{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-rt":"3.0.101.rt130-65.1","kernel-rt-base":"3.0.101.rt130-65.1","kernel-rt-devel":"3.0.101.rt130-65.1","kernel-rt_trace":"3.0.101.rt130-65.1","kernel-rt_trace-base":"3.0.101.rt130-65.1","kernel-rt_trace-devel":"3.0.101.rt130-65.1","kernel-source-rt":"3.0.101.rt130-65.1","kernel-syms-rt":"3.0.101.rt130-65.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","name":"kernel-rt","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-65.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"3.0.101.rt130-65.1","kernel-rt-base":"3.0.101.rt130-65.1","kernel-rt-devel":"3.0.101.rt130-65.1","kernel-rt_trace":"3.0.101.rt130-65.1","kernel-rt_trace-base":"3.0.101.rt130-65.1","kernel-rt_trace-devel":"3.0.101.rt130-65.1","kernel-source-rt":"3.0.101.rt130-65.1","kernel-syms-rt":"3.0.101.rt130-65.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","name":"kernel-rt_trace","purl":"pkg:rpm/suse/kernel-rt_trace&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-65.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"3.0.101.rt130-65.1","kernel-rt-base":"3.0.101.rt130-65.1","kernel-rt-devel":"3.0.101.rt130-65.1","kernel-rt_trace":"3.0.101.rt130-65.1","kernel-rt_trace-base":"3.0.101.rt130-65.1","kernel-rt_trace-devel":"3.0.101.rt130-65.1","kernel-source-rt":"3.0.101.rt130-65.1","kernel-syms-rt":"3.0.101.rt130-65.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","name":"kernel-source-rt","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-65.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"3.0.101.rt130-65.1","kernel-rt-base":"3.0.101.rt130-65.1","kernel-rt-devel":"3.0.101.rt130-65.1","kernel-rt_trace":"3.0.101.rt130-65.1","kernel-rt_trace-base":"3.0.101.rt130-65.1","kernel-rt_trace-devel":"3.0.101.rt130-65.1","kernel-source-rt":"3.0.101.rt130-65.1","kernel-syms-rt":"3.0.101.rt130-65.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Real Time 11 SP4","name":"kernel-syms-rt","purl":"pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-65.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes.\n\nThis feature was added:\n\n- Support for the 2017 Intel Purley platform. \n\nThe following security bugs were fixed:\n\n- CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004418).\n- CVE-2016-0823: The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel allowed local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721 (bnc#994759).\n- CVE-2016-3841: The IPv6 stack in the Linux kernel mishandled options data, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call (bnc#992566).\n- CVE-2016-6828: Use after free in tcp_xmit_retransmit_queue or other tcp_ functions (bsc#994296)\n- CVE-2016-5696: net/ipv4/tcp_input.c in the Linux kernel did not properly determine the rate of challenge ACK segments, which made it easier for man-in-the-middle attackers to hijack TCP sessions via a blind in-window attack (bnc#989152)\n- CVE-2016-6480: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a 'double fetch' vulnerability (bnc#991608)\n- CVE-2016-4997: The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement (bnc#986362).\n- CVE-2015-7513: arch/x86/kvm/x86.c in the Linux kernel did not reset the PIT counter values during state restoration, which allowed guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions (bnc#960689).\n- CVE-2013-4312: The Linux kernel allowed local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket closing it, related to net/unix/af_unix.c and net/unix/garbage.c (bnc#839104).\n- CVE-2016-7425: A buffer overflow in the Linux Kernel in arcmsr_iop_message_xfer() could have caused kernel heap corruption and arbitraty kernel code execution (bsc#999932)\n\nThe following non-security bugs were fixed:\n\n- ahci: Order SATA device IDs for codename Lewisburg.\n- AHCI: Remove obsolete Intel Lewisburg SATA RAID device IDs.\n- ALSA: hda - Add Intel Lewisburg device IDs Audio.\n- avoid dentry crash triggered by NFS (bsc#984194).\n- blktap2: eliminate deadlock potential from shutdown path (bsc#909994).\n- blktap2: eliminate race from deferred work queue handling (bsc#911687).\n- bonding: always set recv_probe to bond_arp_rcv in arp monitor (bsc#977687).\n- bonding: fix bond_arp_rcv setting and arp validate desync state (bsc#977687).\n- btrfs: account for non-CoW'd blocks in btrfs_abort_transaction (bsc#983619).\n- btrfs: ensure that file descriptor used with subvol ioctls is a dir (bsc#999600).