bsc#942938).\n- drm/i915: Add bit field to record which pins have received HPD events (v3) (bsc#942938).\n- drm/i915: Add messages useful for HPD storm detection debugging (v2) (bsc#942938).\n- drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt (bsc#942938).\n- drm/i915: Disable HPD interrupt on pin when irq storm is detected (v3) (bsc#942938).\n- drm/i915: Do not WARN nor handle unexpected hpd interrupts on gmch platforms (bsc#942938).\n- drm/i915: Enable hotplug interrupts after querying hw capabilities (bsc#942938).\n- drm/i915: Fix hotplug interrupt enabling for SDVOC (bsc#942938).\n- drm/i915: Fix up sdvo hpd pins for i965g/gm (bsc#942938).\n- drm/i915: Make hpd arrays big enough to avoid out of bounds access (bsc#942938).\n- drm/i915: Mask out the HPD irq bits before setting them individually (bsc#942938).\n- drm/i915: Only print hotplug event message when hotplug bit is set (bsc#942938).\n- drm/i915: Only reprobe display on encoder which has received an HPD event (v2) (bsc#942938).\n- drm/i915: Queue reenable timer also when enable_hotplug_processing is false (bsc#942938).\n- drm/i915: Remove pch_rq_mask from struct drm_i915_private (bsc#942938).\n- drm/i915: Use an interrupt save spinlock in intel_hpd_irq_handler() (bsc#942938).\n- drm/i915: WARN_ONCE() about unexpected interrupts for all chipsets (bsc#942938).\n- drm/i915: assert_spin_locked for pipestat interrupt enable/disable (bsc#942938).\n- drm/i915: clear crt hotplug compare voltage field before setting (bsc#942938).\n- drm/i915: close tiny race in the ilk pcu even interrupt setup (bsc#942938).\n- drm/i915: fix hotplug event bit tracking (bsc#942938).\n- drm/i915: fix hpd interrupt register locking (bsc#942938).\n- drm/i915: fix hpd work vs. flush_work in the pageflip code deadlock (bsc#942938).\n- drm/i915: fix locking around ironlake_enable|disable_display_irq (bsc#942938).\n- drm/i915: fold the hpd_irq_setup call into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the no-irq check into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the queue_work into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: implement ibx_hpd_irq_setup (bsc#942938).\n- drm/i915: s/hotplug_irq_storm_detect/intel_hpd_irq_handler/ (bsc#942938).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails (FATE#317582).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (FATE#317582).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (FATE#317582, bnc#883380, bsc#935572).\n- ehci-pci: enable interrupt on BayTrail (bnc926007).\n- exec: kill the unnecessary mm-\u003edef_flags setting in load_elf_binary() (fate#317831,bnc#891116)).\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637). \n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hv_storvsc: use small sg_tablesize on x86 (bnc#937256).\n- ibmveth: Add GRO support (bsc#935055).\n- ibmveth: Add support for Large Receive Offload (bsc#935055).\n- ibmveth: Add support for TSO (bsc#935055).\n- ibmveth: add support for TSO6.\n- ibmveth: change rx buffer default allocation for CMO (bsc#935055).\n- igb: do not reuse pages with pfmemalloc flag fix (bnc#920016).\n- inotify: Fix nested sleeps in inotify_read() (bsc#940925).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipv6: probe routes asynchronous in rt6_probe (bsc#936118).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kabi: wrapper include file with __GENKSYMS__ check to avoid kabi change (bsc920110).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn.\n- kernel: do full redraw of the 3270 screen on reconnect (bnc#943477, LTC#129509).\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- libiscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#938485).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm, THP: do not hold mmap_sem in khugepaged when allocating THP (VM Performance).\n- mm, mempolicy: remove duplicate code (VM Functionality, bnc#931620).\n- mm, thp: fix collapsing of hugepages on madvise (VM Functionality).\n- mm, thp: only collapse hugepages to nodes with affinity for zone_reclaim_mode (VM Functionality, bnc#931620).\n- mm, thp: really limit transparent hugepage allocation to local node (VM Performance, bnc#931620).\n- mm, thp: respect MPOL_PREFERRED policy with non-local node (VM Performance, bnc#931620).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm/mempolicy.c: merge alloc_hugepage_vma to alloc_pages_vma (VM Performance, bnc#931620).\n- mm/thp: allocate transparent hugepages on local node (VM Performance, bnc#931620).\n- mm: make page pfmemalloc check more robust (bnc#920016).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- mm: thp: khugepaged: add policy for finding target node (VM Functionality, bnc#931620).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- netfilter: nf_conntrack_proto_sctp: minimal multihoming support (bsc#932350).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (FATE#309111, bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler (bsc#929142).\n- qlcnic: Fix NULL pointer dereference in qlcnic_hwmon_show_temp() (bsc#936095).\n- r8169: remember WOL preferences on driver load (bsc#942305).\n- s390/dasd: fix kernel panic when alias is set offline (bnc#940966, LTC#128595).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi: Correctly set the scsi host/msg/status bytes (bnc#933936).\n- scsi: fix scsi_error_handler vs. scsi_host_dev_release race (bnc#942204).\n- scsi: Moved iscsi kabi patch to patches.kabi (bsc#923002)\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: kabi: allow iscsi disocvery session support (bsc#923002).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi_transport_iscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- sg_start_req(): make sure that there's not too many elements in iovec (bsc#940338).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- supported.conf: enable sch_mqprio (bsc#932882)\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb (bnc#933721).\n- usb: xhci: handle Config Error Change (CEC) in xhci driver (bnc#933721).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86-64: Do not apply destructive erratum workaround on unaffected CPUs (bsc#929076).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/tsc: Change Fast TSC calibration failed from error to info (bnc#942605).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: fix problem when using md+XFS under high load (bnc#925705).\n- xhci: Allocate correct amount of scratchpad buffers (bnc#933721).\n- xhci: Do not enable/disable RWE on bus suspend/resume (bnc#933721).\n- xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256 (bnc#933721).\n- xhci: Treat not finding the event_seg on COMP_STOP the same as COMP_STOP_INVAL (bnc#933721).\n- xhci: Workaround for PME stuck issues in Intel xhci (bnc#933721).\n- xhci: do not report PLC when link is in internal resume state (bnc#933721).\n- xhci: fix reporting of 0-sized URBs in control endpoint (bnc#933721).\n- xhci: report U3 when link is in resume state (bnc#933721).\n- xhci: rework cycle bit checking for new dequeue pointers (bnc#933721).