{"id":"CVE-2015-8660","aliases":["DEBIAN-CVE-2015-8660","EUVD-2015-8537","GHSA-2m7p-qcqr-gfv2","MGASA-2016-0005","MGASA-2016-0014","MGASA-2016-0015","RHSA-2016:1532","RHSA-2016:1539","RHSA-2016:1541","SUSE-SU-2016:0585-1","SUSE-SU-2016:0751-1","SUSE-SU-2016:0752-1","SUSE-SU-2016:0755-1","UBUNTU-CVE-2015-8660","USN-2857-2","USN-2858-2","openSUSE-SU-2024:10128-1"],"status":"published","title":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to...","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.22204,"percentile":0.97693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-264"],"published":"2015-12-28T00:00:00Z","modified":"2026-09-09T07:01:56Z","exploits":[{"source":"metasploit","id":"exploit/linux/local/overlayfs_priv_esc","title":"Overlayfs Privilege Escalation","type":"exploit","platform":"Linux","date":"2015-06-16","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/overlayfs_priv_esc"},{"source":"exploitdb","id":"EDB-39166","title":"Linux Kernel 4.3.3 (Ubuntu 14.04/15.10) - 'overlayfs' Local Privilege Escalation (1)","type":"local","platform":"linux","date":"2016-01-05","verified":true,"url":"https://www.exploit-db.com/exploits/39166"},{"source":"exploitdb","id":"EDB-39230","title":"Linux Kernel 4.3.3 - 'overlayfs' Local Privilege Escalation (2)","type":"local","platform":"linux","date":"2016-01-12","url":"https://www.exploit-db.com/exploits/39230"},{"source":"pocgithub","id":"whu-enjoy/CVE-2015-8660","title":"whu-enjoy/CVE-2015-8660","date":"2016-04-14","url":"https://github.com/whu-enjoy/CVE-2015-8660"},{"source":"exploitdb","id":"EDB-40688","title":"Linux Kernel (Ubuntu / Fedora / RedHat) - 'Overlayfs' Local Privilege Escalation (Metasploit)","type":"local","platform":"linux","date":"2016-11-02","verified":true,"url":"https://www.exploit-db.com/exploits/40688"},{"source":"pocgithub","id":"nhamle2/CVE-2015-8660","title":"nhamle2/CVE-2015-8660","date":"2023-01-15","url":"https://github.com/nhamle2/CVE-2015-8660"},{"source":"pocgithub","id":"carradolly/CVE-2015-8660","title":"carradolly/CVE-2015-8660","date":"2024-09-10","url":"https://github.com/carradolly/CVE-2015-8660"}],"fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.3.3-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.3.3-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.3.3-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-43.49~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","fixed_in":["4.2.0-23.28~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-3"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-1.mga5"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-userspace-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-1.mga5"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-7.mga5"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-broadcom-wl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.30.223.271-4.mga5.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-fglrx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.200.1046-8.mga5.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia304","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"304.128-4.mga5.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia340","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"340.93-4.mga5.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-nvidia-current","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"346.96-4.mga5.nonfree"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-1.mga5"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:5","package":"kernel-tmb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-1.mga5"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.10.0-327.rt56.194.el6rt"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-327.28.2.rt56.234.el7_2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP1_Update_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.2"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"lttng-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"lttng-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-3.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.53-60.30.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP1_Update_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-8.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP1_Update_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12-SP1_Update_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-43.49~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-23.28~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-43.49~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-23.28~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.13-1.1"}]}],"bundled":82}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.exploit-db.com/exploits/39166/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/135151/Ubuntu-14.04-LTS-15.10-overlayfs-Local-Root.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1034548","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=acff81ec2c79492b180fade3c2894425cd35a545","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1541.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/torvalds/linux/commit/acff81ec2c79492b180fade3c2894425cd35a545","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.exploit-db.com/exploits/40688/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/23/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1539.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2857-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1532.