{"id":"CVE-2016-3955","aliases":["DEBIAN-CVE-2016-3955","DLA-516-1","DSA-3607-1","EUVD-2016-4965","GHSA-4chg-535w-wpv8","SUSE-SU-2016:1203-1","SUSE-SU-2016:2245-1","UBUNTU-CVE-2016-3955","USN-2965-1","USN-2965-2","USN-2965-3","USN-2965-4","USN-2989-1","USN-3000-1","USN-3001-1","USN-3002-1"],"status":"published","title":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5...","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.25294,"percentile":0.97952,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-119"],"published":"2016-04-20T00:00:00Z","modified":"2026-10-28T08:17:28Z","exploits":[{"source":"pocgithub","id":"pqsec/uboatdemo","title":"pqsec/uboatdemo","date":"2017-03-29","url":"https://github.com/pqsec/uboatdemo"}],"fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["4.5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["4.5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["4.5.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-87.133"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-73.95~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","fixed_in":["3.19.0-61.69~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","fixed_in":["4.2.0-38.45~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-22.39~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-22.39"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1010.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","fixed_in":["4.4.0-1013.14"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.81-1"}]}],"versions":["3.2.41-2","3.2.41-2+deb7u1","3.2.41-2+deb7u2","3.2.41-2+deb7u2~bpo60+1","3.2.46-1","3.2.46-1+deb7u1","3.2.46-1+deb7u1~bpo60+1","3.2.46-1~bpo60+1","3.2.51-1","3.2.51-1~bpo60+1","3.2.53-1","3.2.53-2","3.2.54-1","3.2.54-2","3.2.54-2~bpo60+1","3.2.57-1","3.2.57-2","3.2.57-3","3.2.57-3+deb7u1","3.2.57-3+deb7u2","3.2.57-3+deb7u2~bpo60+1","3.2.60-1","3.2.60-1+deb7u1","3.2.60-1+deb7u2","3.2.60-1+deb7u3","3.2.60-1+deb7u3~bpo60+1","3.2.63-1","3.2.63-2","3.2.63-2+deb7u1","3.2.63-2+deb7u1~bpo60+1","3.2.63-2+deb7u2","3.2.63-2+deb7u2~bpo60+1","3.2.65-1","3.2.65-1+deb7u1","3.2.65-1+deb7u1~bpo60+1","3.2.65-1+deb7u2","3.2.65-1+deb7u2~bpo60+1","3.2.68-1","3.2.68-1+deb7u1","3.2.68-1+deb7u1~bpo60+1","3.2.68-1+deb7u2","3.2.68-1+deb7u2~bpo60+1","3.2.68-1+deb7u3","3.2.68-1+deb7u3~bpo60+1","3.2.68-1+deb7u4","3.2.68-1+deb7u4~bpo60+1","3.2.68-1+deb7u5","3.2.68-1+deb7u6","3.2.68-1+deb7u6~bpo60+1","3.2.71-1","3.2.71-2","3.2.73-1","3.2.73-2","3.2.73-2+deb7u1","3.2.73-2+deb7u2","3.2.73-2+deb7u2~bpo60+1","3.2.73-2+deb7u3","3.2.78-1"],"bundled":27},{"source":"osv","ecosystem":"Debian:8","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.7-ckt25-2+deb8u2"}]}],"versions":["3.16.7-ckt11-1","3.16.7-ckt11-1+deb8u1","3.16.7-ckt11-1+deb8u2","3.16.7-ckt11-1+deb8u2~bpo70+1","3.16.7-ckt11-1+deb8u3","3.16.7-ckt11-1+deb8u3~bpo70+1","3.16.7-ckt11-1+deb8u4","3.16.7-ckt11-1+deb8u4~bpo70+1","3.16.7-ckt11-1+deb8u5","3.16.7-ckt11-1+deb8u6","3.16.7-ckt11-1+deb8u6~bpo70+1","3.16.7-ckt11-1~bpo70+1","3.16.7-ckt17-1","3.16.7-ckt20-1","3.16.7-ckt20-1+deb8u1","3.16.7-ckt20-1+deb8u2","3.16.7-ckt20-1+deb8u2~bpo70+1","3.16.7-ckt20-1+deb8u3","3.16.7-ckt20-1+deb8u3~bpo70+1","3.16.7-ckt20-1+deb8u4","3.16.7-ckt20-1+deb8u4~bpo70+1","3.16.7-ckt25-1","3.16.7-ckt25-1~bpo70+1","3.16.7-ckt25-2","3.16.7-ckt25-2+deb8u1","3.16.7-ckt25-2~bpo70+1","3.16.7-ckt9-2","3.16.7-ckt9-3","3.16.7-ckt9-3~deb8u1","3.16.7-ckt9-3~deb8u1~bpo70+1"],"bundled":37},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.79.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager 2.1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Manager Proxy 2.1","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.86.1"}]}],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-87.133"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-73.95~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1","3.16.0-52.71~14.04.1","3.16.0-53.72~14.04.1","3.16.0-55.74~14.04.1","3.16.0-56.75~14.04.1","3.16.0-57.77~14.04.1","3.16.0-59.79~14.04.1","3.16.0-60.80~14.04.1","3.16.0-62.82~14.04.1","3.16.0-62.83~14.04.1","3.16.0-67.87~14.04.1","3.16.0-69.89~14.04.1","3.16.0-70.90~14.04.1","3.16.0-71.91~14.04.1","3.16.0-71.92~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-61.69~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1","3.19.0-58.64~14.04.1","3.19.0-59.65~14.04.1","3.19.0-59.66~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-38.45~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1","4.2.0-34.39~14.04.1","4.2.0-35.40~14.04.1","4.2.0-36.41~14.04.1","4.2.0-36.42~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-22.39~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-22.39"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1010.12"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1013.14"}]}],"versions":["4.4.0-1012.12"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1","5.15.0-1029.36~20.04.1.1","5.15.0-1030.37~20.04.1.1","5.15.0-1031.38~20.04.1.1","5.15.0-1033.40~20.04.1.1","5.15.0-1034.41~20.04.1.2","5.15.0-1035.42~20.04.1.1","5.15.0-1036.43~20.04.1.1","5.15.0-1037.44~20.04.1.1","5.15.0-1038.45~20.04.1.1","5.15.0-1039.46~20.04.1.1","5.15.0-1040.47~20.04.1.1","5.15.0-1041.48~20.04.1.1","5.15.0-1042.49~20.04.1.1","5.15.0-1043.50~20.04.1.1","5.15.0-1046.53~20.04.1.1","5.15.0-1047.54~20.04.1.1","5.15.0-1049.56~20.04.1.1","5.15.0-1050.57~20.04.1.1","5.15.0-1051.59~20.04.1.1","5.15.0-1052.60~20.04.1.1","5.15.0-1053.61~20.04.1.1","5.15.0-1054.62~20.04.1.1","5.15.0-1056.64~20.04.1.1","5.15.0-1057.65~20.04.1.1","5.15.0-1058.66~20.04.2.1","5.15.0-1059.67~20.04.1.1","5.15.0-1060.69~20.04.1.1","5.15.0-1061.70~20.04.1.1","5.15.0-1063.72~20.04.1.1","5.15.0-1064.73~20.04.1.1","5.15.0-1065.74~20.04.1.1","5.15.0-1067.76~20.04.1.1","5.15.0-1068.77~20.04.1.1","5.15.0-1070.79~20.04.1.1","5.15.0-1071.80~20.04.1.1","5.15.0-1072.81~20.04.1.1","5.15.0-1073.82~20.04.1.1","5.15.0-1074.83~20.04.1.1","5.15.0-1076.85~20.04.1.1","5.15.0-1078.87~20.04.1.1","5.15.0-1081.90~20.04.1.1","5.15.0-1082.91~20.04.1.1","5.15.0-1086.95~20.04.1.1","5.15.0-1087.96~20.04.1.1","5.15.0-1088.97~20.04.1.1","5.15.0-1089.98~20.04.1.1","5.15.0-1091.100~20.04.1.1","5.15.0-1094.103~20.04.1.1","5.15.0-1096.105~20.04.1.1","5.15.0-1097.106~20.04.1.1","5.15.0-1098.107~20.04.1.1","5.15.0-1102.111~20.04.1.1","5.15.0-1103.112~20.04.1.1","5.15.0-1111.120~20.04.1.1","5.15.0-1114.123~20.04.1","5.15.0-1116.125~20.04.1","5.15.0-1117.126~20.04.2","5.15.0-1118.127~20.04.1","5.15.0-1119.128~20.04.1","5.15.0-1120.129~20.04.1","5.15.0-1121.130~20.04.1","5.15.0-1122.131~20.04.1","5.15.0-1124.133~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1008.8~24.04.1","6.11.0-1012.12~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1017.17~24.04.1","6.11.0-1018.18~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1006.6~24.04.2","6.11.0-1011.11~24.04.1","6.11.0-1013.13~24.04.1","6.11.0-1014.14~24.04.1","6.11.0-1015.15~24.04.1","6.11.0-1016.16~24.04.1","6.11.0-1017.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-17.17~24.04.2","6.11.0-19.19~24.04.1","6.11.0-21.21~24.04.1","6.11.0-24.24~24.04.1","6.11.0-25.25~24.04.1","6.11.0-26.26~24.04.1","6.11.0-28.28~24.04.1","6.11.0-29.29~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency-hwe-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.0-1009.10~24.04.1","6.11.0-1011.12~24.04.1","6.11.0-1012.13~24.04.1","6.11.0-1013.14~24.04.1","6.11.0-1014.15~24.04.1","6.11.0-1015.16~24.04.2","6.11.0-1016.17~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.1","6.8.0-55.57.1","6.8.0-56.58.1","6.8.0-57.59.1","6.8.0-58.60.1","6.8.0-59.61.1","6.8.0-60.63.