\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936921, bnc#936925, LTC#126491).","status":"published","published":"2015-09-08T16:29:34Z","modified":"2026-02-04T03:45:14.157452Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2084-1","title":"Security update for Linux Kernel Live Patch 5","description":"\nThis kernel live patch for Linux Kernel 3.12.43-52.6.1 fixes two security issues:\n\n- CVE-2015-7613: A race condition in the IPC object implementation in\n  the Linux kernel allowed local users to gain privileges by triggering an\n  ipc_addid call that leads to uid and gid comparisons against uninitialized\n  data, related to msg.c, shm.c, and util.c. (bsc#948701 bsc#948536)\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request. (bsc#940342 bsc#940338)\n","status":"published","published":"2015-11-24T14:48:34Z","modified":"2026-02-04T04:21:59.525497Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2085-1","title":"Security update for Linux Kernel Live Patch 4","description":"\nThis kernel live patch for Linux Kernel 3.12.39-47.1 fixes two security issues:\n\n- CVE-2015-7613: A race condition in the IPC object implementation in\n  the Linux kernel allowed local users to gain privileges by triggering an\n  ipc_addid call that leads to uid and gid comparisons against uninitialized\n  data, related to msg.c, shm.c, and util.c. (bsc#948701 bsc#948536)\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request. (bsc#940342 bsc#940338)\n","status":"published","published":"2015-11-24T14:48:07Z","modified":"2026-02-04T03:39:20.194902Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2086-1","title":"Security update for Linux Kernel Live Patch 7","description":"\nThis kernel live patch for Linux Kernel 3.12.44-52.18.1 fixes two security issues:\n\n- CVE-2015-7613: A race condition in the IPC object implementation in\n  the Linux kernel allowed local users to gain privileges by triggering an\n  ipc_addid call that leads to uid and gid comparisons against uninitialized\n  data, related to msg.c, shm.c, and util.c. (bsc#948701 bsc#948536)\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request. (bsc#940342 bsc#940338)\n","status":"published","published":"2015-11-24T14:48:45Z","modified":"2026-02-04T03:01:40.569994Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2087-1","title":"Security update for Linux Kernel Live Patch 6","description":"\nThis kernel live patch for Linux Kernel 3.12.44-52.10.1 fixes two security issues:\n\n- CVE-2015-7613: A race condition in the IPC object implementation in\n  the Linux kernel allowed local users to gain privileges by triggering an\n  ipc_addid call that leads to uid and gid comparisons against uninitialized\n  data, related to msg.c, shm.c, and util.c. (bsc#948701 bsc#948536)\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request. (bsc#940342 bsc#940338)\n","status":"published","published":"2015-11-24T14:48:39Z","modified":"2026-02-04T04:31:13.540912Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2089-1","title":"Security update for Linux Kernel Live Patch 1","description":"\nThis kernel live patch for Linux Kernel 3.12.32-33.1 fixes two security issues:\n\n- CVE-2015-7613: A race condition in the IPC object implementation in\n  the Linux kernel allowed local users to gain privileges by triggering an\n  ipc_addid call that leads to uid and gid comparisons against uninitialized\n  data, related to msg.c, shm.c, and util.c. (bsc#948701 bsc#948536)\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request. (bsc#940342 bsc#940338)\n","status":"published","published":"2015-11-24T14:47:01Z","modified":"2026-02-04T02:49:49.504388Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2090-1","title":"Security update for Linux Kernel Live Patch 3","description":"\nThis kernel live patch for Linux Kernel 3.12.38-44.1 fixes two security issues:\n\n- CVE-2015-7613: A race condition in the IPC object implementation in\n  the Linux kernel allowed local users to gain privileges by triggering an\n  ipc_addid call that leads to uid and gid comparisons against uninitialized\n  data, related to msg.c, shm.c, and util.c. (bsc#948701 bsc#948536)\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request. (bsc#940342 bsc#940338)\n","status":"published","published":"2015-11-24T14:47:59Z","modified":"2026-02-04T02:30:35.899669Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2091-1","title":"Security update for Linux Kernel Live Patch 2","description":"\nThis kernel live patch for Linux Kernel 3.12.36-38.1 fixes two security issues:\n\n- CVE-2015-7613: A race condition in the IPC object implementation in\n  the Linux kernel allowed local users to gain privileges by triggering an\n  ipc_addid call that leads to uid and gid comparisons against uninitialized\n  data, related to msg.c, shm.c, and util.c. (bsc#948701 bsc#948536)\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request. (bsc#940342 bsc#940338)\n","status":"published","published":"2015-11-24T14:47:13Z","modified":"2026-02-04T04:32:08.240347Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2167-1","title":"Security update for kernel-source-rt","description":"The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to version\n3.0.101.rt130-45.1 to receive various security and bugfixes.\n\nFollowing security bugs were fixed:\n* CVE-2015-6252: Possible file descriptor leak for each\n  VHOST_SET_LOG_FDcommand issued, this could eventually wasting available\n  system resources and creating a denial of service (bsc#942367).\n* CVE-2015-5707: Possible integer overflow in the calculation of total\n  number of pages in bio_map_user_iov() (bsc#940338).\n* CVE-2015-5364: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 do not properly consider yielding a\n  processor, which allowed remote attackers to cause a denial of service\n  (system hang) via incorrect checksums within a UDP packet flood\n  (bnc#936831).\n* CVE-2015-5366: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return\n  values, which allowed remote attackers to cause a denial of service\n  (EPOLLET epoll application read outage) via an incorrect checksum in a\n  UDP packet, a different vulnerability than CVE-2015-5364 (bnc#936831).\n* CVE-2015-1420: Race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel through 3.19.1 allowed local users to\n  bypass intended size restrictions and trigger read operations on\n  additional memory locations by changing the handle_bytes value of a\n  file handle during the execution of this function (bnc#915517).\n* CVE-2015-4700: The bpf_int_jit_compile function in\n  arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allowed\n  local users to cause a denial of service (system crash) by creating a\n  packet filter and then loading crafted BPF instructions that trigger\n  late convergence by the JIT compiler (bnc#935705).\n* CVE-2015-5697: The get_bitmap_file function in drivers/md/md.c in the\n  Linux kernel before 4.1.6 does not initialize a certain bitmap data\n  structure, which allows local users to obtain sensitive information\n  from kernel memory via a GET_BITMAP_FILE ioctl call. (bnc#939994)\n\nThe following non-security bugs were fixed:\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942350).