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291329","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://www.exploit-db.com/exploits/39230/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2858-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2857-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/79671","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8660","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1532","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1539","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8660","tags":["report"]},{"url":"https://www.exploit-db.com/exploits/39166"},{"url":"https://www.exploit-db.com/exploits/39230"},{"url":"https://www.exploit-db.com/exploits/40688"},{"url":"https://github.com/advisories/GHSA-2m7p-qcqr-gfv2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8660","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0005.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17397","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.14","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.15","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0014.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17396","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.13","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0015.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17401","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16915","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17010","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17034","tags":["report"]},{"url":"http://kernelnewbies.org/Linux_4.0","tags":["web"]},{"url":"http://kernelnewbies.org/Linux_4.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.1","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.2","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.3","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.7","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.8","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.9","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.10","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.11","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.12","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.13","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.14","tags":["web"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.15","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343658","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1532.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8660","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4470","tags":["advisory"]},{"url":"https://access.redhat.com/articles/2460971","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308908","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1539.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2143","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350307","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1541.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160585-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/812259","tags":["report"]},{"url":"https://bugzilla.suse.com/855062","tags":["report"]},{"url":"https://bugzilla.suse.com/867583","tags":["report"]},{"url":"https://bugzilla.suse.com/899908","tags":["report"]},{"url":"https://bugzilla.suse.com/902606","tags":["report"]},{"url":"https://bugzilla.suse.com/924919","tags":["report"]},{"url":"https://bugzilla.suse.com/935087","tags":["report"]},{"url":"https://bugzilla.suse.com/937261","tags":["report"]},{"url":"https://bugzilla.suse.com/937444","tags":["report"]},{"url":"https://bugzilla.suse.com/938577","tags":["report"]},{"url":"https://bugzilla.suse.com/940338","tags":["report"]},{"url":"https://bugzilla.suse.com/940946","tags":["report"]},{"url":"https://bugzilla.suse.com/941363","tags":["report"]},{"url":"https://bugzilla.suse.com/942476","tags":["report"]},{"url":"https://bugzilla.suse.com/943989","tags":["report"]},{"url":"https://bugzilla.suse.com/944749","tags":["report"]},{"url":"https://bugzilla.suse.com/945649","tags":["report"]},{"url":"https://bugzilla.suse.com/947953","tags":["report"]},{"url":"https://bugzilla.suse.com/949440","tags":["report"]},{"url":"https://bugzilla.suse.com/949936","tags":["report"]},{"url":"https://bugzilla.suse.com/950292","tags":["report"]},{"url":"https://bugzilla.suse.com/951199","tags":["report"]},{"url":"https://bugzilla.suse.com/951392","tags":["report"]},{"url":"https://bugzilla.suse.com/951615","tags":["report"]},{"url":"https://bugzilla.suse.com/952579","tags":["report"]},{"url":"https://bugzilla.suse.com/952976","tags":["report"]},{"url":"https://bugzilla.suse.com/954992","tags":["report"]},{"url":"https://bugzilla.suse.com/955118","tags":["report"]},{"url":"https://bugzilla.suse.com/955354","tags":["report"]},{"url":"https://bugzilla.suse.com/955654","tags":["report"]},{"url":"https://bugzilla.suse.com/956514","tags":["report"]},{"url":"https://bugzilla.suse.com/956708","tags":["report"]},{"url":"https://bugzilla.suse.com/957525","tags":["report"]},{"url":"https://bugzilla.suse.com/957988","tags":["report"]},{"url":"https://bugzilla.suse.com/957990","tags":["report"]},{"url":"https://bugzilla.suse.com/958463","tags":["report"]},{"url":"https://bugzilla.suse.com/958886","tags":["report"]},{"url":"https://bugzilla.suse.com/958951","tags":["report"]},{"url":"https://bugzilla.suse.com/959090","tags":["report"]},{"url":"https://bugzilla.suse.com/959146","tags":["report"]},{"url":"https://bugzilla.suse.com/959190","tags":["report"]},{"url":"https://bugzilla.suse.com/959257","tags":["report"]},{"url":"https://bugzilla.suse.com/959364","tags":["report"]},{"url":"https://bugzilla.suse.com/959399","tags":["report"]},{"url":"https://bugzilla.suse.com/959436","tags":["report"]},{"url":"https://bugzilla.suse.com/959463","tags":["report"]},{"url":"https://bugzilla.suse.com/959629","tags":["report"]},{"url":"https://bugzilla.suse.com/960221","tags":["report"]},{"url":"https://bugzilla.suse.com/960227","tags":["report"]},{"url":"https://bugzilla.suse.com/960281","tags":["report"]},{"url":"https://bugzilla.suse.com/960300","tags":["report"]},{"url":"https://bugzilla.suse.com/961202","tags":["report"]},{"url":"https://bugzilla.suse.com/961257","tags":["