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-22.39"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-22.39~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1"],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1010.12"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-snapdragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1013.14"}]}],"versions":["4.4.0-1012.12"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-87.133"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55","3.13.0-32.57","3.13.0-33.58","3.13.0-34.60","3.13.0-35.62","3.13.0-36.63","3.13.0-37.64","3.13.0-39.66","3.13.0-40.69","3.13.0-41.70","3.13.0-43.72","3.13.0-44.73","3.13.0-45.74","3.13.0-46.75","3.13.0-46.76","3.13.0-46.77","3.13.0-46.79","3.13.0-48.80","3.13.0-49.81","3.13.0-49.83","3.13.0-51.84","3.13.0-52.85","3.13.0-52.86","3.13.0-53.88","3.13.0-53.89","3.13.0-54.91","3.13.0-55.92","3.13.0-55.94","3.13.0-57.95","3.13.0-58.97","3.13.0-59.98","3.13.0-61.100","3.13.0-62.102","3.13.0-63.103","3.13.0-65.105","3.13.0-65.106","3.13.0-66.108","3.13.0-67.110","3.13.0-68.111","3.13.0-70.113","3.13.0-71.114","3.13.0-73.116","3.13.0-74.118","3.13.0-76.120","3.13.0-77.121","3.13.0-79.123","3.13.0-83.127","3.13.0-85.129","3.13.0-86.130","3.13.0-86.131"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-73.95~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1","3.16.0-28.38~14.04.1","3.16.0-29.39~14.04.1","3.16.0-30.40~14.04.1","3.16.0-31.41~14.04.1","3.16.0-31.43~14.04.1","3.16.0-33.44~14.04.1","3.16.0-34.45~14.04.1","3.16.0-34.47~14.04.1","3.16.0-36.48~14.04.1","3.16.0-37.49~14.04.1","3.16.0-37.51~14.04.1","3.16.0-38.52~14.04.1","3.16.0-39.53~14.04.1","3.16.0-40.54~14.04.1","3.16.0-41.55~14.04.1","3.16.0-41.57~14.04.1","3.16.0-43.58~14.04.1","3.16.0-44.59~14.04.1","3.16.0-45.60~14.04.1","3.16.0-46.62~14.04.1","3.16.0-48.64~14.04.1","3.16.0-49.65~14.04.1","3.16.0-50.66~14.04.1","3.16.0-50.67~14.04.1","3.16.0-51.69~14.04.1","3.16.0-52.71~14.04.1","3.16.0-53.72~14.04.1","3.16.0-55.74~14.04.1","3.16.0-56.75~14.04.1","3.16.0-57.77~14.04.1","3.16.0-59.79~14.04.1","3.16.0-60.80~14.04.1","3.16.0-62.82~14.04.1","3.16.0-62.83~14.04.1","3.16.0-67.87~14.04.1","3.16.0-69.89~14.04.1","3.16.0-70.90~14.04.1","3.16.0-71.91~14.04.1","3.16.0-71.92~14.04.1"],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-vivid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-61.69~14.04.1"}]}],"versions":["3.19.0-18.18~14.04.1","3.19.0-20.20~14.04.1","3.19.0-21.21~14.04.1","3.19.0-22.22~14.04.1","3.19.0-23.24~14.04.1","3.19.0-25.26~14.04.1","3.19.0-26.28~14.04.1","3.19.0-28.30~14.04.1","3.19.0-30.33~14.04.1","3.19.0-30.34~14.04.1","3.19.0-31.36~14.04.1","3.19.0-32.37~14.04.1","3.19.0-33.38~14.04.1","3.19.0-37.42~14.04.1","3.19.0-39.44~14.04.1","3.19.0-41.46~14.04.2","3.19.0-42.48~14.04.1","3.19.0-43.49~14.04.1","3.19.0-47.53~14.04.1","3.19.0-49.55~14.04.1","3.19.0-51.57~14.04.1","3.19.0-51.58~14.04.1","3.19.0-56.62~14.04.1","3.19.0-58.64~14.04.1","3.19.0-59.65~14.04.1","3.19.0-59.66~14.04.1"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-wily","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-38.45~14.04.1"}]}],"versions":["4.2.0-18.22~14.04.1","4.2.0-19.23~14.04.1","4.2.0-21.25~14.04.1","4.2.0-22.27~14.04.1","4.2.0-23.28~14.04.1","4.2.0-25.30~14.04.1","4.2.0-27.32~14.04.1","4.2.0-30.35~14.04.1","4.2.0-30.36~14.04.1","4.2.0-34.39~14.04.1","4.2.0-35.40~14.04.1","4.2.0-36.41~14.04.1","4.2.0-36.42~14.04.1"],"bundled":12}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-3004-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3001-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2997-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3000-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3607","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3002-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2996-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328478","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.ubuntu.com/usn/USN-2989-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3003-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/86534","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2998-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/19/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3955"},{"url":"https://github.com/advisories/GHSA-4chg-535w-wpv8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-3955","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161203-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/758040","tags":["report"]},{"url":"https://bugzilla.suse.com/781018","tags":["report"]},{"url":"https://bugzilla.suse.com/879378","tags":["report"]},{"url":"https://bugzilla.suse.com/879381","tags":["report"]},{"url":"https://bugzilla.suse.com/904035","tags":["report"]},{"url":"https://bugzilla.suse.com/924919","tags":["report"]},{"url":"https://bugzilla.suse.com/934787","tags":["report"]},{"url":"https://bugzilla.suse.com/935123","tags":["report"]},{"url":"https://bugzilla.suse.com/937444","tags":["report"]},{"url":"https://bugzilla.suse.com/939955","tags":["report"]},{"url":"https://bugzilla.suse.com/940017","tags":["report"]},{"url":"https://bugzilla.suse.com/940413","tags":["report"]},{"url":"https://bugzilla.suse.com/940913","tags":["report"]},{"url":"https://bugzilla.suse.com/940946","tags":["report"]},{"url":"https://bugzilla.suse.com/941514","tags":["report"]},{"url":"https://bugzilla.suse.com/942082","tags":["report"]},{"url":"https://bugzilla.suse.com/946122","tags":["report"]},{"url":"https://bugzilla.suse.com/947128","tags":["report"]},{"url":"https://bugzilla.suse.com/948330","tags":["report"]},{"url":"https://bugzilla.suse.com/949298","tags":["report"]},{"url":"https://bugzilla.suse.com/949752","tags":["report"]},{"url":"https://bugzilla.suse.com/949936","tags":["report"]},{"url":"https://bugzilla.suse.com/950750","tags":["report"]},{"url":"https://bugzilla.suse.com/950998","tags":["report"]},{"url":"https://bugzilla.suse.com/951392","tags":["report"]},{"url":"https://bugzilla.suse.com/952976","tags":["report"]},{"url":"https://bugzilla.suse.com/954628","tags":["report"]},{"url":"https://bugzilla.suse.com/955308","tags":["report"]},{"url":"https://bugzilla.suse.com/955354","tags":["report"]},{"url":"https://bugzilla.suse.com/955654","tags":["report"]},{"url":"https://bugzilla.suse.com/955673","tags":["report"]},{"url":"https://bugzilla.suse.com/956375","tags":["report"]},{"url":"https://bugzilla.suse.com/956514","tags":["report"]},{"url":"https://bugzilla.suse.com/956707","tags":["report"]},{"url":"https://bugzilla.suse.com/956708","tags":["report"]},{"url":"https://bugzilla.suse.com/956709","tags":["report"]},{"url":"https://bugzilla.suse.com/956852","tags":["report"]},{"url":"https://bugzilla.suse.com/956949","tags":["report"]},{"url":"https://bugzilla.suse.com/957988","tags":["report"]},{"url":"https://bugzilla.suse.com/957990","tags":["report"]},{"url":"https://bugzilla.suse.com/958463","tags":["report"]},{"url":"https://bugzilla.suse.com/958886","tags":["report"]},{"url":"https://bugzilla.suse.com/958906","tags":["report"]},{"url":"https://bugzilla.suse.com/958912","tags":["report"]},{"url":"https://bugzilla.suse.com/958951","tags":["report"]},{"url":"https://bugzilla.suse.com/959190","tags":["report"]},{"url":"https://bugzilla.suse.com/959312","tags":["report"]},{"url":"https://bugzilla.suse.com/959399","tags":["report"]},{"url":"https://bugzilla.suse.com/959705","tags":["report"]},{"url":"https://bugzilla.suse.com/960857","tags":["report"]},{"url":"https://bugzilla.suse.com/961500","tags":["report"]},{"url":"https://bugzilla.suse.com/961509","tags":["report"]},{"url":"https://bugzilla.suse.com/961512","tags":["report"]},{"url":"https://bugzilla.suse.com/961516","tags":["report"]},{"url":"https://bugzilla.suse.com/961518","tags":["report"]},{"url":"https://bugzilla.suse.com/963276","tags":["report"]},{"url":"https://bugzilla.suse.com/963765","tags":["report"]},{"url":"https://bugzilla.suse.com/963767","tags":["report"]},{"url":"https://bugzilla.suse.com/963998","tags":["report"]},{"url":"https://bugzilla.suse.com/964201","tags":["report"]},{"url":"https://bugzilla.suse.com/965319","tags":["report"]},{"url":"https://bugzilla.suse.com/965923","tags":["report"]},{"url":"https://bugzilla.suse.com/966437","tags":["report"]},{"url":"https://bugzilla.suse.com/966693","tags":["report"]},{"url":"https://bugzilla.suse.com/967863","tags":["report"]},{"url":"https://bugzilla.suse.com/967972","tags":["report"]},{"url":"https://bugzilla.suse.com/967973","tags":["report"]},{"url":"https://bugzilla.suse.com/967974","tags":["report"]},{"url":"https://bugzilla.suse.com/967975","tags":["report"]},{"url":"https://bugzilla.suse.com/968010","tags":["report"]},{"url":"https://bugzilla.suse.com/968011","tags":["report"]},{"url":"https://bugzilla.suse.com/968012","tags":["report"]},{"url":"https://bugzilla.suse.com/968013","tags":["report"]},{"url":"https://bugzilla.suse.com/968141","tags":["report"]},{"url":"https://bugzilla.suse.com/968670","tags":["report"]},{"url":"https://bugzilla.suse.com/969307","tags":["report"]},{"url":"https://bugzilla.suse.com/970504","tags":["report"]},{"url":"https://bugzilla.suse.com/970892","tags":["report"]},{"url":"https://bugzilla.suse.com/970909","tags":["report"]},{"url":"https://bugzilla.suse.com/970911","tags":["report"]},{"url":"https://bugzilla.suse.com/970948","tags":["report"]},{"url":"https://bugzilla.suse.com/970956","tags":["report"]},{"url":"https://bugzilla.suse.com/970958","tags":["report"]},{"url":"https://bugzilla.suse.com/970970","tags":["report"]},{"url":"https://bugzilla.suse.com/971124","tags":["report"]},{"url":"https://bugzilla.suse.com/971125","tags":["report"]},{"url":"https://bugzilla.suse.com/971360","tags":["report"]},{"url":"https://bugzilla.suse.com/973570","tags":["report"]},{"url":"https://bugzilla.suse.com/974646","tags":["report"]},{"url":"https://bugzilla.suse.com/975945","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3955","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162245-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/839104","tags":["report"]},{"url":"https://bugzilla.suse.com/866130","tags":["report"]},{"url":"https://bugzilla.suse.com/919351","tags":["report"]},{"url":"https://bugzilla.suse.com/944309","tags":["report"]},{"url":"https://bugzilla.suse.com/960689","tags":["report"]},{"url":"https://bugzilla.suse.com/962404","tags":["report"]},{"url":"https://bugzilla.suse.com/963655","tags":["report"]},{"url":"https://bugzilla.suse.com/963762","tags":["report"]},{"url":"https://bugzilla.suse.com/966460","tags":["report"]},{"url":"https://bugzilla.suse.com/969149","tags":["report"]},{"url":"https://bugzilla.suse.com/970114","tags":["report"]},{"url":"https://bugzilla.suse.com/971126","tags":["report"]},{"url":"https://bugzilla.suse.com/971446","tags":["report"]},{"url":"https://bugzilla.suse.com/971729","tags":["report"]},{"url":"https://bugzilla.suse.com/971944","tags":["report"]},{"url":"https://bugzilla.suse.com/974428","tags":["report"]},{"url":"https://bugzilla.suse.com/978401","tags":["report"]},{"url":"https://bugzilla.suse.com/978821","tags":["report"]},{"url":"https://bugzilla.suse.com/978822","tags":["report"]},{"url":"https://bugzilla.suse.com/979213","tags":["report"]},{"url":"https://bugzilla.suse.com/979274","tags":["report"]},{"url":"https://bugzilla.suse.com/979548","tags":["report"]},{"url":"https://bugzilla.suse.com/979681","tags":["report"]},{"url":"https://bugzilla.suse.com/979867","tags":["report"]},{"url":"https://bugzilla.suse.com/979879","tags":["report"]},{"url":"https://bugzilla.suse.com/980371","tags":["report"]},{"url":"https://bugzilla.suse.com/980725","tags":["report"]},{"url":"https://bugzilla.suse.com/980788","tags":["report"]},{"url":"https://bugzilla.suse.com/980931","tags":["report"]},{"url":"https://bugzilla.suse.com/981267","tags":["report"]},{"url":"https://bugzilla.suse.com/983143","tags":["report"]},{"url":"https://bugzilla.suse.com/983213","tags":["report"]},{"url":"https://bugzilla.suse.com/983535","tags":["report"]},{"url":"https://bugzilla.suse.com/984107","tags":["report"]},{"url":"https://bugzilla.suse.com/984755","tags":["report"]},{"url":"https://bugzilla.suse.com/986362","tags":["report"]},{"url":"https://bugzilla.suse.com/986365","tags":["report"]},{"url":"https://bugzilla.suse.com/986445","tags":["report"]},{"url":"https://bugzilla.suse.com/986572","tags":["report"]},{"url":"https://bugzilla.suse.com/987709","tags":["report"]},{"url":"https://bugzilla.suse.com/988065","tags":["report"]},{"url":"https://bugzilla.suse.com/989152","tags":["report"]},{"url":"https://bugzilla.suse.com/989401","tags":["report"]},{"url":"https://bugzilla.suse.com/991608","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6480","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-3955","tags":["report"]},{"url":"https://git.kernel.org/linus/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2965-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2965-4","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2965-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2965-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2989-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2996-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2997-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2998-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3000-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3001-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3002-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3003-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3004-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-4004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4486","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-1583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-3961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-4565","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-3955","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","status":"published","published":"2016-07-03T21:00:00Z","modified":"2024-08-06T00:10:31.961Z","updated_at":"2026-11-02T14:33:34.094161Z"}],"euvd":[{"id":"EUVD-2016-4965","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","status":"published","published":"2016-07-03T21:00:00Z","modified":"2024-08-06T00:10:31Z","updated_at":"2026-11-03T02:22:48.690835Z"}],"ghsa":[{"id":"GHSA-4chg-535w-wpv8","title":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5...","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","status":"published","published":"2022-05-17T03:41:30Z","modified":"2023-02-02T05:04:25Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:51:52.184259Z"}],"nvd":[{"id":"CVE-2016-3955","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","status":"published","published":"2016-07-03T21:59:15.137Z","modified":"2026-06-17T00:46:37.993Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:27.736698Z"}],"osv":[{"id":"CVE-2016-3955","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","status":"published","published":"2016-07-03T21:59:15.137Z","modified":"2026-03-15T22:22:05.850093Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"DEBIAN-CVE-2016-3955","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","status":"published","published":"2016-07-03T21:59:15.137Z","modified":"2026-09-22T07:01:59.242658527Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-3955","description":"The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.","status":"published","published":"2016-04-20T00:00:00Z","modified":"2026-10-28T08:17:28.526035179Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"DLA-516-1","title":"linux - security update","status":"published","published":"2016-06-16T00:00:00Z","modified":"2026-03-09T02:09:02.353939Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3607-1","title":"linux - security update","status":"published","published":"2016-06-28T00:00:00Z","modified":"2026-03-09T01:21:44.956801Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"SUSE-SU-2016:1203-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in\n  the Linux kernel allowed local users to bypass intended AF_UNIX socket\n  permissions or cause a denial of service (panic) via crafted epoll_ctl\n  calls (bnc#955654).