\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942404).\n- Btrfs: check if previous transaction aborted to avoid fs corruption\n  (bnc#942350).\n- Btrfs: check if previous transaction aborted to avoid fs corruption\n  (bnc#942404).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption\n  (bnc#942350).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption\n  (bnc#942404).\n- Btrfs: fix hang when failing to submit bio of directIO (bnc#942688).\n- Btrfs: fix memory corruption on failure to submit bio for direct IO\n  (bnc#942688).\n- Btrfs: fix put dio bio twice when we submit dio bio fail (bnc#942688).\n- DRM/I915: Add enum hpd_pin to intel_encoder (bsc#942938).\n- DRM/i915: Convert HPD interrupts to make use of HPD pin assignment in\n  encoders (v2) (bsc#942938).\n- DRM/i915: Get rid if the 'hotplug_supported_mask' in struct\n  drm_i915_private (bsc#942938).\n- DRM/i915: Remove i965_hpd_irq_setup (bsc#942938).\n- DRM/i915: Remove valleyview_hpd_irq_setup (bsc#942938).\n- CIFS: Fix missing crypto allocation (bnc#937402).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- IB/iser: Add Discovery support (bsc#923002).\n- IB/iser: Move informational messages from error to info level\n  (bsc#923002).\n- SCSI: Moved iscsi kabi patch to patches.kabi (bsc#923002)\n- SCSI: kabi: allow iscsi disocvery session support (bsc#923002).\n- SCSI: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- SCSI: fix scsi_error_handler vs. scsi_host_dev_release race\n  (bnc#942204).\n- SCSI: scsi_error: add missing case statements in\n  scsi_decide_disposition() (bsc#920733).\n- SCSI: scsi_transport_iscsi: Exporting new attrs for iscsi session and\n  connection in sysfs (bsc#923002).\n- NFSD: Fix nfsv4 opcode decoding error (bsc#935906).\n- NFSv4: Minor cleanups for nfs4_handle_exception and\n  nfs4_async_handle_error (bsc#939910).\n- New patches: patches.fixes/hrtimer-Prevent-timer-interrupt-DoS.patch\n- PCI: Disable Bus Master only on kexec reboot (bsc#920110).\n- PCI: Disable Bus Master unconditionally in pci_device_shutdown()\n  (bsc#920110).\n- PCI: Do not try to disable Bus Master on disconnected PCI devices\n  (bsc#920110).\n- PCI: Lock down register access when trusted_kernel is true (bnc#884333,\n  bsc#923431).\n- PCI: disable Bus Master on PCI device shutdown (bsc#920110).\n- Set hostbyte status in scsi_check_sense() (bsc#920733).\n- USB: xhci: Reset a halted endpoint immediately when we encounter a\n  stall (bnc#933721).\n- USB: xhci: do not start a halted endpoint before its new dequeue is set\n  (bnc#933721).\n- apparmor: fix file_permission if profile is updated (bsc#917968).\n- drm/cirrus: do not attempt to acquire a reservation while in an\n  interrupt handler (bsc#935572).\n- drm/i915: (re)init HPD interrupt storm statistics (bsc#942938).\n- drm/i915: Add HPD IRQ storm detection (v5) (bsc#942938).\n- drm/i915: Add Reenable Timer to turn Hotplug Detection back on (v4)\n  (bsc#942938).\n- drm/i915: Add bit field to record which pins have received HPD events\n  (v3) (bsc#942938).\n- drm/i915: Add messages useful for HPD storm detection debugging (v2)\n  (bsc#942938).\n- drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt\n  (bsc#942938).\n- drm/i915: Disable HPD interrupt on pin when irq storm is detected (v3)\n  (bsc#942938).\n- drm/i915: Do not WARN nor handle unexpected hpd interrupts on gmch\n  platforms (bsc#942938).\n- drm/i915: Enable hotplug interrupts after querying hw capabilities\n  (bsc#942938).\n- drm/i915: Fix hotplug interrupt enabling for SDVOC (bsc#942938).\n- drm/i915: Fix up sdvo hpd pins for i965g/gm (bsc#942938).\n- drm/i915: Make hpd arrays big enough to avoid out of bounds access\n  (bsc#942938).\n- drm/i915: Mask out the HPD irq bits before setting them individually\n  (bsc#942938).\n- drm/i915: Only print hotplug event message when hotplug bit is set\n  (bsc#942938).\n- drm/i915: Only reprobe display on encoder which has received an HPD\n  event (v2) (bsc#942938).\n- drm/i915: Queue reenable timer also when enable_hotplug_processing is\n  false (bsc#942938).\n- drm/i915: Remove pch_rq_mask from struct drm_i915_private (bsc#942938).\n- drm/i915: Use an interrupt save spinlock in intel_hpd_irq_handler()\n  (bsc#942938).\n- drm/i915: WARN_ONCE() about unexpected interrupts for all chipsets\n  (bsc#942938).\n- drm/i915: assert_spin_locked for pipestat interrupt enable/disable\n  (bsc#942938).\n- drm/i915: clear crt hotplug compare voltage field before setting\n  (bsc#942938).\n- drm/i915: close tiny race in the ilk pcu even interrupt setup\n  (bsc#942938).\n- drm/i915: fix hotplug event bit tracking (bsc#942938).\n- drm/i915: fix hpd interrupt register locking (bsc#942938).\n- drm/i915: fix hpd work vs. flush_work in the pageflip code deadlock\n  (bsc#942938).\n- drm/i915: fix locking around ironlake_enable|disable_display_irq\n  (bsc#942938).\n- drm/i915: fold the hpd_irq_setup call into intel_hpd_irq_handler\n  (bsc#942938).\n- drm/i915: fold the no-irq check into intel_hpd_irq_handler\n  (bsc#942938).\n- drm/i915: fold the queue_work into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: implement ibx_hpd_irq_setup (bsc#942938).\n- drm/i915: s/hotplug_irq_storm_detect/intel_hpd_irq_handler/\n  (bsc#942938).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- ehci-pci: enable interrupt on BayTrail (bnc926007).\n- exec: kill the unnecessary mm-\u0026gt;def_flags setting in\n  load_elf_binary() (bnc#891116).\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u0026gt;pinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES\n  (bnc#930092).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hv_storvsc: use small sg_tablesize on x86 (bnc#937256).\n- ibmveth: Add GRO support (bsc#935055).\n- ibmveth: Add support for Large Receive Offload (bsc#935055).\n- ibmveth: Add support for TSO (bsc#935055).\n- ibmveth: add support for TSO6.\n- ibmveth: change rx buffer default allocation for CMO (bsc#935055).\n- igb: do not reuse pages with pfmemalloc flag fix (bnc#920016).\n- inotify: Fix nested sleeps in inotify_read() (bsc#940925).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipv6: probe routes asynchronous in rt6_probe (bsc#936118).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned\n  (bsc#927355).\n- kabi: patches.fixes/mm-make-page-pfmemalloc-check-more-robust.patch\n  (bnc#920016).\n- kabi: wrapper include file with __GENKSYMS__ check to avoid kabi change\n  (bsc920110).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: do full redraw of the 3270 screen on reconnect (bnc#943477,\n  LTC#129509).\n- libiscsi: Exporting new attrs for iscsi session and connection in sysfs\n  (bsc#923002).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#938485).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm, THP: do not hold mmap_sem in khugepaged when allocating THP (VM\n  Performance).