report"]},{"url":"https://bugzilla.suse.com/961500","tags":["report"]},{"url":"https://bugzilla.suse.com/961509","tags":["report"]},{"url":"https://bugzilla.suse.com/961516","tags":["report"]},{"url":"https://bugzilla.suse.com/961588","tags":["report"]},{"url":"https://bugzilla.suse.com/961971","tags":["report"]},{"url":"https://bugzilla.suse.com/962336","tags":["report"]},{"url":"https://bugzilla.suse.com/962356","tags":["report"]},{"url":"https://bugzilla.suse.com/962788","tags":["report"]},{"url":"https://bugzilla.suse.com/962965","tags":["report"]},{"url":"https://bugzilla.suse.com/963449","tags":["report"]},{"url":"https://bugzilla.suse.com/963572","tags":["report"]},{"url":"https://bugzilla.suse.com/963765","tags":["report"]},{"url":"https://bugzilla.suse.com/963767","tags":["report"]},{"url":"https://bugzilla.suse.com/963825","tags":["report"]},{"url":"https://bugzilla.suse.com/964230","tags":["report"]},{"url":"https://bugzilla.suse.com/964821","tags":["report"]},{"url":"https://bugzilla.suse.com/965344","tags":["report"]},{"url":"https://bugzilla.suse.com/965840","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2069","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160751-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/955837","tags":["report"]},{"url":"https://bugzilla.suse.com/960329","tags":["report"]},{"url":"https://bugzilla.suse.com/962078","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0728","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160752-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160755-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-8660","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2858-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2858-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2858-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2857-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2857-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9576","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-8660","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","status":"published","published":"2015-12-28T11:00:00Z","modified":"2024-08-06T08:20:43.59Z","updated_at":"2026-11-02T14:35:40.900357Z"}],"euvd":[{"id":"EUVD-2015-8537","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","status":"published","published":"2015-12-28T11:00:00Z","modified":"2024-08-06T08:20:43Z","updated_at":"2026-11-03T01:57:26.384611Z"}],"ghsa":[{"id":"GHSA-2m7p-qcqr-gfv2","title":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to...","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","status":"published","published":"2022-05-17T01:09:03Z","modified":"2025-04-12T12:56:15Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:01:25.259545Z"}],"nvd":[{"id":"CVE-2015-8660","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","status":"published","published":"2015-12-28T11:59:08.093Z","modified":"2026-06-17T00:34:59.407Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:15.746629Z"}],"osv":[{"id":"CVE-2015-8660","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","status":"published","published":"2015-12-28T11:59:08Z","modified":"2026-04-16T06:16:53.283464781Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-8660","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","status":"published","published":"2015-12-28T11:59:08.093Z","modified":"2026-09-09T07:01:56.209305998Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"RHSA-2016:1532","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T12:27:48Z","modified":"2026-06-29T10:13:05Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1539","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-15T23:33:40Z","modified":"2026-06-29T10:13:05Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:1541","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T12:27:44Z","modified":"2026-06-29T10:13:06Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2015-8660","description":"The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.","status":"published","published":"2015-12-28T00:00:00Z","modified":"2026-02-04T02:44:02.411222Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"MGASA-2016-0005","title":"Updated kernel packages fix security vulnerabilities","description":"This kernel update is based on upstream 4.1.15 longterm kernel and fixes\nthe following security issues:\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe key_gc_unused_keys function in security/keys/gc.c in the Linux kernel\nthrough 4.2.6 allows local users to cause a denial of service (OOPS) via\ncrafted keyctl commands (CVE-2015-7872).\n\nThe vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in\nthe Linux kernel through 4.3.3 does not initialize a certain structure\nmember, which allows local users to obtain sensitive information from\nkernel memory via a crafted application (CVE-2015-7884).\n\nThe dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the\nLinux kernel through 4.3.3 does not initialize a certain structure member,\nwhich allows local users to obtain sensitive information from kernel memory\nvia a crafted application (CVE-2015-7885).\n\nFelix Wilhelm discovered a race condition in the Xen paravirtualized\ndrivers which can cause double fetch vulnerabilities. An attacker in the\nparavirtualized guest could exploit this flaw to cause a denial of service\n(crash the host) or potentially execute arbitrary code on the host\n(CVE-2015-8550 / XSA-155).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service (NULL dereference) on the host\n(CVE-2015-8551 / XSA-157).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service by flooding the logging system\nwith WARN() messages causing the initial domain to exhaust disk space\n(CVE-2015-8552 / XSA-157).\n\nThe ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel\nthrough 4.3.3 attempts to merge distinct setattr operations, which allows\nlocal users to bypass intended access restrictions and modify the\nattributes of arbitrary overlay files via a crafted application\n(CVE-2015-8660).