SUSE-SU-2016:1031-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 14 Apr 2016, 11:41
Last modified:04 Feb 2026, 02:47

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Apr 2016, 11:41
Published
Vulnerability first disclosed
04 Feb 2026, 02:47
Last Modified
Vulnerability information updated

Description

Security update for Linux Kernel Live Patch 0 for SP 1 This update for the Linux Kernel 3.12.49-11.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. (bsc#967773) - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kernel would incorrectly misinterpret the congestion as an error condition and incorrectly free/clean up the skb. When the device would then send the skb's queued, these structures would be referenced and may panic the system or allow an attacker to escalate privileges in a use-after-free scenario. (bsc#966683) - CVE-2016-0774: A pipe buffer state corruption after unsuccessful atomic read from pipe was fixed (bsc#964732). - CVE-2015-8709: kernel/ptrace.c in the Linux kernel mishandled uid and gid mappings, which allowed local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states 'there is no kernel bug here.' (bsc#960563)

Affected Systems

  • suse•kgraft-patch-SLE12-SP1_Update_0&distro=SUSE Linux Enterprise Live Patching 12

    < 4-11.2

References (9)