\n- mm, mempolicy: remove duplicate code (VM Functionality, bnc#931620).\n- mm, thp: fix collapsing of hugepages on madvise (VM Functionality).\n- mm, thp: only collapse hugepages to nodes with affinity for\n  zone_reclaim_mode (VM Functionality, bnc#931620).\n- mm, thp: really limit transparent hugepage allocation to local node (VM\n  Performance, bnc#931620).\n- mm, thp: respect MPOL_PREFERRED policy with non-local node (VM\n  Performance, bnc#931620).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address()\n  (bnc#929143).\n- mm/mempolicy.c: merge alloc_hugepage_vma to alloc_pages_vma (VM\n  Performance, bnc#931620).\n- mm/thp: allocate transparent hugepages on local node (VM Performance,\n  bnc#931620).\n- mm: make page pfmemalloc check more robust (bnc#920016).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- mm: thp: khugepaged: add policy for finding target node (VM\n  Functionality, bnc#931620).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs\n  (bsc#927355).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference\n  (bsc#867362).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- netfilter: nf_conntrack_proto_sctp: minimal multihoming support\n  (bsc#932350).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: export debugging counters via /proc/vmstat\n  (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to\n  guest (bsc#927355).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler (bsc#929142).\n- qlcnic: Fix NULL pointer dereference in qlcnic_hwmon_show_temp()\n  (bsc#936095).\n- r8169: remember WOL preferences on driver load (bsc#942305).\n- s390/dasd: fix kernel panic when alias is set offline (bnc#940966,\n  LTC#128595).\n- sg_start_req(): make sure that there's not too many elements in iovec\n  (bsc#940338).\n- st: null pointer dereference panic caused by use after kref_put by\n  st_open (bsc#936875).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub\n  port reset (bnc#937641).\n- usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb\n  (bnc#933721).\n- usb: xhci: handle Config Error Change (CEC) in xhci driver\n  (bnc#933721).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86-64: Do not apply destructive erratum workaround on unaffected CPUs\n  (bsc#929076).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/tsc: Change Fast TSC calibration failed from error to info\n  (bnc#942605).\n- xfs: fix problem when using md+XFS under high load (bnc#925705).\n- xhci: Allocate correct amount of scratchpad buffers (bnc#933721).\n- xhci: Do not enable/disable RWE on bus suspend/resume (bnc#933721).\n- xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256\n  (bnc#933721).\n- xhci: Treat not finding the event_seg on COMP_STOP the same as\n  COMP_STOP_INVAL (bnc#933721).\n- xhci: Workaround for PME stuck issues in Intel xhci (bnc#933721).\n- xhci: do not report PLC when link is in internal resume state\n  (bnc#933721).\n- xhci: fix reporting of 0-sized URBs in control endpoint (bnc#933721).\n- xhci: report U3 when link is in resume state (bnc#933721).\n- xhci: rework cycle bit checking for new dequeue pointers (bnc#933721).\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936921,\n  LTC#126491).\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925,\n  LTC#126491).","status":"published","published":"2015-12-02T10:32:42Z","modified":"2026-02-04T04:10:20.606344Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0585-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.53 to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel allowed local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls (bnc#955654).\n- CVE-2015-5707: Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request (bnc#940338).\n- CVE-2015-7550: The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel did not properly use a semaphore, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted application that leverages a race condition between keyctl_revoke and keyctl_read calls (bnc#958951).\n- CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936).\n- CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel did not validate attempted changes to the MTU value, which allowed context-dependent attackers to cause a denial of service (packet loss) via a value that was (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272 (bnc#955354).\n- CVE-2015-8539: The KEYS subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c (bnc#958463).\n- CVE-2015-8543: The networking implementation in the Linux kernel did not validate protocol identifiers for certain protocol families, which allowed local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application (bnc#958886).\n- CVE-2015-8550: Optimizations introduced by the compiler could have lead to double fetch vulnerabilities, potentially  possibly leading to arbitrary code execution in backend (bsc#957988).\n- CVE-2015-8551: Xen PCI backend driver did not perform proper sanity checks on the device's state, allowing for DoS (bsc#957990).\n- CVE-2015-8569: The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel did not verify an address length, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application (bnc#959190).\n- CVE-2015-8575: The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel did not verify an address length, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application (bnc#959399).\n- CVE-2015-8660: The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel attempted to merge distinct setattr operations, which allowed local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application (bnc#960281).\n- CVE-2015-8767: net/sctp/sm_sideeffect.c in the Linux kernel did not properly manage the relationship between a lock and a socket, which allowed local users to cause a denial of service (deadlock) via a crafted sctp_accept call (bnc#961509).\n- CVE-2015-8785: The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel allowed local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov (bnc#963765).\n- CVE-2016-0723: Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call (bnc#961500).\n- CVE-2016-2069: A race in invalidating paging structures that were not in use locally could have lead to disclosoure of information or arbitrary code exectution (bnc#963767).\n\nThe following non-security bugs were fixed:\n- ACPI: Introduce apic_id in struct processor to save parsed APIC id (bsc#959463).\n- ACPI: Make it possible to get local x2apic id via _MAT (bsc#959463).\n- ACPI: use apic_id and remove duplicated _MAT evaluation (bsc#959463).\n- ACPICA: Correctly cleanup after a ACPI table load failure (bnc#937261).\n- Add sd_mod to initrd modules. For some reason PowerVM backend can't work without sd_mod\n- Do not modify perf bias performance setting by default at boot (bnc#812259, bsc#959629).\n- Documentation: Document kernel.panic_on_io_nmi sysctl (bsc#940946, bsc#937444).\n- Driver for IBM System i/p VNIC protocol\n- Drop blktap patches from SLE12, since the driver is unsupported\n- Improve fairness when locking the per-superblock s_anon list (bsc#957525, bsc#941363).