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2016-01-11T10:44:41Z","modified":"2026-04-16T06:23:21.950098734Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0014","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update is based on upstream 4.1.15 longterm kernel and\nfixes the following security issues:\n\nThe virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel\nbefore 4.2 attempts to support a FRAGLIST feature without proper memory\nallocation, which allows guest OS users to cause a denial of service (buffer\noverflow and memory corruption) via a crafted sequence of fragmented packets\n(CVE-2015-5156).\n\nThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through\n4.6.x, allows guest OS users to cause a denial of service (host OS panic\nor hang) by triggering many #AC (aka Alignment Check) exceptions, related\nto svm.c and vmx.c (CVE-2015-5307).\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe key_gc_unused_keys function in security/keys/gc.c in the Linux kernel\nthrough 4.2.6 allows local users to cause a denial of service (OOPS) via\ncrafted keyctl commands (CVE-2015-7872).\n\nThe vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in\nthe Linux kernel through 4.3.3 does not initialize a certain structure\nmember, which allows local users to obtain sensitive information from\nkernel memory via a crafted application (CVE-2015-7884).\n\nThe dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the\nLinux kernel through 4.3.3 does not initialize a certain structure member,\nwhich allows local users to obtain sensitive information from kernel memory\nvia a crafted application (CVE-2015-7885).\n\nFelix Wilhelm discovered a race condition in the Xen paravirtualized\ndrivers which can cause double fetch vulnerabilities. An attacker in the\nparavirtualized guest could exploit this flaw to cause a denial of service\n(crash the host) or potentially execute arbitrary code on the host\n(CVE-2015-8550 / XSA-155).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service (NULL dereference) on the host\n(CVE-2015-8551 / XSA-157).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service by flooding the logging system\nwith WARN() messages causing the initial domain to exhaust disk space\n(CVE-2015-8552 / XSA-157).\n\nThe ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel\nthrough 4.3.3 attempts to merge distinct setattr operations, which allows\nlocal users to bypass intended access restrictions and modify the\nattributes of arbitrary overlay files via a crafted application\n(CVE-2015-8660).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2016-01-14T01:44:39Z","modified":"2026-04-16T06:24:41.346615022Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"MGASA-2016-0015","title":"Updated kernel-tmb packages provides 4.1 longterm kernel and fixes security issues","description":"This kernel-tmb update provides an upgrade to the upstream 4.1 longterm\nkernel series, currently based on 4.1.15 and resolves at least the\nfollowing security issues:\n\nIt was found that the Linux kernel's keyring implementation would leak\nmemory when adding a key to a keyring via the add_key() function. A\nlocal attacker could use this flaw to exhaust all available memory on\nthe system. (CVE-2015-1333)\n\nA flaw was found in the Linux kernel where the deletion of a file or\ndirectory could trigger an unmount and reveal data under a mount point.\nThis flaw was inadvertently introduced with the new feature of being able\nto lazily unmount a mount tree when using file system user namespaces.\n(CVE-2015-4176)\n\nA flaw was discovered in the kernel's collect_mounts function. If the kernel\naudit subsystem called collect_mounts to audit an unmounted path, it could\npanic the system. With this flaw, an unprivileged user could call umount\n(MNT_DETACH) to launch a denial-of-service attack. (CVE-2015-4177)\n\nA flaw was found in the Linux kernel which is related to the user namespace\nlazily unmounting file systems. The fs_pin struct has two members (m_list\nand s_list) which are usually initialized on use in the pin_insert_group\nfunction. However, these members might go unmodified; in this case, the\nsystem panics when it attempts to destroy or free them. This flaw could be\nused to launch a denial-of-service attack. (CVE-2015-4178)\n\nA DoS flaw was found for a Linux kernel built for the x86 architecture which\nhad the KVM virtualization support(CONFIG_KVM) enabled. The kernel would be\nvulnerable to a NULL pointer dereference flaw in Linux kernel's\nkvm_apic_has_events() function while doing an ioctl. An unprivileged user\nable to access the \"/dev/kvm\" device could use this flaw to crash the system\nkernel. (CVE-2015-4692)\n\nA flaw was found in the kernel's implementation of the Berkeley Packet\nFilter (BPF). A local attacker could craft BPF code to crash the system\nby creating a situation in which the JIT compiler would fail to correctly\noptimize the JIT image on the last pass. This would lead to the CPU\nexecuting instructions that were not part of the JIT code. (CVE-2015-4700)\n\nThe virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel\nbefore 4.2 attempts to support a FRAGLIST feature without proper memory\nallocation, which allows guest OS users to cause a denial of service (buffer\noverflow and memory corruption) via a crafted sequence of fragmented packets.\n(CVE-2015-5156)\n\nMoein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained\nhardcoded attributes about the USB devices. An attacker could construct a\nfake WhiteHEAT USB device that, when inserted, causes a denial of service\n(system crash) (CVE-2015-5257).\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"alignment\ncheck\" (#AC) exceptions. This causes the microcode to enter an infinite loop\nwhere the core never receives another interrupt. The host kernel panics due\nto this effect (CVE-2015-5307).