\n- cdc-acm: added sanity checking for probe() (bsc#993891).\n- cxgb4: Set VPD size so we can read both VPD structures (bsc#976867).\n- Delete patches.fixes/net-fix-crash-due-to-wrong-dev-in-calling.patch. (bsc#979514)\n- fs/cifs: fix wrongly prefixed path to root (bsc#963655, bsc#979681)\n- fs/select: add vmalloc fallback for select(2) (bsc#1000189).\n- fs/select: introduce SIZE_MAX (bsc#1000189).\n- i2c: i801: add Intel Lewisburg device IDs.\n- include/linux/mmdebug.h: should include linux/bug.h (bnc#971975 VM performance -- git fixes).\n- increase CONFIG_NR_IRQS 512 -> 2048 reportedly irq error with multiple nvme and tg3 in the same machine is resolved by increasing CONFIG_NR_IRQS (bsc#998399)\n- kabi, unix: properly account for FDs passed over unix sockets (bnc#839104).\n- kaweth: fix firmware download (bsc#993890).\n- kaweth: fix oops upon failed memory allocation (bsc#993890).\n- KVM: x86: SYSENTER emulation is broken (bsc#994618).\n- libfc: sanity check cpu number extracted from xid (bsc#988440).\n- lpfc: call lpfc_sli_validate_fcp_iocb() with the hbalock held (bsc#951392).\n- md: lockless I/O submission for RAID1 (bsc#982783).\n- mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED (VM Functionality, bnc#986445).\n- mpt2sas, mpt3sas: Fix panic when aer correct error occurred (bsc#997708).\n- net: add pfmemalloc check in sk_add_backlog() (bnc#920016).\n- netback: fix flipping mode (bsc#996664).\n- nfs: Do not drop directory dentry which is in use (bsc#993127).\n- nfs: Don't disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261).\n- nfs: Don't write enable new pages while an invalidation is proceeding (bsc#999584).\n- nfs: Fix a regression in the read() syscall (bsc#999584).\n- nfs: Fix races in nfs_revalidate_mapping (bsc#999584).\n- nfs: fix the handling of NFS_INO_INVALID_DATA flag in nfs_revalidate_mapping (bsc#999584).\n- nfs: Fix writeback performance issue on cache invalidation (bsc#999584).\n- nfs: Refresh open-owner id when server says SEQID is bad (bsc#989261).\n- nfsv4: do not check MAY_WRITE access bit in OPEN (bsc#985206).\n- nfsv4: fix broken patch relating to v4 read delegations (bsc#956514, bsc#989261, bsc#979595).\n- nfsv4: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (bsc#982218).\n- pci: Add pci_set_vpd_size() to set VPD size (bsc#976867).\n- pciback: fix conf_space read/write overlap check.\n- powerpc: add kernel parameter iommu_alloc_quiet (bsc#994926).\n- ppp: defer netns reference release for ppp channel (bsc#980371).\n- random32: add prandom_u32_max (bsc#989152).\n- rpm/constraints.in: Bump x86 disk space requirement to 20GB Clamav tends to run out of space nowadays.\n- s390/dasd: fix hanging device after clear subchannel (bnc#994436).\n- sata: Adding Intel Lewisburg device IDs for SATA.\n- sched/core: Fix an SMP ordering race in try_to_wake_up() vs.  schedule() (bnc#1001419).\n- sched/core: Fix a race between try_to_wake_up() and a woken up task (bnc#1002165).\n- sched: Fix possible divide by zero in avg_atom() calculation (bsc#996329).\n- scsi_dh_rdac: retry inquiry for UNIT ATTENTION (bsc#934760).\n- scsi: do not print 'reservation conflict' for TEST UNIT READY (bsc#984102).\n- scsi: ibmvfc: add FC Class 3 Error Recovery support (bsc#984992).\n- scsi: ibmvfc: Fix I/O hang when port is not mapped (bsc#971989)\n- scsi: ibmvfc: Set READ FCP_XFER_READY DISABLED bit in PRLI (bsc#984992).\n- scsi_scan: Send TEST UNIT READY to LUN0 before LUN scanning (bnc#843236,bsc#989779).\n- tmpfs: change final i_blocks BUG to WARNING (bsc#991923).\n- Update patches.drivers/fcoe-0102-fcoe-ensure-that-skb-placed-on-the-fip_recv_list-are.patch (add bsc#732582 reference).\n- USB: fix typo in wMaxPacketSize validation (bsc#991665).\n- USB: validate wMaxPacketValue entries in endpoint descriptors (bnc#991665).\n- vlan: don't deliver frames for unknown vlans to protocols (bsc#979514).\n- vlan: mask vlan prio bits (bsc#979514).\n- xenbus: inspect the correct type in xenbus_dev_request_and_reply().\n- xen: x86/mm/pat, /dev/mem: Remove superfluous error message (bsc#974620).\n- xfs: Avoid grabbing ilock when file size is not changed (bsc#983535).\n- xfs: Silence warnings in xfs_vm_releasepage() (bnc#915183 bsc#987565).