\n- Input: aiptek - fix crash on detecting device without endpoints (bnc#956708).\n- NFSD: Do not start lockd when only NFSv4 is running\n- NFSv4: Recovery of recalled read delegations is broken (bsc#956514).\n- Replace with 176bed1d vmstat: explicitly schedule per-cpu work on the CPU we need it to run on\n- Revert 'ipv6: add complete rcu protection around np-\u003eopt' (bnc#961257).\n- Revert 874bbfe60 workqueue: make sure delayed work run in local cpu 1. Without 22b886dd, 874bbfe60 leads to timer corruption. 2. With 22b886dd applied, victim of 1 reports performance regression (1,2 https://lkml.org/lkml/2016/2/4/618) 3. Leads to scheduling work to offlined CPU (bnc#959463). SLERT: 4. NO_HZ_FULL regressession, unbound delayed work timer is no longer deflected to a housekeeper CPU.\n- be2net: fix some log messages (bnc#855062, bnc#867583).\n- blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976).\n- blktap: refine mm tracking (bsc#952976).\n- block: Always check queue limits for cloned requests (bsc#902606).\n- block: Always check queue limits for cloned requests (bsc#902606).\n- bnx2x: Add new device ids under the Qlogic vendor (bnc#964821).\n- btrfs: Add qgroup tracing (bnc#935087, bnc#945649).\n- btrfs: Update btrfs qgroup status item when rescan is done (bnc#960300).\n- btrfs: backref: Add special time_seq == (u64)-1 case for btrfs_find_all_roots() (bnc#935087, bnc#945649).\n- btrfs: backref: Do not merge refs which are not for same block (bnc#935087, bnc#945649).\n- btrfs: delayed-ref: Cleanup the unneeded functions (bnc#935087, bnc#945649).\n- btrfs: delayed-ref: Use list to replace the ref_root in ref_head (bnc#935087, bnc#945649).\n- btrfs: extent-tree: Use ref_node to replace unneeded parameters in __inc_extent_ref() and __free_extent() (bnc#935087, bnc#945649).\n- btrfs: fix comp_oper to get right order (bnc#935087, bnc#945649).\n- btrfs: fix deadlock between direct IO write and defrag/readpages (bnc#965344).\n- btrfs: fix leak in qgroup_subtree_accounting() error path (bnc#935087, bnc#945649).\n- btrfs: fix order by which delayed references are run (bnc#949440).\n- btrfs: fix qgroup sanity tests (bnc#951615).\n- btrfs: fix race waiting for qgroup rescan worker (bnc#960300).\n- btrfs: fix regression running delayed references when using qgroups (bnc#951615).\n- btrfs: fix regression when running delayed references (bnc#951615).\n- btrfs: fix sleeping inside atomic context in qgroup rescan worker (bnc#960300).\n- btrfs: keep dropped roots in cache until transaction commit (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add function qgroup_update_counters() (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add function qgroup_update_refcnt() (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add new function to record old_roots (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add new qgroup calculation function btrfs_qgroup_account_extents() (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add the ability to skip given qgroup for old/new_roots (bnc#935087, bnc#945649).\n- btrfs: qgroup: Cleanup open-coded old/new_refcnt update and read (bnc#935087, bnc#945649).\n- btrfs: qgroup: Cleanup the old ref_node-oriented mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: Do not copy extent buffer to do qgroup rescan (bnc#960300).\n- btrfs: qgroup: Fix a regression in qgroup reserved space (bnc#935087, bnc#945649).\n- btrfs: qgroup: Make snapshot accounting work with new extent-oriented qgroup (bnc#935087, bnc#945649).\n- btrfs: qgroup: Record possible quota-related extent for qgroup (bnc#935087, bnc#945649).\n- btrfs: qgroup: Switch rescan to new mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: Switch self test to extent-oriented qgroup mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: Switch to new extent-oriented qgroup mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: account shared subtree during snapshot delete (bnc#935087, bnc#945649).\n- btrfs: qgroup: clear STATUS_FLAG_ON in disabling quota (bnc#960300).\n- btrfs: qgroup: exit the rescan worker during umount (bnc#960300).\n- btrfs: qgroup: fix quota disable during rescan (bnc#960300).\n- btrfs: qgroup: move WARN_ON() to the correct location (bnc#935087, bnc#945649).\n- btrfs: remove transaction from send (bnc#935087, bnc#945649).\n- btrfs: skip locking when searching commit root (bnc#963825).\n- btrfs: ulist: Add ulist_del() function (bnc#935087, bnc#945649).\n- btrfs: use btrfs_get_fs_root in resolve_indirect_ref (bnc#935087, bnc#945649).\n- crypto: nx - use common code for both NX decompress success cases (bsc#942476).\n- crypto: nx-842 - Mask XERS0 bit in return value (bsc#960221).\n- driver core: Add BUS_NOTIFY_REMOVED_DEVICE event (bnc#962965).\n- drivers/firmware/memmap.c: do not allocate firmware_map_entry of same memory range (bsc#959463).\n- drivers/firmware/memmap.c: do not create memmap sysfs of same firmware_map_entry (bsc#959463).\n- drivers/firmware/memmap.c: pass the correct argument to firmware_map_find_entry_bootmem() (bsc#959463).\n- e1000e: Do not read ICR in Other interrupt (bsc#924919).\n- e1000e: Do not write lsc to ics in msi-x mode (bsc#924919).\n- e1000e: Fix msi-x interrupt automask (bsc#924919).\n- e1000e: Remove unreachable code (bsc#924919).\n- fuse: break infinite loop in fuse_fill_write_pages() (bsc#963765).\n- group-source-files: mark module.lds as devel file ld: cannot open linker script file /usr/src/linux-4.2.5-1/arch/arm/kernel/module.lds: No such file or directory\n- ipv6: fix tunnel error handling (bsc#952579).\n- jbd2: Fix unreclaimed pages after truncate in data=journal mode (bsc#961516).\n- kABI: reintroduce blk_rq_check_limits.\n- kabi: protect struct acpi_processor signature (bsc#959463).\n- kernel/watchdog.c: perform all-CPU backtrace in case of hard lockup (bsc#940946, bsc#937444).\n- kernel: Change ASSIGN_ONCE(val, x) to WRITE_ONCE(x, val) (bsc#940946, bsc#937444).\n- kernel: Provide READ_ONCE and ASSIGN_ONCE (bsc#940946, bsc#937444).\n- kernel: inadvertent free of the vector register save area (bnc#961202).\n- kexec: Fix race between panic() and crash_kexec() (bsc#940946, bsc#937444).\n- kgr: Remove the confusing search for fentry\n- kgr: Safe way to avoid an infinite redirection\n- kgr: do not print error for !abort_if_missing symbols (bnc#943989).\n- kgr: do not use WQ_MEM_RECLAIM workqueue (bnc#963572).\n- kgr: log when modifying kernel\n- kgr: mark some more missed kthreads (bnc#962336).\n- kgr: usb/storage: do not emit thread awakened (bnc#899908).\n- kvm: Add arch specific mmu notifier for page invalidation (bsc#959463).\n- kvm: Make init_rmode_identity_map() return 0 on success (bsc#959463).\n- kvm: Remove ept_identity_pagetable from struct kvm_arch (bsc#959463).\n- kvm: Rename make_all_cpus_request() to kvm_make_all_cpus_request() and make it non-static (bsc#959463).\n- kvm: Use APIC_DEFAULT_PHYS_BASE macro as the apic access page address (bsc#959463).\n- kvm: vmx: Implement set_apic_access_page_addr (bsc#959463).\n- kvm: x86: Add request bit to reload APIC access page address (bsc#959463).