\n\nThe get_bitmap_file function in drivers/md/md.c in the Linux kernel before\n4.1.6 does not initialize a certain bitmap data structure, which allows\nlocal users to obtain sensitive information from kernel memory via a\nGET_BITMAP_FILE ioctl call. (CVE-2015-5697)\n\nUse-after-free vulnerability in the path_openat function in fs/namei.c in\nthe Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a\ndenial of service or possibly have unspecified other impact via O_TMPFILE\nfilesystem operations that leverage a duplicate cleanup operation.\n(CVE-2015-5706)\n\nIt was discovered that an integer overflow error existed in the SCSIgeneric\n(sg) driver in the Linux kernel. A local attacker with writepermission to a\nSCSI generic device could use this to cause a denial of service (system\ncrash) or potentially escalate their privileges. (CVE-2015-5707)\n\nThe __rds_conn_create function in net/rds/connection.c in the Linux kernel\nthrough 4.2.3 allows local users to cause a denial of service (NULL pointer\ndereference and system crash) or possibly have unspecified other impact by\nusing a socket that was not properly bound (CVE-2015-6937).\n\nThe key_gc_unused_keys function in security/keys/gc.c in the Linux kernel\nthrough 4.2.6 allows local users to cause a denial of service (OOPS) via\ncrafted keyctl commands (CVE-2015-7872).\n\nThe vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in\nthe Linux kernel through 4.3.3 does not initialize a certain structure\nmember, which allows local users to obtain sensitive information from\nkernel memory via a crafted application (CVE-2015-7884).\n\nThe dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the\nLinux kernel through 4.3.3 does not initialize a certain structure member,\nwhich allows local users to obtain sensitive information from kernel memory\nvia a crafted application (CVE-2015-7885).\n\nA guest to host DoS issue was found affecting various hypervisors. In that,\na guest can DoS the host by triggering an infinite stream of \"debug check\"\n(#DB) exceptions. This causes the microcode to enter an infinite loop where\nthe core never receives another interrupt. The host kernel panics due to\nthis effect (CVE-2015-8104).\n\nFelix Wilhelm discovered a race condition in the Xen paravirtualized\ndrivers which can cause double fetch vulnerabilities. An attacker in the\nparavirtualized guest could exploit this flaw to cause a denial of service\n(crash the host) or potentially execute arbitrary code on the host\n(CVE-2015-8550 / XSA-155).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service (NULL dereference) on the host\n(CVE-2015-8551 / XSA-157).\n\nKonrad Rzeszutek Wilk discovered the Xen PCI backend driver does not\nperform sanity checks on the device's state. An attacker could exploit\nthis flaw to cause a denial of service by flooding the logging system\nwith WARN() messages causing the initial domain to exhaust disk space\n(CVE-2015-8552 / XSA-157).\n\nThe ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel\nthrough 4.3.3 attempts to merge distinct setattr operations, which allows\nlocal users to bypass intended access restrictions and modify the\nattributes of arbitrary overlay files via a crafted application\n(CVE-2015-8660).\n\nFor other upstream fixes, see the referenced changelogs.\n\nOther fixes in this update:\n* improve ath10k (QCA99X0, QCA988X, QCA6174) support (mga#16915)\n* silence a harmless warning on 32bit non-dt hardware (mga#17010)\n* fix regression with AlpsPS/2 ALPS DualPoint TouchPad of a Dell\n  Latitude D600 (mga#17034)\n","status":"published","published":"2016-01-14T01:44:39Z","modified":"2026-04-16T06:23:47.399673436Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10128-1","title":"kernel-debug-4.8.13-1.1 on GA media","description":"These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:10:12.688384Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:0585-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.53 to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel allowed local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls (bnc#955654).\n- CVE-2015-5707: Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request (bnc#940338).\n- CVE-2015-7550: The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel did not properly use a semaphore, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted application that leverages a race condition between keyctl_revoke and keyctl_read calls (bnc#958951).\n- CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936).\n- CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel did not validate attempted changes to the MTU value, which allowed context-dependent attackers to cause a denial of service (packet loss) via a value that was (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272 (bnc#955354).\n- CVE-2015-8539: The KEYS subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c (bnc#958463).\n- CVE-2015-8543: The networking implementation in the Linux kernel did not validate protocol identifiers for certain protocol families, which allowed local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application (bnc#958886).\n- CVE-2015-8550: Optimizations introduced by the compiler could have lead to double fetch vulnerabilities, potentially  possibly leading to arbitrary code execution in backend (bsc#957988).\n- CVE-2015-8551: Xen PCI backend driver did not perform proper sanity checks on the device's state, allowing for DoS (bsc#957990).\n- CVE-2015-8569: The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel did not verify an address length, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application (bnc#959190).\n- CVE-2015-8575: The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel did not verify an address length, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application (bnc#959399).