\n- CVE-2015-7509: fs/ext4/namei.c in the Linux kernel allowed physically\n  proximate attackers to cause a denial of service (system crash) via\n  a crafted no-journal filesystem, a related issue to CVE-2013-2015\n  (bnc#956707).\n- CVE-2015-7515: An out of bounds memory access in the aiptek USB\n  driver could be used by physical local attackers to crash the kernel\n  (bnc#956708).\n- CVE-2015-7550: The keyctl_read_key function in security/keys/keyctl.c\n  in the Linux kernel did not properly use a semaphore, which allowed\n  local users to cause a denial of service (NULL pointer dereference and\n  system crash) or possibly have unspecified other impact via a crafted\n  application that leverages a race condition between keyctl_revoke and\n  keyctl_read calls (bnc#958951).\n- CVE-2015-7566: A malicious USB device could cause kernel crashes in\n  the visor device driver (bnc#961512).\n- CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in\n  the Linux kernel did not ensure that certain slot numbers are valid,\n  which allowed local users to cause a denial of service (NULL pointer\n  dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call\n  (bnc#949936).\n- CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux\n  kernel did not validate attempted changes to the MTU value, which allowed\n  context-dependent attackers to cause a denial of service (packet loss)\n  via a value that is (1) smaller than the minimum compliant value or\n  (2) larger than the MTU of an interface, as demonstrated by a Router\n  Advertisement (RA) message that is not validated by a daemon, a different\n  vulnerability than CVE-2015-0272.  NOTE: the scope of CVE-2015-0272 is\n  limited to the NetworkManager product (bnc#955354).\n- CVE-2015-8539: The KEYS subsystem in the Linux kernel allowed\n  local users to gain privileges or cause a denial of service (BUG)\n  via crafted keyctl commands that negatively instantiate a key, related\n  to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c,\n  and security/keys/user_defined.c (bnc#958463).\n- CVE-2015-8543: The networking implementation in the Linux kernel\n  did not validate protocol identifiers for certain protocol families,\n  which allowed local users to cause a denial of service (NULL function\n  pointer dereference and system crash) or possibly gain privileges by\n  leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application\n  (bnc#958886).\n- CVE-2015-8550: Optimizations introduced by the compiler could have\n  lead to double fetch vulnerabilities, potentially possibly leading to\n  arbitrary code execution in backend (bsc#957988). (bsc#957988 XSA-155).\n- CVE-2015-8551: The PCI backend driver in Xen, when running on an\n  x86 system and using Linux as the driver domain, allowed local guest\n  administrators to hit BUG conditions and cause a denial of service\n  (NULL pointer dereference and host OS crash) by leveraging a system with\n  access to a passed-through MSI or MSI-X capable physical PCI device\n  and a crafted sequence of XEN_PCI_OP_* operations, aka 'Linux pciback\n  missing sanity checks (bnc#957990).\n- CVE-2015-8552: The PCI backend driver in Xen, when running on an\n  x86 system and using Linux as the driver domain, allowed local guest\n  administrators to generate a continuous stream of WARN messages and\n  cause a denial of service (disk consumption) by leveraging a system with\n  access to a passed-through MSI or MSI-X capable physical PCI device and\n  XEN_PCI_OP_enable_msi operations, aka 'Linux pciback missing sanity checks\n  (bnc#957990).\n- CVE-2015-8569: The (1) pptp_bind and (2) pptp_connect functions in\n  drivers/net/ppp/pptp.c in the Linux kernel do not verify an address\n  length, which allowed local users to obtain sensitive information from\n  kernel memory and bypass the KASLR protection mechanism via a crafted\n  application (bnc#959190).\n- CVE-2015-8575: The sco_sock_bind function in net/bluetooth/sco.c in\n  the Linux kernel did not verify an address length, which allowed local\n  users to obtain sensitive information from kernel memory and bypass the\n  KASLR protection mechanism via a crafted application (bnc#959399).\n- CVE-2015-8767: net/sctp/sm_sideeffect.c in the Linux kernel did not\n  properly manage the relationship between a lock and a socket, which\n  allowed local users to cause a denial of service (deadlock) via a crafted\n  sctp_accept call (bnc#961509).\n- CVE-2015-8785: The fuse_fill_write_pages function in fs/fuse/file.c\n  in the Linux kernel allowed local users to cause a denial of service\n  (infinite loop) via a writev system call that triggers a zero length\n  for the first segment of an iov (bnc#963765).\n- CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when\n  the network was considered congested. The kernel would incorrectly\n  misinterpret the congestion as an error condition and incorrectly\n  free/clean up the skb. When the device would then send the skb's queued,\n  these structures would be referenced and may panic the system\n  or allow an attacker to escalate privileges in a use-after-free\n  scenario.(bsc#966437).\n- CVE-2015-8816: A malicious USB device could cause kernel crashes in\n  the in hub_activate() function (bnc#968010).\n- CVE-2016-0723: Race condition in the tty_ioctl function in\n  drivers/tty/tty_io.c in the Linux kernel allowed local users to obtain\n  sensitive information from kernel memory or cause a denial of service\n  (use-after-free and system crash) by making a TIOCGETD ioctl call during\n  processing of a TIOCSETD ioctl call (bnc#961500).\n- CVE-2016-2069: A race in invalidating paging structures that were not\n  in use locally could have lead to disclosoure of information or arbitrary\n  code exectution (bnc#963767).\n- CVE-2016-2143: On zSeries a fork of a large process could have caused\n  memory corruption due to incorrect page table handling. (bnc#970504,\n  LTC#138810).\n- CVE-2016-2184: A malicious USB device could cause kernel crashes in\n  the alsa usb-audio device driver (bsc#971125).\n- CVE-2016-2185: A malicious USB device could cause kernel crashes in\n  the usb_driver_claim_interface function (bnc#971124).\n- CVE-2016-2186: A malicious USB device could cause kernel crashes in\n  the powermate device driver (bnc#970958).\n- CVE-2016-2384: A double free on the ALSA umidi object was\n  fixed. (bsc#966693).\n- CVE-2016-2543: A missing NULL check at remove_events ioctl in the ALSA\n  seq driver was fixed. (bsc#967972).\n- CVE-2016-2544: Fix race at timer setup and close in the ALSA seq driver\n  was fixed. (bsc#967973).\n- CVE-2016-2545: A double unlink of active_list in the ALSA timer driver\n  was fixed. (bsc#967974).\n- CVE-2016-2546: A race among ALSA timer ioctls was fixed (bsc#967975).\n- CVE-2016-2547,CVE-2016-2548: The ALSA slave\n  timer list handling was hardened against hangs and\n  races. (CVE-2016-2547,CVE-2016-2548,bsc#968011,bsc#968012).\n- CVE-2016-2549: A stall in ALSA hrtimer handling was fixed (bsc#968013).\n- CVE-2016-2782: A malicious USB device could cause kernel crashes in\n  the visor device driver (bnc#968670).\n- CVE-2016-3137: A malicious USB device could cause kernel crashes in\n  the cypress_m8 device driver (bnc#970970).\n- CVE-2016-3139: A malicious USB device could cause kernel crashes in\n  the wacom device driver (bnc#970909).\n- CVE-2016-3140: A malicious USB device could cause kernel crashes in\n  the digi_acceleport device driver (bnc#970892).\n- CVE-2016-3156: A quadratic algorithm could lead to long\n  kernel ipv4 hangs when removing a device with a large number of\n  addresses. (bsc#971360).