\n- kvm: x86: Unpin and remove kvm_arch-\u003eapic_access_page (bsc#959463).\n- libiscsi: Fix host busy blocking during connection teardown.\n- lpfc: Fix null ndlp dereference in target_reset_handler (bsc#951392).\n- md/bitmap: do not pass -1 to bitmap_storage_alloc (bsc#955118).\n- md/bitmap: remove confusing code from filemap_get_page.\n- md/bitmap: remove rcu annotation from pointer arithmetic.\n- mem-hotplug: reset node managed pages when hot-adding a new pgdat (bsc#959463).\n- mem-hotplug: reset node present pages when hot-adding a new pgdat (bsc#959463).\n- memory-hotplug: clear pgdat which is allocated by bootmem in try_offline_node() (bsc#959463).\n- mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() (VM Functionality, bnc#961588).\n- mm/mempolicy.c: convert the shared_policy lock to a rwlock (VM Performance, bnc#959436).\n- module: keep percpu symbols in module's symtab (bsc#962788).\n- nmi: provide the option to issue an NMI back trace to every cpu but current (bsc#940946, bsc#937444).\n- nmi: provide the option to issue an NMI back trace to every cpu but current (bsc#940946, bsc#937444).\n- nvme: Clear BIO_SEG_VALID flag in nvme_bio_split() (bsc#954992).\n- panic, x86: Allow CPUs to save registers even if looping in NMI context (bsc#940946, bsc#937444).\n- panic, x86: Fix re-entrance problem due to panic on NMI (bsc#940946, bsc#937444).\n- pci: Check for valid tags when calculating the VPD size (bsc#959146).\n- qeth: initialize net_device with carrier off (bnc#964230).\n- rpm/constraints.in: Bump disk space requirements up a bit Require 10GB on s390x, 20GB elsewhere.\n- rpm/kernel-binary.spec.in: Fix build if no UEFI certs are installed\n- rpm/kernel-binary.spec.in: Fix kernel-vanilla-devel dependency (bsc#959090)\n- rpm/kernel-binary.spec.in: Fix paths in kernel-vanilla-devel (bsc#959090).\n- rpm/kernel-binary.spec.in: Install libopenssl-devel for newer sign-file\n- rpm/kernel-binary.spec.in: Use bzip compression to speed up build (bsc#962356)\n- rpm/kernel-source.spec.in: Install kernel-macros for kernel-source-vanilla (bsc#959090)\n- rpm/kernel-spec-macros: Do not modify the release string in PTFs (bsc#963449)\n- rpm/package-descriptions: Add kernel-zfcpdump and drop -desktop\n- s390/cio: ensure consistent measurement state (bnc#964230).\n- s390/cio: fix measurement characteristics memleak (bnc#964230).\n- s390/cio: update measurement characteristics (bnc#964230).\n- s390/dasd: fix failfast for disconnected devices (bnc#961202).\n- s390/vtime: correct scaled cputime for SMT (bnc#964230).\n- s390/vtime: correct scaled cputime of partially idle CPUs (bnc#964230).\n- s390/vtime: limit MT scaling value updates (bnc#964230).\n- sched,numa: cap pte scanning overhead to 3% of run time (Automatic NUMA Balancing).\n- sched/fair: Care divide error in update_task_scan_period() (bsc#959463).\n- sched/fair: Disable tg load_avg/runnable_avg update for root_task_group (bnc#960227).\n- sched/fair: Move cache hot load_avg/runnable_avg into separate cacheline (bnc#960227).\n- sched/numa: Cap PTE scanning overhead to 3% of run time (Automatic NUMA Balancing).\n- sched: Fix race between task_group and sched_task_group (Automatic NUMA Balancing).\n- scsi: restart list search after unlock in scsi_remove_target (bsc#944749, bsc#959257).\n- supported.conf: Add more QEMU and VMware drivers to -base (bsc#965840).\n- supported.conf: Add netfilter modules to base (bsc#950292)\n- supported.conf: Add nls_iso8859-1 and nls_cp437 to -base (bsc#950292)\n- supported.conf: Add vfat to -base to be able to mount the ESP (bsc#950292).\n- supported.conf: Add virtio_{blk,net,scsi} to kernel-default-base (bsc#950292)\n- supported.conf: Also add virtio_pci to kernel-default-base (bsc#950292).\n- supported.conf: drop +external from ghash-clmulni-intel It was agreed that it does not make sense to maintain 'external' for this specific module. Furthermore it causes problems in rather ordinary VMware environments. (bsc#961971)\n- udp: properly support MSG_PEEK with truncated buffers (bsc#951199 bsc#959364).\n- x86, xsave: Support eager-only xsave features, add MPX support (bsc#938577).\n- x86/apic: Introduce apic_extnmi command line parameter (bsc#940946, bsc#937444).\n- x86/fpu/xstate: Do not assume the first zero xfeatures zero bit means the end (bsc#938577).\n- x86/fpu: Fix double-increment in setup_xstate_features() (bsc#938577).\n- x86/fpu: Remove xsave_init() bootmem allocations (bsc#938577).\n- x86/nmi: Save regs in crash dump on external NMI (bsc#940946, bsc#937444).\n- x86/nmi: Save regs in crash dump on external NMI (bsc#940946, bsc#937444).\n- xen/pciback: Do not allow MSI-X ops if PCI_COMMAND_MEMORY is not set (bsc#957990 XSA-157).\n- xfs: add a few more verifier tests (bsc#947953).\n- xfs: fix double free in xlog_recover_commit_trans (bsc#947953).\n- xfs: recovery of XLOG_UNMOUNT_TRANS leaks memory (bsc#947953).\n","status":"published","published":"2016-02-25T16:23:22Z","modified":"2026-02-04T04:40:40.107871Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0785-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 12 kernel was updated to 3.12.55 to receive various security and bugfixes.\n\nFeatures added:\n- A improved XEN blkfront module was added, which allows more I/O bandwidth. (FATE#320625)\n  It is called xen-blkfront in PV, and xen-vbd-upstream in HVM mode.\n\nThe following security bugs were fixed:\n- CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in\n  the Linux kernel allowed local users to bypass intended AF_UNIX socket\n  permissions or cause a denial of service (panic) via crafted epoll_ctl\n  calls (bnc#955654).\n- CVE-2015-5707: Integer overflow in the sg_start_req function in\n  drivers/scsi/sg.c in the Linux kernel allowed local users to cause a\n  denial of service or possibly have unspecified other impact via a large\n  iov_count value in a write request (bnc#940338).\n- CVE-2015-8709: kernel/ptrace.c in the Linux kernel mishandled uid and\n  gid mappings, which allowed local users to gain privileges by establishing\n  a user namespace, waiting for a root process to enter that namespace\n  with an unsafe uid or gid, and then using the ptrace system call.  NOTE:\n  the vendor states 'there is no kernel bug here' (bnc#959709 bnc#960561).\n- CVE-2015-8767: net/sctp/sm_sideeffect.c in the Linux kernel did not\n  properly manage the relationship between a lock and a socket, which\n  allowed local users to cause a denial of service (deadlock) via a crafted\n  sctp_accept call (bnc#961509).\n- CVE-2015-8785: The fuse_fill_write_pages function in fs/fuse/file.c\n  in the Linux kernel allowed local users to cause a denial of service\n  (infinite loop) via a writev system call that triggers a zero length\n  for the first segment of an iov (bnc#963765).\n- CVE-2015-8812: A use-after-free flaw was found in the CXGB3 kernel\n  driver when the network was considered to be congested. This could be\n  used by local attackers to cause machine crashes or potentially code\n  executuon (bsc#966437).