\n","id":"SUSE-SU-2016:3069-1","modified":"2016-12-09T13:20:33Z","published":"2016-12-09T13:20:33Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163069-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1000189"},{"type":"REPORT","url":"https://bugzilla.suse.com/1001419"},{"type":"REPORT","url":"https://bugzilla.suse.com/1002165"},{"type":"REPORT","url":"https://bugzilla.suse.com/1004418"},{"type":"REPORT","url":"https://bugzilla.suse.com/732582"},{"type":"REPORT","url":"https://bugzilla.suse.com/839104"},{"type":"REPORT","url":"https://bugzilla.suse.com/843236"},{"type":"REPORT","url":"https://bugzilla.suse.com/909994"},{"type":"REPORT","url":"https://bugzilla.suse.com/911687"},{"type":"REPORT","url":"https://bugzilla.suse.com/915183"},{"type":"REPORT","url":"https://bugzilla.suse.com/920016"},{"type":"REPORT","url":"https://bugzilla.suse.com/934760"},{"type":"REPORT","url":"https://bugzilla.suse.com/951392"},{"type":"REPORT","url":"https://bugzilla.suse.com/956514"},{"type":"REPORT","url":"https://bugzilla.suse.com/960689"},{"type":"REPORT","url":"https://bugzilla.suse.com/963655"},{"type":"REPORT","url":"https://bugzilla.suse.com/971975"},{"type":"REPORT","url":"https://bugzilla.suse.com/971989"},{"type":"REPORT","url":"https://bugzilla.suse.com/974620"},{"type":"REPORT","url":"https://bugzilla.suse.com/976867"},{"type":"REPORT","url":"https://bugzilla.suse.com/977687"},{"type":"REPORT","url":"https://bugzilla.suse.com/979514"},{"type":"REPORT","url":"https://bugzilla.suse.com/979595"},{"type":"REPORT","url":"https://bugzilla.suse.com/979681"},{"type":"REPORT","url":"https://bugzilla.suse.com/980371"},{"type":"REPORT","url":"https://bugzilla.suse.com/982218"},{"type":"REPORT","url":"https://bugzilla.suse.com/982783"},{"type":"REPORT","url":"https://bugzilla.suse.com/983535"},{"type":"REPORT","url":"https://bugzilla.suse.com/983619"},{"type":"REPORT","url":"https://bugzilla.suse.com/984102"},{"type":"REPORT","url":"https://bugzilla.suse.com/984194"},{"type":"REPORT","url":"https://bugzilla.suse.com/984992"},{"type":"REPORT","url":"https://bugzilla.suse.com/985206"},{"type":"REPORT","url":"https://bugzilla.suse.com/986362"},{"type":"REPORT","url":"https://bugzilla.suse.com/986365"},{"type":"REPORT","url":"https://bugzilla.suse.com/986445"},{"type":"REPORT","url":"https://bugzilla.suse.com/987565"},{"type":"REPORT","url":"https://bugzilla.suse.com/988440"},{"type":"REPORT","url":"https://bugzilla.suse.com/989152"},{"type":"REPORT","url":"https://bugzilla.suse.com/989261"},{"type":"REPORT","url":"https://bugzilla.suse.com/989779"},{"type":"REPORT","url":"https://bugzilla.suse.com/991608"},{"type":"REPORT","url":"https://bugzilla.suse.com/991665"},{"type":"REPORT","url":"https://bugzilla.suse.com/991923"},{"type":"REPORT","url":"https://bugzilla.suse.com/992566"},{"type":"REPORT","url":"https://bugzilla.suse.com/993127"},{"type":"REPORT","url":"https://bugzilla.suse.com/993890"},{"type":"REPORT","url":"https://bugzilla.suse.com/993891"},{"type":"REPORT","url":"https://bugzilla.suse.com/994296"},{"type":"REPORT","url":"https://bugzilla.suse.com/994436"},{"type":"REPORT","url":"https://bugzilla.suse.com/994618"},{"type":"REPORT","url":"https://bugzilla.suse.com/994759"},{"type":"REPORT","url":"https://bugzilla.suse.com/994926"},{"type":"REPORT","url":"https://bugzilla.suse.com/996329"},{"type":"REPORT","url":"https://bugzilla.suse.com/996664"},{"type":"REPORT","url":"https://bugzilla.suse.com/997708"},{"type":"REPORT","url":"https://bugzilla.suse.com/998399"},{"type":"REPORT","url":"https://bugzilla.suse.com/999584"},{"type":"REPORT","url":"https://bugzilla.suse.com/999600"},{"type":"REPORT","url":"https://bugzilla.suse.com/999932"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2013-4312"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-7513"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-0823"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-3841"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4997"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-5195"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-5696"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6480"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6828"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-7425"}],"related":["CVE-2013-4312","CVE-2015-7513","CVE-2016-0823","CVE-2016-3841","CVE-2016-4997","CVE-2016-5195","CVE-2016-5696","CVE-2016-6480","CVE-2016-6828","CVE-2016-7425"],"summary":"Security update for the Linux Kernel","upstream":["CVE-2013-4312","CVE-2015-7513","CVE-2016-0823","CVE-2016-3841","CVE-2016-4997","CVE-2016-5195","CVE-2016-5696","CVE-2016-6480","CVE-2016-6828","CVE-2016-7425"]}