\n- CVE-2016-3955: A remote buffer overflow in the usbip driver could be used\n  by authenticated attackers to crash the kernel. (bsc#975945)\n- CVE-2016-2847: A local user could exhaust kernel memory by pushing lots of data\n  into pipes. (bsc#970948).\n- CVE-2016-2188: A malicious USB device could cause kernel crashes in the\n  iowarrior device driver (bnc#970956).\n- CVE-2016-3138: A malicious USB device could cause kernel crashes in the\n  cdc-acm device driver (bnc#970911).\n\nThe following non-security bugs were fixed:\n- af_unix: Guard against other == sk in unix_dgram_sendmsg (bsc#973570).\n- blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976).\n- blktap: refine mm tracking (bsc#952976).\n- cachefiles: Avoid deadlocks with fs freezing (bsc#935123).\n- cifs: Schedule on hard mount retry (bsc#941514).\n- cpuset: Fix potential deadlock w/ set_mems_allowed (bsc#960857, bsc#974646).\n- dcache: use IS_ROOT to decide where dentry is hashed (bsc#949752).\n- driver: Vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750).\n- drm/i915: Change semantics of hw_contexts_disabled (bsc#963276).\n- drm/i915: Evict CS TLBs between batches (bsc#758040).\n- drm/i915: Fix SRC_COPY width on 830/845g (bsc#758040).\n- e1000e: Do not read ICR in Other interrupt (bsc#924919).\n- e1000e: Do not write lsc to ics in msi-x mode (bsc#924919).\n- e1000e: Fix msi-x interrupt automask (bsc#924919).\n- e1000e: Remove unreachable code (bsc#924919).\n- ext3: fix data=journal fast mount/umount hang (bsc#942082).\n- ext3: NULL dereference in ext3_evict_inode() (bsc#942082).\n- firmware: Create directories for external firmware (bsc#959312).\n- firmware: Simplify directory creation (bsc#959312).\n- fs: Avoid deadlocks of fsync_bdev() and fs freezing (bsc#935123).\n- fs: Fix deadlocks between sync and fs freezing (bsc#935123).\n- ftdi_sio: private backport of TIOCMIWAIT (bnc#956375).\n- ipr: Fix incorrect trace indexing (bsc#940913).\n- ipr: Fix invalid array indexing for HRRQ (bsc#940913).\n- ipv6: make fib6 serial number per namespace (bsc#965319).\n- ipv6: mld: fix add_grhead skb_over_panic for devs with large MTUs (bsc#956852).\n- ipv6: per netns fib6 walkers (bsc#965319).\n- ipv6: per netns FIB garbage collection (bsc#965319).\n- ipv6: replace global gc_args with local variable (bsc#965319).\n- jbd: Fix unreclaimed pages after truncate in data=journal mode (bsc#961516).\n- kabi: protect struct netns_ipv6 after FIB6 GC series (bsc#965319).\n- kbuild: create directory for dir/file.o (bsc#959312).\n- kexec: Fix race between panic() and crash_kexec() called directly (bnc#937444).\n- lpfc: Fix null ndlp dereference in target_reset_handler (bsc#951392).\n- mld, igmp: Fix reserved tailroom calculation (bsc#956852).\n- mm-memcg-print-statistics-from-live-counters-fix (bnc#969307).\n- netfilter: xt_recent: fix namespace destroy path (bsc#879378).\n- nfs4: treat lock owners as opaque values (bnc#968141).\n- nfs: Fix handling of re-write-before-commit for mmapped NFS pages (bsc#964201).\n- nfs: use smaller allocations for 'struct id_map' (bsc#965923).\n- nfsv4: Fix two infinite loops in the mount code (bsc#954628).\n- nfsv4: Recovery of recalled read delegations is broken (bsc#956514).\n- panic/x86: Allow cpus to save registers even if they (bnc#940946).\n- panic/x86: Fix re-entrance problem due to panic on (bnc#937444).\n- pciback: do not allow MSI-X ops if PCI_COMMAND_MEMORY is not set.\n- pciback: for XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled.\n- pciback: return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled.\n- pciback: return error on XEN_PCI_OP_enable_msix when device has MSI or MSI-X enabled.\n- pci: Update VPD size with correct length (bsc#958906).\n- quota: Fix deadlock with suspend and quotas (bsc#935123).\n- rdma/ucma: Fix AB-BA deadlock (bsc#963998).\n- README.BRANCH: Switch to LTSS mode\n- Refresh patches.xen/xen3-08-x86-ldt-make-modify_ldt-synchronous.patch (bsc#959705).\n- Restore kabi after lock-owner change (bnc#968141).\n- s390/pageattr: Do a single TLB flush for change_page_attr (bsc#940413).\n- scsi_dh_rdac: always retry MODE SELECT on command lock violation (bsc#956949).\n- scsi: mpt2sas: Rearrange the the code so that the completion queues are initialized prior to sending the request to controller firmware (bsc#967863).\n- skb: Add inline helper for getting the skb end offset from head (bsc#956852).\n- sunrcp: restore fair scheduling to priority queues (bsc#955308).\n- sunrpc: refactor rpcauth_checkverf error returns (bsc#955673).\n- tcp: avoid order-1 allocations on wifi and tx path (bsc#956852).\n- tcp: fix skb_availroom() (bsc#956852).\n- tg3: 5715 does not link up when autoneg off (bsc#904035).\n- Update patches.fixes/mm-exclude-reserved-pages-from-dirtyable-memory-fix.patch (bnc#940017, bnc#949298, bnc#947128).\n- usb: ftdi_sio: fix race condition in TIOCMIWAIT, and abort of TIOCMIWAIT when the device is removed (bnc#956375).\n- usb: ftdi_sio: fix status line change handling for TIOCMIWAIT and TIOCGICOUNT (bnc#956375).\n- usb: ftdi_sio: fix tiocmget and tiocmset return values (bnc#956375).\n- usb: ftdi_sio: fix tiocmget indentation (bnc#956375).\n- usb: ftdi_sio: optimise chars_in_buffer (bnc#956375).\n- usb: ftdi_sio: refactor modem-control status retrieval (bnc#956375).\n- usb: ftdi_sio: remove unnecessary memset (bnc#956375).\n- usb: ftdi_sio: use ftdi_get_modem_status in chars_in_buffer (bnc#956375).\n- usb: ftdi_sio: use generic chars_in_buffer (bnc#956375).\n- usb: serial: export usb_serial_generic_chars_in_buffer (bnc#956375).\n- usb: serial: ftdi_sio: Add missing chars_in_buffer function (bnc#956375).\n- usbvision fix overflow of interfaces array (bnc#950998).\n- veth: extend device features (bsc#879381).\n- vfs: Provide function to get superblock and wait for it to thaw (bsc#935123).\n- vmxnet3: adjust ring sizes when interface is down (bsc#950750).\n- vmxnet3: fix building without CONFIG_PCI_MSI (bsc#958912).\n- vmxnet3: fix ethtool ring buffer size setting (bsc#950750).\n- vmxnet3: fix netpoll race condition (bsc#958912).\n- writeback: Skip writeback for frozen filesystem (bsc#935123).\n- x86/evtchn: make use of PHYSDEVOP_map_pirq.\n- x86, kvm: fix kvm's usage of kernel_fpu_begin/end() (bsc#961518).\n- x86, kvm: fix maintenance of guest/host xcr0 state (bsc#961518).\n- x86, kvm: use kernel_fpu_begin/end() in kvm_load/put_guest_fpu() (bsc#961518).\n- x86/mce: Fix return value of mce_chrdev_read() when erst is disabled (bsc#934787).\n- xen/panic/x86: Allow cpus to save registers even if they (bnc#940946).\n- xen/panic/x86: Fix re-entrance problem due to panic on (bnc#937444).\n- xen: x86: mm: drop TLB flush from ptep_set_access_flags (bsc#948330).\n- xen: x86: mm: only do a local tlb flush in ptep_set_access_flags() (bsc#948330).\n- xfrm: do not segment UFO packets (bsc#946122).\n- xhci: silence TD warning (bnc#939955).\n","status":"published","published":"2016-05-03T13:29:41Z","modified":"2026-02-04T02:20:02.250977Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2245-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2016-3955: The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel allowed remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet (bnc#975945).\n- CVE-2016-4998: The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel allowed local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary (bnc#986365).\n- CVE-2015-7513: arch/x86/kvm/x86.c in the Linux kernel did not reset the PIT counter values during state restoration, which allowed guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions (bnc#960689).\n- CVE-2013-4312: The Linux kernel allowed local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c (bnc#839104).\n- CVE-2016-4997: The compat IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement (bnc#986362).\n- CVE-2016-5829: Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call (bnc#986572).\n- CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure was initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bnc#984755).