\n- CVE-2015-8660: The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel attempted to merge distinct setattr operations, which allowed local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application (bnc#960281).\n- CVE-2015-8767: net/sctp/sm_sideeffect.c in the Linux kernel did not properly manage the relationship between a lock and a socket, which allowed local users to cause a denial of service (deadlock) via a crafted sctp_accept call (bnc#961509).\n- CVE-2015-8785: The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel allowed local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov (bnc#963765).\n- CVE-2016-0723: Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call (bnc#961500).\n- CVE-2016-2069: A race in invalidating paging structures that were not in use locally could have lead to disclosoure of information or arbitrary code exectution (bnc#963767).\n\nThe following non-security bugs were fixed:\n- ACPI: Introduce apic_id in struct processor to save parsed APIC id (bsc#959463).\n- ACPI: Make it possible to get local x2apic id via _MAT (bsc#959463).\n- ACPI: use apic_id and remove duplicated _MAT evaluation (bsc#959463).\n- ACPICA: Correctly cleanup after a ACPI table load failure (bnc#937261).\n- Add sd_mod to initrd modules. For some reason PowerVM backend can't work without sd_mod\n- Do not modify perf bias performance setting by default at boot (bnc#812259, bsc#959629).\n- Documentation: Document kernel.panic_on_io_nmi sysctl (bsc#940946, bsc#937444).\n- Driver for IBM System i/p VNIC protocol\n- Drop blktap patches from SLE12, since the driver is unsupported\n- Improve fairness when locking the per-superblock s_anon list (bsc#957525, bsc#941363).\n- Input: aiptek - fix crash on detecting device without endpoints (bnc#956708).\n- NFSD: Do not start lockd when only NFSv4 is running\n- NFSv4: Recovery of recalled read delegations is broken (bsc#956514).\n- Replace with 176bed1d vmstat: explicitly schedule per-cpu work on the CPU we need it to run on\n- Revert 'ipv6: add complete rcu protection around np-\u003eopt' (bnc#961257).\n- Revert 874bbfe60 workqueue: make sure delayed work run in local cpu 1. Without 22b886dd, 874bbfe60 leads to timer corruption. 2. With 22b886dd applied, victim of 1 reports performance regression (1,2 https://lkml.org/lkml/2016/2/4/618) 3. Leads to scheduling work to offlined CPU (bnc#959463). SLERT: 4. NO_HZ_FULL regressession, unbound delayed work timer is no longer deflected to a housekeeper CPU.\n- be2net: fix some log messages (bnc#855062, bnc#867583).\n- blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976).\n- blktap: refine mm tracking (bsc#952976).\n- block: Always check queue limits for cloned requests (bsc#902606).\n- block: Always check queue limits for cloned requests (bsc#902606).\n- bnx2x: Add new device ids under the Qlogic vendor (bnc#964821).\n- btrfs: Add qgroup tracing (bnc#935087, bnc#945649).\n- btrfs: Update btrfs qgroup status item when rescan is done (bnc#960300).\n- btrfs: backref: Add special time_seq == (u64)-1 case for btrfs_find_all_roots() (bnc#935087, bnc#945649).\n- btrfs: backref: Do not merge refs which are not for same block (bnc#935087, bnc#945649).\n- btrfs: delayed-ref: Cleanup the unneeded functions (bnc#935087, bnc#945649).\n- btrfs: delayed-ref: Use list to replace the ref_root in ref_head (bnc#935087, bnc#945649).\n- btrfs: extent-tree: Use ref_node to replace unneeded parameters in __inc_extent_ref() and __free_extent() (bnc#935087, bnc#945649).\n- btrfs: fix comp_oper to get right order (bnc#935087, bnc#945649).\n- btrfs: fix deadlock between direct IO write and defrag/readpages (bnc#965344).\n- btrfs: fix leak in qgroup_subtree_accounting() error path (bnc#935087, bnc#945649).\n- btrfs: fix order by which delayed references are run (bnc#949440).\n- btrfs: fix qgroup sanity tests (bnc#951615).\n- btrfs: fix race waiting for qgroup rescan worker (bnc#960300).\n- btrfs: fix regression running delayed references when using qgroups (bnc#951615).\n- btrfs: fix regression when running delayed references (bnc#951615).\n- btrfs: fix sleeping inside atomic context in qgroup rescan worker (bnc#960300).\n- btrfs: keep dropped roots in cache until transaction commit (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add function qgroup_update_counters() (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add function qgroup_update_refcnt() (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add new function to record old_roots (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add new qgroup calculation function btrfs_qgroup_account_extents() (bnc#935087, bnc#945649).\n- btrfs: qgroup: Add the ability to skip given qgroup for old/new_roots (bnc#935087, bnc#945649).\n- btrfs: qgroup: Cleanup open-coded old/new_refcnt update and read (bnc#935087, bnc#945649).\n- btrfs: qgroup: Cleanup the old ref_node-oriented mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: Do not copy extent buffer to do qgroup rescan (bnc#960300).\n- btrfs: qgroup: Fix a regression in qgroup reserved space (bnc#935087, bnc#945649).\n- btrfs: qgroup: Make snapshot accounting work with new extent-oriented qgroup (bnc#935087, bnc#945649).\n- btrfs: qgroup: Record possible quota-related extent for qgroup (bnc#935087, bnc#945649).\n- btrfs: qgroup: Switch rescan to new mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: Switch self test to extent-oriented qgroup mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: Switch to new extent-oriented qgroup mechanism (bnc#935087, bnc#945649).\n- btrfs: qgroup: account shared subtree during snapshot delete (bnc#935087, bnc#945649).\n- btrfs: qgroup: clear STATUS_FLAG_ON in disabling quota (bnc#960300).\n- btrfs: qgroup: exit the rescan worker during umount (bnc#960300).\n- btrfs: qgroup: fix quota disable during rescan (bnc#960300).