\n- CVE-2016-0723: Race condition in the tty_ioctl function in\n  drivers/tty/tty_io.c in the Linux kernel allowed local users to obtain\n  sensitive information from kernel memory or cause a denial of service\n  (use-after-free and system crash) by making a TIOCGETD ioctl call during\n  processing of a TIOCSETD ioctl call (bnc#961500).\n- CVE-2016-0774: A pipe buffer state corruption after unsuccessful atomic\n  read from pipe was fixed (bsc#964730).\n- CVE-2016-2069: Race conditions in TLB syncing was fixed which could\n  leak to information leaks (bnc#963767).\n- CVE-2016-2384: A double-free triggered by invalid USB descriptor in\n  ALSA usb-audio was fixed, which could be exploited by physical local\n  attackers to crash the kernel or gain code execution (bnc#966693).\n\nThe following non-security bugs were fixed:\n- alsa: rawmidi: Make snd_rawmidi_transmit() race-free (bsc#968018).\n- alsa: seq: Fix leak of pool buffer at concurrent writes (bsc#968018).\n- be2net: fix some log messages (bnc#855062 FATE#315961, bnc#867583).\n- block: xen-blkfront: Fix possible NULL ptr dereference (bsc#957986 fate#320625).\n- btrfs: Add handler for invalidate page (bsc#963193).\n- btrfs: check prepare_uptodate_page() error code earlier (bnc#966910).\n- btrfs: delayed_ref: Add new function to record reserved space into delayed ref (bsc#963193).\n- btrfs: delayed_ref: release and free qgroup reserved at proper timing (bsc#963193).\n- btrfs: extent_io: Introduce needed structure for recoding set/clear bits (bsc#963193).\n- btrfs: extent_io: Introduce new function clear_record_extent_bits() (bsc#963193).\n- btrfs: extent_io: Introduce new function set_record_extent_bits (bsc#963193).\n- btrfs: extent-tree: Add new version of btrfs_check_data_free_space and btrfs_free_reserved_data_space (bsc#963193).\n- btrfs: extent-tree: Add new version of btrfs_delalloc_reserve/release_space (bsc#963193).\n- btrfs: extent-tree: Switch to new check_data_free_space and free_reserved_data_space (bsc#963193).\n- btrfs: extent-tree: Switch to new delalloc space reserve and release (bsc#963193).\n- btrfs: fallocate: Add support to accurate qgroup reserve (bsc#963193).\n- btrfs: fix deadlock between direct IO write and defrag/readpages (bnc#965344).\n- btrfs: fix invalid page accesses in extent_same (dedup) ioctl (bnc#968230).\n- btrfs: fix page reading in extent_same ioctl leading to csum errors (bnc#968230).\n- btrfs: fix warning in backref walking (bnc#966278).\n- btrfs: qgroup: Add handler for NOCOW and inline (bsc#963193).\n- btrfs: qgroup: Add new trace point for qgroup data reserve (bsc#963193).\n- btrfs: qgroup: Avoid calling btrfs_free_reserved_data_space in clear_bit_hook (bsc#963193).\n- btrfs: qgroup: Check if qgroup reserved space leaked (bsc#963193).\n- btrfs: qgroup: Cleanup old inaccurate facilities (bsc#963193).\n- btrfs: qgroup: Fix a race in delayed_ref which leads to abort trans (bsc#963193).\n- btrfs: qgroup: Fix a rebase bug which will cause qgroup double free (bsc#963193).\n- btrfs: qgroup: Introduce btrfs_qgroup_reserve_data function (bsc#963193).\n- btrfs: qgroup: Introduce functions to release/free qgroup reserve data space (bsc#963193).\n- btrfs: qgroup: Introduce new functions to reserve/free metadata (bsc#963193).\n- btrfs: qgroup: Use new metadata reservation (bsc#963193).\n- btrfs: skip locking when searching commit root (bnc#963825).\n- dcache: use IS_ROOT to decide where dentry is hashed (bsc#949752).\n- documentation: Document kernel.panic_on_io_nmi sysctl (bsc#940946, bsc#937444).\n- documentation: Fix build of PDF files in kernel-docs package Double the spaces for tex, and fix buildrequires for docbook.\n- doc: Use fop for creating PDF files in kernel-docs package as some files still cannot be built with the default backend.\n- driver core: Add BUS_NOTIFY_REMOVED_DEVICE event (bnc#962965).\n- drivers: xen-blkfront: only talk_to_blkback() when in XenbusStateInitialising (bsc#957986 fate#320625).\n- driver: xen-blkfront: move talk_to_blkback to a more suitable place (bsc#957986 fate#320625).\n- ec2: updated kabi files and start tracking\n- fs: Improve fairness when locking the per-superblock s_anon list (bsc#957525, bsc#941363).\n- fs/proc_namespace.c: simplify testing nsp and nsp-\u003emnt_ns (bug#963960).\n- fuse: break infinite loop in fuse_fill_write_pages() (bsc#963765).\n- futex: Drop refcount if requeue_pi() acquired the rtmutex (bug#960174).\n- jbd2: Fix unreclaimed pages after truncate in data=journal mode (bsc#961516).\n- kabi: Preserve checksum of kvm_x86_ops (bsc#969112).\n- kABI: protect struct af_alg_type.\n- kABI: protect struct crypto_ahash.\n- kABI: reintroduce blk_rq_check_limits.\n- kabi/severities: Fail on changes in kvm_x86_ops, needed by lttng-modules\n- kernel: Change ASSIGN_ONCE(val, x) to WRITE_ONCE(x, val) (bsc#940946, bsc#937444).\n- kernel: Provide READ_ONCE and ASSIGN_ONCE (bsc#940946, bsc#937444).\n- kernel/watchdog.c: perform all-CPU backtrace in case of hard lockup (bsc#940946, bsc#937444).\n- kexec: Fix race between panic() and crash_kexec() (bsc#940946, bsc#937444).\n- kgr: do not print error for !abort_if_missing symbols (bnc#943989).\n- kgr: do not use WQ_MEM_RECLAIM workqueue (bnc#963572).\n- kgr: log when modifying kernel (fate#317827).\n- kgr: mark some more missed kthreads (bnc#962336).\n- kgr: usb/storage: do not emit thread awakened (bnc#899908).\n- kvm: x86: Check dest_map-\u003evector to match eoi signals for rtc (bsc#966471).\n- kvm: x86: Convert ioapic-\u003ertc_status.dest_map to a struct (bsc#966471).\n- kvm: x86: store IOAPIC-handled vectors in each VCPU (bsc#966471).\n- kvm: x86: Track irq vectors in ioapic-\u003ertc_status.dest_map (bsc#966471).\n- libceph: fix scatterlist last_piece calculation (bsc#963746).\n- megaraid_sas: Chip reset if driver fails to get IOC ready (bsc#922071). Refresh the patch based on the actual upstream commit, and add the commit ID.\n- mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() (VM Functionality, bnc#961588).\n- module: keep percpu symbols in module's symtab (bsc#962788).\n- namespaces: Re-introduce task_nsproxy() helper (bug#963960).\n- namespaces: Use task_lock and not rcu to protect nsproxy (bug#963960).\n- net: core: Correct an over-stringent device loop detection (bsc#945219).\n- nfs: Background flush should not be low priority (bsc#955308).\n- nfsd: Do not start lockd when only NFSv4 is running (fate#316311).\n- nfs: do not use STABLE writes during writeback (bnc#816099).\n- nfs: Fix handling of re-write-before-commit for mmapped NFS pages (bsc#964201).\n- nfs: Move nfsd patch to the right section\n- nfsv4: Recovery of recalled read delegations is broken (bsc#956514).\n- nmi: provide the option to issue an NMI back trace to every cpu but current (bsc#940946, bsc#937444).\n- nmi: provide the option to issue an NMI back trace to every cpu but current (bsc#940946, bsc#937444).\n- panic, x86: Allow CPUs to save registers even if looping in NMI context (bsc#940946, bsc#937444).\n- panic, x86: Fix re-entrance problem due to panic on NMI (bsc#940946, bsc#937444).