\n- CVE-2016-5244: The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel did not initialize a certain structure member, which allowed remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message (bnc#983213).\n- CVE-2016-1583: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling (bnc#983143).\n- CVE-2016-4913: The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel mishandled NM (aka alternate name) entries containing \\0 characters, which allowed local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem (bnc#980725).\n- CVE-2016-4580: The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel did not properly initialize a certain data structure, which allowed attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request (bnc#981267).\n- CVE-2016-4805: Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel allowed local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions (bnc#980371).\n- CVE-2016-0758: Integer overflow in lib/asn1_decoder.c in the Linux kernel allowed local users to gain privileges via crafted ASN.1 data (bnc#979867).\n- CVE-2015-7833: The usbvision driver in the Linux kernel allowed physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor (bnc#950998).\n- CVE-2016-2187: The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel allowed physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor (bnc#971944).\n- CVE-2016-4482: The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel did not initialize a certain data structure, which allowed local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call (bnc#978401).\n- CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel incorrectly relies on the write system call, which allowed local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface (bnc#979548).\n- CVE-2016-2053: The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel allowed attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c (bnc#963762).\n- CVE-2016-4485: The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel did not initialize a certain data structure, which allowed attackers to obtain sensitive information from kernel stack memory by reading a message (bnc#978821).\n- CVE-2016-4578: sound/core/timer.c in the Linux kernel did not initialize certain r1 data structures, which allowed local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions (bnc#979879).\n- CVE-2016-4569: The snd_timer_user_params function in sound/core/timer.c in the Linux kernel did not initialize a certain data structure, which allowed local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface (bnc#979213).\n- CVE-2016-4486: The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel did not initialize a certain data structure, which allowed local users to obtain sensitive information from kernel stack memory by reading a Netlink message (bnc#978822).\n- CVE-2016-3134: The netfilter subsystem in the Linux kernel did not validate certain offset fields, which allowed local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call (bnc#971126).\n- CVE-2016-5696: net/ipv4/tcp_input.c in the Linux kernel did not properly determine the rate of challenge ACK segments, which made it easier for man-in-the-middle attackers to hijack TCP sessions via a blind in-window attack. (bsc#989152)\n- CVE-2016-6480: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a 'double fetch' vulnerability. (bsc#991608)\n\nThe following non-security bugs were fixed:\n- Update patches.fixes/pci-determine-actual-vpd-size-on-first-access.patch (bsc#971729, bsc#974428).\n- Update PCI VPD size patch to upstream: \n  * PCI: Determine actual VPD size on first access (bsc#971729). \n  * PCI: Update VPD definitions (bsc#971729). (cherry picked from commit d2af5b7e0cd7ee2a54f02ad65ec300d16b3ad956)\n- Update patches.fixes/pci-update-vpd-definitions.patch (bsc#971729, bsc#974428).\n- cgroups: do not attach task to subsystem if migration failed (bnc#979274).\n- cgroups: more safe tasklist locking in cgroup_attach_proc (bnc#979274).\n- fs/cifs: Fix cifs_uniqueid_to_ino_t() function for s390x (bsc#944309)\n- fs/cifs: fix wrongly prefixed path to root (bsc#963655, bsc#979681)\n- hid: add ALWAYS_POLL quirk for a Logitech 0xc055 (bnc#962404).\n- hid: add HP OEM mouse to quirk ALWAYS_POLL (bsc#919351).\n- hid: add quirk for PIXART OEM mouse used by HP (bsc#919351).\n- hid-elo: kill not flush the work.\n- ipv4/fib: do not warn when primary address is missing if in_dev is dead (bsc#971360).\n- ipv4: fix ineffective source address selection (bsc#980788).\n- ipvs: count pre-established TCP states as active (bsc#970114).\n- kabi, unix: properly account for FDs passed over unix sockets (bnc#839104).\n- mm/hugetlb.c: correct missing private flag clearing (VM Functionality, bnc#971446).\n- mm/hugetlb: fix backport of upstream commit 07443a85ad (VM Functionality, bnc#971446).\n- mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED (VM Functionality, bnc#986445).\n- nfs: Do not attempt to decode missing directory entries (bsc#980931).\n- nfs: fix memory corruption rooted in get_ih_name pointer math (bsc#984107).\n- nfs: reduce access cache shrinker locking (bnc#866130).\n- ppp: defer netns reference release for ppp channel (bsc#980371).\n- s390/cio: collect format 1 channel-path description data (bsc#966460,LTC#136434).\n- s390/cio: ensure consistent measurement state (bsc#966460,LTC#136434).\n- s390/cio: fix measurement characteristics memleak (bsc#966460,LTC#136434).\n- s390/cio: update measurement characteristics (bsc#966460,LTC#136434).\n- usbhid: add device USB_DEVICE_ID_LOGITECH_C077 (bsc#919351).\n- usbhid: more mice with ALWAYS_POLL (bsc#919351).\n- usbhid: yet another mouse with ALWAYS_POLL (bsc#919351).\n- veth: do not modify ip_summed (bsc#969149).\n- virtio_scsi: Implement eh_timed_out callback.\n- vmxnet3: segCnt can be 1 for LRO packets (bsc#988065).\n- xfs: Avoid grabbing ilock when file size is not changed (bsc#983535).\n- xfs: avoid xfs_buf hang in lookup node directory corruption (bsc#989401).\n- xfs: only update the last_sync_lsn when a transaction completes (bsc#987709).\n","status":"published","published":"2016-09-06T09:28:39Z","modified":"2025-05-02T04:03:58.555675Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-2965-1","title":"linux vulnerabilities","description":"Jann Horn discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel did not properly reference count file\ndescriptors, leading to a use-after-free. A local unprivileged attacker\ncould use this to gain administrative privileges. (CVE-2016-4557)\n\nRalf Spenneberg discovered that the USB sound subsystem in the Linux kernel\ndid not properly validate USB device descriptors. An attacker with physical\naccess could use this to cause a denial of service (system crash).\n(CVE-2016-2184)\n\nRalf Spenneberg discovered that the ATI Wonder Remote II USB driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2185)\n\nRalf Spenneberg discovered that the PowerMate USB driver in the Linux\nkernel did not properly validate USB device descriptors. An attacker with\nphysical access could use this to cause a denial of service (system crash).\n(CVE-2016-2186)\n\nRalf Spenneberg discovered that the I/O-Warrior USB device driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2188)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nMCT USB RS232 Converter device driver in the Linux kernel did not properly\nvalidate USB device descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3136)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nCypress M8 USB device driver in the Linux kernel did not properly validate\nUSB device descriptors. An attacker with physical access could use this to\ncause a denial of service (system crash). (CVE-2016-3137)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nUSB abstract device control driver for modems and ISDN adapters did not\nvalidate endpoint descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3138)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nLinux kernel's USB driver for Digi AccelePort serial converters did not\nproperly validate USB device descriptors. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3140)\n\nIt was discovered that the IPv4 implementation in the Linux kernel did not\nperform the destruction of inet device objects properly. An attacker in a\nguest OS could use this to cause a denial of service (networking outage) in\nthe host OS. (CVE-2016-3156)\n\nAndy Lutomirski discovered that the Linux kernel did not properly context-\nswitch IOPL on 64-bit PV Xen guests. An attacker in a guest OS could use\nthis to cause a denial of service (guest OS crash), gain privileges, or\nobtain sensitive information. (CVE-2016-3157)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nIt was discovered that the Linux kernel's USB driver for IMS Passenger\nControl Unit devices did not properly validate the device's interfaces. An\nattacker with physical access could use this to cause a denial of service\n(system crash). (CVE-2016-3689)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n","status":"published","published":"2016-05-06T20:09:33Z","modified":"2026-04-22T09:24:17.602653Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2965-2","title":"linux-lts-xenial vulnerabilities","description":"USN-2965-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nJann Horn discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel did not properly reference count file\ndescriptors, leading to a use-after-free. A local unprivileged attacker\ncould use this to gain administrative privileges. (CVE-2016-4557)\n\nRalf Spenneberg discovered that the USB sound subsystem in the Linux kernel\ndid not properly validate USB device descriptors. An attacker with physical\naccess could use this to cause a denial of service (system crash).\n(CVE-2016-2184)\n\nRalf Spenneberg discovered that the ATI Wonder Remote II USB driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2185)\n\nRalf Spenneberg discovered that the PowerMate USB driver in the Linux\nkernel did not properly validate USB device descriptors. An attacker with\nphysical access could use this to cause a denial of service (system crash).\n(CVE-2016-2186)\n\nRalf Spenneberg discovered that the I/O-Warrior USB device driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2188)\n\nIt was discovered that the Linux kernel did not enforce limits on the\namount of data allocated to buffer pipes. A local attacker could use this\nto cause a denial of service (resource exhaustion). (CVE-2016-2847)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nMCT USB RS232 Converter device driver in the Linux kernel did not properly\nvalidate USB device descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3136)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nCypress M8 USB device driver in the Linux kernel did not properly validate\nUSB device descriptors. An attacker with physical access could use this to\ncause a denial of service (system crash). (CVE-2016-3137)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nUSB abstract device control driver for modems and ISDN adapters did not\nvalidate endpoint descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3138)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nLinux kernel's USB driver for Digi AccelePort serial converters did not\nproperly validate USB device descriptors. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3140)\n\nIt was discovered that the IPv4 implementation in the Linux kernel did not\nperform the destruction of inet device objects properly. An attacker in a\nguest OS could use this to cause a denial of service (networking outage) in\nthe host OS. (CVE-2016-3156)\n\nAndy Lutomirski discovered that the Linux kernel did not properly context-\nswitch IOPL on 64-bit PV Xen guests. An attacker in a guest OS could use\nthis to cause a denial of service (guest OS crash), gain privileges, or\nobtain sensitive information. (CVE-2016-3157)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nIt was discovered that the Linux kernel's USB driver for IMS Passenger\nControl Unit devices did not properly validate the device's interfaces. An\nattacker with physical access could use this to cause a denial of service\n(system crash). (CVE-2016-3689)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n","status":"published","published":"2016-05-06T20:21:52Z","modified":"2026-02-10T04:40:59Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2965-3","title":"linux-raspi2 vulnerabilities","description":"Jann Horn discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel did not properly reference count file\ndescriptors, leading to a use-after-free. A local unprivileged attacker\ncould use this to gain administrative privileges. (CVE-2016-4557)\n\nRalf Spenneberg discovered that the USB sound subsystem in the Linux kernel\ndid not properly validate USB device descriptors. An attacker with physical\naccess could use this to cause a denial of service (system crash).\n(CVE-2016-2184)\n\nRalf Spenneberg discovered that the ATI Wonder Remote II USB driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2185)\n\nRalf Spenneberg discovered that the PowerMate USB driver in the Linux\nkernel did not properly validate USB device descriptors. An attacker with\nphysical access could use this to cause a denial of service (system crash).\n(CVE-2016-2186)\n\nRalf Spenneberg discovered that the I/O-Warrior USB device driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2188)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nMCT USB RS232 Converter device driver in the Linux kernel did not properly\nvalidate USB device descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3136)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nCypress M8 USB device driver in the Linux kernel did not properly validate\nUSB device descriptors. An attacker with physical access could use this to\ncause a denial of service (system crash). (CVE-2016-3137)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nUSB abstract device control driver for modems and ISDN adapters did not\nvalidate endpoint descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3138)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nLinux kernel's USB driver for Digi AccelePort serial converters did not\nproperly validate USB device descriptors. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3140)\n\nIt was discovered that the IPv4 implementation in the Linux kernel did not\nperform the destruction of inet device objects properly. An attacker in a\nguest OS could use this to cause a denial of service (networking outage) in\nthe host OS. (CVE-2016-3156)\n\nAndy Lutomirski discovered that the Linux kernel did not properly context-\nswitch IOPL on 64-bit PV Xen guests. An attacker in a guest OS could use\nthis to cause a denial of service (guest OS crash), gain privileges, or\nobtain sensitive information. (CVE-2016-3157)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nIt was discovered that the Linux kernel's USB driver for IMS Passenger\nControl Unit devices did not properly validate the device's interfaces. An\nattacker with physical access could use this to cause a denial of service\n(system crash). (CVE-2016-3689)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n","status":"published","published":"2016-05-06T20:32:08Z","modified":"2026-02-10T04:40:59Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2965-4","title":"linux-snapdragon vulnerability","description":"Jann Horn discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel did not properly reference count file\ndescriptors, leading to a use-after-free. A local unprivileged attacker\ncould use this to gain administrative privileges.