\n- btrfs: qgroup: move WARN_ON() to the correct location (bnc#935087, bnc#945649).\n- btrfs: remove transaction from send (bnc#935087, bnc#945649).\n- btrfs: skip locking when searching commit root (bnc#963825).\n- btrfs: ulist: Add ulist_del() function (bnc#935087, bnc#945649).\n- btrfs: use btrfs_get_fs_root in resolve_indirect_ref (bnc#935087, bnc#945649).\n- crypto: nx - use common code for both NX decompress success cases (bsc#942476).\n- crypto: nx-842 - Mask XERS0 bit in return value (bsc#960221).\n- driver core: Add BUS_NOTIFY_REMOVED_DEVICE event (bnc#962965).\n- drivers/firmware/memmap.c: do not allocate firmware_map_entry of same memory range (bsc#959463).\n- drivers/firmware/memmap.c: do not create memmap sysfs of same firmware_map_entry (bsc#959463).\n- drivers/firmware/memmap.c: pass the correct argument to firmware_map_find_entry_bootmem() (bsc#959463).\n- e1000e: Do not read ICR in Other interrupt (bsc#924919).\n- e1000e: Do not write lsc to ics in msi-x mode (bsc#924919).\n- e1000e: Fix msi-x interrupt automask (bsc#924919).\n- e1000e: Remove unreachable code (bsc#924919).\n- fuse: break infinite loop in fuse_fill_write_pages() (bsc#963765).\n- group-source-files: mark module.lds as devel file ld: cannot open linker script file /usr/src/linux-4.2.5-1/arch/arm/kernel/module.lds: No such file or directory\n- ipv6: fix tunnel error handling (bsc#952579).\n- jbd2: Fix unreclaimed pages after truncate in data=journal mode (bsc#961516).\n- kABI: reintroduce blk_rq_check_limits.\n- kabi: protect struct acpi_processor signature (bsc#959463).\n- kernel/watchdog.c: perform all-CPU backtrace in case of hard lockup (bsc#940946, bsc#937444).\n- kernel: Change ASSIGN_ONCE(val, x) to WRITE_ONCE(x, val) (bsc#940946, bsc#937444).\n- kernel: Provide READ_ONCE and ASSIGN_ONCE (bsc#940946, bsc#937444).\n- kernel: inadvertent free of the vector register save area (bnc#961202).\n- kexec: Fix race between panic() and crash_kexec() (bsc#940946, bsc#937444).\n- kgr: Remove the confusing search for fentry\n- kgr: Safe way to avoid an infinite redirection\n- kgr: do not print error for !abort_if_missing symbols (bnc#943989).\n- kgr: do not use WQ_MEM_RECLAIM workqueue (bnc#963572).\n- kgr: log when modifying kernel\n- kgr: mark some more missed kthreads (bnc#962336).\n- kgr: usb/storage: do not emit thread awakened (bnc#899908).\n- kvm: Add arch specific mmu notifier for page invalidation (bsc#959463).\n- kvm: Make init_rmode_identity_map() return 0 on success (bsc#959463).\n- kvm: Remove ept_identity_pagetable from struct kvm_arch (bsc#959463).\n- kvm: Rename make_all_cpus_request() to kvm_make_all_cpus_request() and make it non-static (bsc#959463).\n- kvm: Use APIC_DEFAULT_PHYS_BASE macro as the apic access page address (bsc#959463).\n- kvm: vmx: Implement set_apic_access_page_addr (bsc#959463).\n- kvm: x86: Add request bit to reload APIC access page address (bsc#959463).\n- kvm: x86: Unpin and remove kvm_arch-\u003eapic_access_page (bsc#959463).\n- libiscsi: Fix host busy blocking during connection teardown.\n- lpfc: Fix null ndlp dereference in target_reset_handler (bsc#951392).\n- md/bitmap: do not pass -1 to bitmap_storage_alloc (bsc#955118).\n- md/bitmap: remove confusing code from filemap_get_page.\n- md/bitmap: remove rcu annotation from pointer arithmetic.\n- mem-hotplug: reset node managed pages when hot-adding a new pgdat (bsc#959463).\n- mem-hotplug: reset node present pages when hot-adding a new pgdat (bsc#959463).\n- memory-hotplug: clear pgdat which is allocated by bootmem in try_offline_node() (bsc#959463).\n- mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone() (VM Functionality, bnc#961588).\n- mm/mempolicy.c: convert the shared_policy lock to a rwlock (VM Performance, bnc#959436).\n- module: keep percpu symbols in module's symtab (bsc#962788).\n- nmi: provide the option to issue an NMI back trace to every cpu but current (bsc#940946, bsc#937444).\n- nmi: provide the option to issue an NMI back trace to every cpu but current (bsc#940946, bsc#937444).\n- nvme: Clear BIO_SEG_VALID flag in nvme_bio_split() (bsc#954992).\n- panic, x86: Allow CPUs to save registers even if looping in NMI context (bsc#940946, bsc#937444).\n- panic, x86: Fix re-entrance problem due to panic on NMI (bsc#940946, bsc#937444).\n- pci: Check for valid tags when calculating the VPD size (bsc#959146).\n- qeth: initialize net_device with carrier off (bnc#964230).\n- rpm/constraints.in: Bump disk space requirements up a bit Require 10GB on s390x, 20GB elsewhere.\n- rpm/kernel-binary.spec.in: Fix build if no UEFI certs are installed\n- rpm/kernel-binary.spec.in: Fix kernel-vanilla-devel dependency (bsc#959090)\n- rpm/kernel-binary.spec.in: Fix paths in kernel-vanilla-devel (bsc#959090).\n- rpm/kernel-binary.spec.in: Install libopenssl-devel for newer sign-file\n- rpm/kernel-binary.spec.in: Use bzip compression to speed up build (bsc#962356)\n- rpm/kernel-source.spec.in: Install kernel-macros for kernel-source-vanilla (bsc#959090)\n- rpm/kernel-spec-macros: Do not modify the release string in PTFs (bsc#963449)\n- rpm/package-descriptions: Add kernel-zfcpdump and drop -desktop\n- s390/cio: ensure consistent measurement state (bnc#964230).\n- s390/cio: fix measurement characteristics memleak (bnc#964230).\n- s390/cio: update measurement characteristics (bnc#964230).\n- s390/dasd: fix failfast for disconnected devices (bnc#961202).\n- s390/vtime: correct scaled cputime for SMT (bnc#964230).\n- s390/vtime: correct scaled cputime of partially idle CPUs (bnc#964230).\n- s390/vtime: limit MT scaling value updates (bnc#964230).\n- sched,numa: cap pte scanning overhead to 3% of run time (Automatic NUMA Balancing).\n- sched/fair: Care divide error in update_task_scan_period() (bsc#959463).\n- sched/fair: Disable tg load_avg/runnable_avg update for root_task_group (bnc#960227).\n- sched/fair: Move cache hot load_avg/runnable_avg into separate cacheline (bnc#960227).