\n- pci: allow access to VPD attributes with size 0 (bsc#959146).\n- pciback: Check PF instead of VF for PCI_COMMAND_MEMORY.\n- pciback: Save the number of MSI-X entries to be copied later.\n- pci: Blacklist vpd access for buggy devices (bsc#959146).\n- pci: Determine actual VPD size on first access (bsc#959146).\n- pci: Update VPD definitions (bsc#959146).\n- perf: Do not modify perf bias performance setting by default at boot (bnc#812259,bsc#959629).\n- proc: Fix ptrace-based permission checks for accessing task maps.\n- rpm/constraints.in: Bump disk space requirements up a bit Require 10GB on s390x, 20GB elsewhere.\n- rpm/kernel-binary.spec.in: Fix build if no UEFI certs are installed\n- rpm/kernel-binary.spec.in: Fix kernel-vanilla-devel dependency (bsc#959090)\n- rpm/kernel-binary.spec.in: Fix paths in kernel-vanilla-devel (bsc#959090).\n- rpm/kernel-binary.spec.in: Install libopenssl-devel for newer sign-file\n- rpm/kernel-binary.spec.in: Sync the main and -base package dependencies (bsc#965830#c51).\n- rpm/kernel-binary.spec.in: Use bzip compression to speed up build (bsc#962356)\n- rpm/kernel-module-subpackage: Fix obsoleting dropped flavors (bsc#968253)\n- rpm/kernel-source.spec.in: Install kernel-macros for kernel-source-vanilla (bsc#959090)\n- rpm/kernel-spec-macros: Do not modify the release string in PTFs (bsc#963449)\n- rpm/package-descriptions: Add kernel-zfcpdump and drop -desktop\n- sched/fair: Disable tg load_avg/runnable_avg update for root_task_group (bnc#960227).\n- sched/fair: Move cache hot load_avg/runnable_avg into separate cacheline (bnc#960227).\n- sched: Fix race between task_group and sched_task_group (Automatic NUMA Balancing (fate#315482))\n- scsi: Add sd_mod to initrd modules For some reason PowerVM backend can't work without sd_mod\n- scsi_dh_alua: Do not block request queue if workqueue is active (bsc#960458).\n- scsi: fix soft lockup in scsi_remove_target() on module removal (bsc#965199).\n- scsi: restart list search after unlock in scsi_remove_target (bsc#959257).\n- series.conf: add section comments\n- supported.conf: Add e1000e (emulated by VMware) to -base (bsc#968074)\n- supported.conf: Add Hyper-V modules to -base (bsc#965830)\n- supported.conf: Add more QEMU and VMware drivers to -base (bsc#965840).\n- supported.conf: Add more qemu device driver (bsc#968234)\n- supported.conf: Add mptspi and mptsas to -base (bsc#968206)\n- supported.conf: Add netfilter modules to base (bsc#950292)\n- supported.conf: Add nls_iso8859-1 and nls_cp437 to -base (bsc#950292)\n- supported.conf: Add the qemu scsi driver (sym53c8xx) to -base (bsc#967802)\n- supported.conf: Add tulip to -base for Hyper-V (bsc#968234)\n- supported.conf: Add vfat to -base to be able to mount the ESP (bsc#950292).\n- supported.conf: Add virtio_{blk,net,scsi} to kernel-default-base (bsc#950292)\n- supported.conf: Add virtio-rng (bsc#966026)\n- supported.conf: Add xen-blkfront.\n- supported.conf: Add xfs to -base (bsc#965891)\n- supported.conf: Also add virtio_pci to kernel-default-base (bsc#950292).\n- supported.conf: drop +external from ghash-clmulni-intel It was agreed that it does not make sense to maintain 'external' for this specific module. Furthermore it causes problems in rather ordinary VMware environments. (bsc#961971)\n- supported.conf: Fix usb-common path usb-common moved to its own subdirectory in kernel v3.16, and we backported that change to SLE12.\n- tcp: Restore RFC5961-compliant behavior for SYN packets (bsc#966864).\n- usb: Quiet down false peer failure messages (bnc#960629).\n- x86/apic: Introduce apic_extnmi command line parameter (bsc#940946, bsc#937444).\n- x86/nmi: Save regs in crash dump on external NMI (bsc#940946, bsc#937444).\n- x86/nmi: Save regs in crash dump on external NMI (bsc#940946, bsc#937444).\n- xen: Add /etc/modprobe.d/50-xen.conf selecting Xen frontend driver implementation (bsc#957986, bsc#956084, bsc#961658).\n- xen-blkfront: allow building in our Xen environment (bsc#957986 fate#320625).\n- xen, blkfront: factor out flush-related checks from do_blkif_request() (bsc#957986 fate#320625).\n- xen-blkfront: fix accounting of reqs when migrating (bsc#957986 fate#320625).\n- xen/blkfront: Fix crash if backend does not follow the right states (bsc#957986 fate#320625).\n- xen-blkfront: improve aproximation of required grants per request (bsc#957986 fate#320625).\n- xen/blkfront: improve protection against issuing unsupported REQ_FUA (bsc#957986 fate#320625).\n- xen/blkfront: remove redundant flush_op (bsc#957986 fate#320625).\n- xen-blkfront: remove type check from blkfront_setup_discard (bsc#957986 fate#320625).\n- xen-blkfront: Silence pfn maybe-uninitialized warning (bsc#957986 fate#320625).\n- xen: Linux 3.12.52.\n- xen: Refresh patches.xen/xen3-patch-3.9 (bsc#951155).\n- xen: Refresh patches.xen/xen3-patch-3.9 (do not subvert NX protection during 1:1 mapping setup).\n- xen-vscsi-large-requests: Fix resource collision for racing request maps and unmaps (bsc#966094).\n- xen: Xen config files updated to enable upstream block frontend.\n- xfs: add a few more verifier tests (bsc#947953).\n- xfs: fix double free in xlog_recover_commit_trans (bsc#947953).\n- xfs: recovery of XLOG_UNMOUNT_TRANS leaks memory (bsc#947953).\n","status":"published","published":"2016-03-16T10:39:32Z","modified":"2025-05-02T04:04:01.690498Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-5707","description":"Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.","status":"published","published":"2015-08-03T00:00:00Z","modified":"2026-04-22T10:03:32.173293Z","updated_at":"2026-11-02T15:54:10.385269Z"},{"id":"USN-2734-1","title":"linux vulnerability","description":"It was discovered that an integer overflow error existed in the SCSI\ngeneric (sg) driver in the Linux kernel. A local attacker with write\npermission to a SCSI generic device could use this to cause a denial of\nservice (system crash) or potentially escalate their privileges.\n","status":"published","published":"2015-09-03T21:11:13Z","modified":"2026-04-22T09:15:15.311186Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2737-1","title":"linux-lts-vivid vulnerability","description":"It was discovered that an integer overflow error existed in the SCSI\ngeneric (sg) driver in the Linux kernel. A local attacker with write\npermission to a SCSI generic device could use this to cause a denial of\nservice (system crash) or potentially escalate their privileges.\n","status":"published","published":"2015-09-09T06:12:17Z","modified":"2026-02-10T04:40:55Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2750-1","title":"linux-lts-utopic vulnerability","description":"It was discovered that an integer overflow error existed in the SCSI\ngeneric (sg) driver in the Linux kernel. A local attacker with write\npermission to a SCSI generic device could use this to cause a denial of\nservice (system crash) or potentially escalate their privileges.\n","status":"published","published":"2015-09-29T08:36:18Z","modified":"2026-02-10T04:40:55Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}