\n\nRalf Spenneberg discovered that the USB sound subsystem in the Linux kernel\ndid not properly validate USB device descriptors. An attacker with physical\naccess could use this to cause a denial of service (system crash).\n(CVE-2016-2184)\n\nRalf Spenneberg discovered that the ATI Wonder Remote II USB driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2185)\n\nRalf Spenneberg discovered that the PowerMate USB driver in the Linux\nkernel did not properly validate USB device descriptors. An attacker with\nphysical access could use this to cause a denial of service (system crash).\n(CVE-2016-2186)\n\nRalf Spenneberg discovered that the I/O-Warrior USB device driver in the\nLinux kernel did not properly validate USB device descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2188)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nMCT USB RS232 Converter device driver in the Linux kernel did not properly\nvalidate USB device descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3136)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nCypress M8 USB device driver in the Linux kernel did not properly validate\nUSB device descriptors. An attacker with physical access could use this to\ncause a denial of service (system crash). (CVE-2016-3137)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nUSB abstract device control driver for modems and ISDN adapters did not\nvalidate endpoint descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3138)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nLinux kernel's USB driver for Digi AccelePort serial converters did not\nproperly validate USB device descriptors. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3140)\n\nIt was discovered that the IPv4 implementation in the Linux kernel did not\nperform the destruction of inet device objects properly. An attacker in a\nguest OS could use this to cause a denial of service (networking outage) in\nthe host OS. (CVE-2016-3156)\n\nAndy Lutomirski discovered that the Linux kernel did not properly context-\nswitch IOPL on 64-bit PV Xen guests. An attacker in a guest OS could use\nthis to cause a denial of service (guest OS crash), gain privileges, or\nobtain sensitive information. (CVE-2016-3157)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nIt was discovered that the Linux kernel's USB driver for IMS Passenger\nControl Unit devices did not properly validate the device's interfaces. An\nattacker with physical access could use this to cause a denial of service\n(system crash). (CVE-2016-3689)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n","status":"published","published":"2016-05-06T20:37:32Z","modified":"2026-02-10T04:40:59Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-2989-1","title":"linux vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nAndy Lutomirski discovered a race condition in the Linux kernel's\ntranslation lookaside buffer (TLB) handling of flush events. A local\nattacker could use this to cause a denial of service or possibly leak\nsensitive information. (CVE-2016-2069)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-01T05:51:19Z","modified":"2026-04-22T09:25:19.084718Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3000-1","title":"linux-lts-utopic vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nMCT USB RS232 Converter device driver in the Linux kernel did not properly\nvalidate USB device descriptors. An attacker with physical access could use\nthis to cause a denial of service (system crash). (CVE-2016-3136)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nCypress M8 USB device driver in the Linux kernel did not properly validate\nUSB device descriptors. An attacker with physical access could use this to\ncause a denial of service (system crash). (CVE-2016-3137)\n\nSergej Schumilo, Hendrik Schwartke, and Ralf Spenneberg discovered that the\nLinux kernel's USB driver for Digi AccelePort serial converters did not\nproperly validate USB device descriptors. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3140)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nIt was discovered that the Linux kernel's USB driver for IMS Passenger\nControl Unit devices did not properly validate the device's interfaces. An\nattacker with physical access could use this to cause a denial of service\n(system crash). (CVE-2016-3689)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T05:36:46Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3001-1","title":"linux-lts-vivid vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T05:40:07Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3002-1","title":"linux-lts-wily vulnerabilities","description":"Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux\nkernel incorrectly enables scatter/gather I/O. A remote attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-2117)\n\nJann Horn discovered that eCryptfs improperly attempted to use the mmap()\nhandler of a lower filesystem that did not implement one, causing a\nrecursive page fault to occur. A local unprivileged attacker could use to\ncause a denial of service (system crash) or possibly execute arbitrary code\nwith administrative privileges. (CVE-2016-1583)\n\nJason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USB\nover wifi device drivers in the Linux kernel. A remote attacker could use\nthis to cause a denial of service (system crash) or obtain potentially\nsensitive information from kernel memory. (CVE-2015-4004)\n\nRalf Spenneberg discovered that the Linux kernel's GTCO digitizer USB\ndevice driver did not properly validate endpoint descriptors. An attacker\nwith physical access could use this to cause a denial of service (system\ncrash). (CVE-2016-2187)\n\nHector Marco and Ismael Ripoll discovered that the Linux kernel would\nimproperly disable Address Space Layout Randomization (ASLR) for x86\nprocesses running in 32 bit mode if stack-consumption resource limits were\ndisabled. A local attacker could use this to make it easier to exploit an\nexisting vulnerability in a setuid/setgid program. (CVE-2016-3672)\n\nAndrey Konovalov discovered that the CDC Network Control Model USB driver\nin the Linux kernel did not cancel work events queued if a later error\noccurred, resulting in a use-after-free. An attacker with physical access\ncould use this to cause a denial of service (system crash). (CVE-2016-3951)\n\nIt was discovered that an out-of-bounds write could occur when handling\nincoming packets in the USB/IP implementation in the Linux kernel. A remote\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2016-3955)\n\nVitaly Kuznetsov discovered that the Linux kernel did not properly suppress\nhugetlbfs support in X86 paravirtualized guests. An attacker in the guest\nOS could cause a denial of service (guest system crash). (CVE-2016-3961)\n\nKangjie Lu discovered an information leak in the ANSI/IEEE 802.2 LLC type 2\nSupport implementations in the Linux kernel. A local attacker could use\nthis to obtain potentially sensitive information from kernel memory.\n(CVE-2016-4485)\n\nKangjie Lu discovered an information leak in the routing netlink socket\ninterface (rtnetlink) implementation in the Linux kernel. A local attacker\ncould use this to obtain potentially sensitive information from kernel\nmemory. (CVE-2016-4486)\n\nJann Horn discovered that the InfiniBand interfaces within the Linux kernel\ncould be coerced into overwriting kernel memory. A local unprivileged\nattacker could use this to possibly gain administrative privileges on\nsystems where InifiniBand related kernel modules are loaded.\n(CVE-2016-4565)\n\nIt was discovered that in some situations the Linux kernel did not handle\npropagated mounts correctly. A local unprivileged attacker could use this\nto cause a denial of service (system crash). (CVE-2016-4581)\n","status":"published","published":"2016-06-10T05:42:32Z","modified":"2026-02-10T04:41:00Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}