\n- sched/numa: Cap PTE scanning overhead to 3% of run time (Automatic NUMA Balancing).\n- sched: Fix race between task_group and sched_task_group (Automatic NUMA Balancing).\n- scsi: restart list search after unlock in scsi_remove_target (bsc#944749, bsc#959257).\n- supported.conf: Add more QEMU and VMware drivers to -base (bsc#965840).\n- supported.conf: Add netfilter modules to base (bsc#950292)\n- supported.conf: Add nls_iso8859-1 and nls_cp437 to -base (bsc#950292)\n- supported.conf: Add vfat to -base to be able to mount the ESP (bsc#950292).\n- supported.conf: Add virtio_{blk,net,scsi} to kernel-default-base (bsc#950292)\n- supported.conf: Also add virtio_pci to kernel-default-base (bsc#950292).\n- supported.conf: drop +external from ghash-clmulni-intel It was agreed that it does not make sense to maintain 'external' for this specific module. Furthermore it causes problems in rather ordinary VMware environments. (bsc#961971)\n- udp: properly support MSG_PEEK with truncated buffers (bsc#951199 bsc#959364).\n- x86, xsave: Support eager-only xsave features, add MPX support (bsc#938577).\n- x86/apic: Introduce apic_extnmi command line parameter (bsc#940946, bsc#937444).\n- x86/fpu/xstate: Do not assume the first zero xfeatures zero bit means the end (bsc#938577).\n- x86/fpu: Fix double-increment in setup_xstate_features() (bsc#938577).\n- x86/fpu: Remove xsave_init() bootmem allocations (bsc#938577).\n- x86/nmi: Save regs in crash dump on external NMI (bsc#940946, bsc#937444).\n- x86/nmi: Save regs in crash dump on external NMI (bsc#940946, bsc#937444).\n- xen/pciback: Do not allow MSI-X ops if PCI_COMMAND_MEMORY is not set (bsc#957990 XSA-157).\n- xfs: add a few more verifier tests (bsc#947953).\n- xfs: fix double free in xlog_recover_commit_trans (bsc#947953).\n- xfs: recovery of XLOG_UNMOUNT_TRANS leaks memory (bsc#947953).\n","status":"published","published":"2016-02-25T16:23:22Z","modified":"2026-02-04T04:40:40.107871Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0751-1","title":"Security update for kernel live patch 0","description":"\nThis kernel live patch for Linux Kernel 3.12.49-11.1 fixes three security\nissues:\n\nFixes:\n- CVE-2016-0728: A reference leak in keyring handling with\n  join_session_keyring() could lead to local attackers gain root\n  privileges. (bsc#962078).\n- CVE-2015-8660: The ovl_setattr function in fs/overlayfs/inode.c in the\n  Linux kernel through 4.3.3 attempts to merge distinct setattr\n  operations, which allows local users to bypass intended access\n  restrictions and modify the attributes of arbitrary overlay files via\n  a crafted application. (bsc#960329)\n- CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in\n  the Linux kernel allowed local users to bypass intended AF_UNIX socket\n  permissions or cause a denial of service (panic) via crafted epoll_ctl\n  calls. (bsc#955837)\n","status":"published","published":"2016-03-14T13:30:56Z","modified":"2026-02-04T02:48:16.216617Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0752-1","title":"Security update for kernel live patch 2","description":"\nThis kernel live patch for Linux Kernel 3.12.51-60.25.1 fixes three security\nissues:\n\nFixes:\n- CVE-2016-0728: A reference leak in keyring handling with\n  join_session_keyring() could lead to local attackers gain root\n  privileges. (bsc#962078).\n- CVE-2015-8660: The ovl_setattr function in fs/overlayfs/inode.c in the\n  Linux kernel through 4.3.3 attempts to merge distinct setattr\n  operations, which allows local users to bypass intended access\n  restrictions and modify the attributes of arbitrary overlay files via\n  a crafted application. (bsc#960329)\n- CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in\n  the Linux kernel allowed local users to bypass intended AF_UNIX socket\n  permissions or cause a denial of service (panic) via crafted epoll_ctl\n  calls. (bsc#955837)\n","status":"published","published":"2016-03-14T13:31:11Z","modified":"2026-02-04T03:43:15.219114Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0755-1","title":"Security update for kernel live patch 1","description":"\nThis kernel live patch for Linux Kernel 3.12.51-60.20.2 fixes three security\nissues:\n\nFixes:\n- CVE-2016-0728: A reference leak in keyring handling with\n  join_session_keyring() could lead to local attackers gain root\n  privileges. (bsc#962078).\n- CVE-2015-8660: The ovl_setattr function in fs/overlayfs/inode.c in the\n  Linux kernel through 4.3.3 attempts to merge distinct setattr\n  operations, which allows local users to bypass intended access\n  restrictions and modify the attributes of arbitrary overlay files via\n  a crafted application. (bsc#960329)\n- CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in\n  the Linux kernel allowed local users to bypass intended AF_UNIX socket\n  permissions or cause a denial of service (panic) via crafted epoll_ctl\n  calls. (bsc#955837)\n","status":"published","published":"2016-03-14T13:31:04Z","modified":"2026-02-04T03:59:55.667542Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2857-2","title":"linux-lts-vivid vulnerability","description":"Nathan Williams discovered that overlayfs in the Linux kernel incorrectly\nhandled setattr operations. A local unprivileged attacker could use this to\ncreate files with administrative permission attributes and execute\narbitrary code with elevated privileges.\n","status":"published","published":"2016-01-05T21:03:17Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2858-2","title":"linux-lts-wily vulnerability","description":"Nathan Williams discovered that overlayfs in the Linux kernel incorrectly\nhandled setattr operations. A local unprivileged attacker could use this to\ncreate files with administrative permission attributes and execute\narbitrary code with elevated privileges.\n","status":"published","published":"2016-01-05T21:27:00Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}