kernel update for Evergreen 11.4

This kernel update fixes the well known "Dirty COW" issue as well as a bunch of other security and non-security related issues.

Fixed bugs
bnc#1004418
VUL-0: CVE-2016-5195: kernel: local privilege escalation using MAP_PRIVATE "Dirty COW"
bnc#758540
Oops in nf_conntrack
bnc#816446
Paravirtualized xen DomU time not following Dom0 time
bnc#861093
POD: soft lockups in dom0 kernel
bnc#917648
Kernel Oops in eventpoll function ep_remove_wait_queue with UNIX datagram sockets
bnc#928130
VUL-0: CVE-2015-3339: kernel: race condition between chown() and execve()
bnc#935757
Kernel crash in lpfc driver
bnc#939826
processes hang while trying to mount snapshot
bnc#942367
VUL-0: CVE-2015-6252: kernel: vhost fd leak in ioctl VHOST_SET_LOG_FD
bnc#944296
VUL-0: CVE-2015-0272: NetworkManager: remote DoS using IPv6 RA with bogus MTU
bnc#945825
VUL-1: CVE-2015-6937: kernel-source: NULL pointer dereference in net/rds/connection.c
bnc#946117
L3-Question: modprobe: page allocation failure: order:4, mode:0xd0
bnc#946309
nfs client mounts hang, stop sending out packets
bnc#948562
XEN: Panic : kernel BUG at /usr/src/packages/BUILD/kernel-xen-3.0.101/linux-3.0/arch/x86/mm/fault-xen.c:407!
bnc#949744
SLES 11 SP3: XFS overwritten / zeroed page
bnc#949936
VUL-0: CVE-2015-7799: kernel: Using the PPP character device driver caused the system to restart
bnc#951440
VUL-0: CVE-2015-7872: kernel: Keyrings crash triggerable by unprivileged user
bnc#952384
VUL-1: CVE-2015-7990: kernel: Incomplete fix for CVE-2015-6937, RDS socket handling
bnc#953527
VUL-0: CVE-2015-5307: kernel: kvm: x86: avoid guest->host DOS by intercepting #AC
bnc#954404
VUL-0: CVE-2015-8104: kernel: kvm: virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception
bnc#955354
VUL-1: CVE-2015-8215: kernel: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does notvalidate attempted cha...
bnc#955654
VUL-0: CVE-2013-7446: kernel: Unix sockets use after free - peer_wait_queue prematurely freed
bnc#956708
VUL-0: CVE-2015-7515: kernel: aiptek: crash on invalid USB device descriptors
bnc#956709
VUL-0: CVE-2015-7509: kernel: Mounting ext2 fs e2fsprogs/tests/f_orphan as ext4 crashes system
bnc#958463
VUL-0: CVE-2015-8539: kernel: Fix handling of stored error in a negatively instantiated user key
bnc#958886
VUL-1: CVE-2015-8543: kernel-source: connect IPv6/SOCK_RAW connect causes a denial of service
bnc#958951
VUL-0: CVE-2015-7550: kernel: User triggerable crash from race between key read and rey revoke
bnc#959190
VUL-1: CVE-2015-8569: kernel: information leak using getsockname
bnc#959399
VUL-1: CVE-2015-8575: kernel-source: information leak from getsockname in bluetooth/sco
bnc#961500
VUL-0: CVE-2016-0723: kernel: Use-after-free in TIOCGETD ioctl
bnc#961509
VUL-0: CVE-2015-8767: kernel: SCTP denial of service during heartbeat timeout functions
bnc#961512
VUL-1: CVE-2015-7566: kernel: Crash on invalid USB device descriptors in visor driver
bnc#963765
VUL-0: CVE-2015-8785: kernel: fuse: possible denial of service in fuse_fill_write_pages()
bnc#963767
VUL-0: CVE-2016-2069: kernel: race condition in the TLB flush logic
bnc#964201
kernel BUG at /usr/src/packages/BUILD/kernel-default-3.0.101/linux-3.0/fs/nfs/write.c:318
bnc#966437
VUL-0: CVE-2015-8812: kernel: CXGB3: Logic bug in return code handling prematurely frees key structures causing Use after free or kernel panic.
bnc#966460
SLES 11 SP2 - s390/cio: update measurement characteristics (L3:)
bnc#966662
SLES11SP2 LTSS s390x Kernel PTF release request with the patches in bsc#966460
bnc#966693
VUL-0: CVE-2016-2384: kernel: ALSA: usb-audio: double-free triggered by invalid USB descriptor
bnc#967972
VUL-0: CVE-2016-2543: kernel: ALSA: seq: Fix missing NULL check at remove_events ioctl
bnc#967973
VUL-0: CVE-2016-2544: kernel: ALSA: seq: Fix race at timer setup and close
bnc#967974
VUL-0: CVE-2016-2545: kernel: ALSA: timer: Fix double unlink of active_list
bnc#967975
VUL-0: CVE-2016-2546: kernel: ALSA: timer: Fix race among timer ioctls
bnc#968010
VUL-0: CVE-2015-8816: kernel: USB: fix invalid memory access in hub_activate()
bnc#968011
VUL-0: CVE-2016-2547: kernel: ALSA: timer: Harden slave timer list handling
bnc#968012
VUL-0: CVE-2016-2548: kernel: ALSA: timer: Harden slave timer list handling (2nd CVE)
bnc#968013
VUL-0: CVE-2016-2549: kernel: ALSA: hrtimer: Fix stall by hrtimer_cancel()
bnc#968670
VUL-0: CVE-2016-2782: kernel: visor: crash on invalid USB device descriptors in treo_attach() in visor driver
bnc#969356
VUL-0: CVE-2015-1339: kernel: Memory exhaustion via CUSE driver
bnc#970504
VUL-0: CVE-2016-2143: kernel-source: s390x memory corruption on fork with large page tables
bnc#970892
VUL-0: CVE-2016-3140: kernel-source: crash on invalid USB device descriptors (digi_acceleport driver)
bnc#970909
VUL-0: CVE-2016-3139: kernel-source: crash on invalid USB device descriptors (wacom driver)
bnc#970911
VUL-0: CVE-2016-3138: kernel-source: crash on invalid USB device descriptors (cdc_acm driver)
bnc#970948
VUL-0: CVE-2016-2847: kernel-source: limit the per-user amount of pages allocated in pipes
bnc#970956
VUL-0: CVE-2016-2188: kernel-source: Kernel panic on invalid USB device descriptor (iowarrior driver)
bnc#970958
VUL-0: CVE-2016-2186: kernel-source: Kernel panic on invalid USB device descriptor (powermate driver)
bnc#970970
VUL-1: CVE-2016-3137: kernel-source: Crash on invalid USB device descriptors (cypress_m8 driver)
bnc#971124
VUL-1: CVE-2016-2185: kernel: Kernel panic on invalid USB device descriptor (ati_remote2 driver)
bnc#971125
VUL-1: CVE-2016-2184: kernel: Kernel panic on invalid USB device descriptor (snd_usb_audio driver)
bnc#971126
VUL-0: CVE-2016-3134: kernel: netfilter: missing bounds check in ipt_entry structure
bnc#971360
VUL-0: CVE-2016-3156: kernel-source: ipv4: denial of service when destroying a network interface
bnc#972510
System panic in bfa_cb_ioim_done()->memcpy()
bnc#973570
smbd locks up the kernel
bnc#975945
VUL-0: CVE-2016-3955: kernel: buffer overflow in usbip by trusting length of incoming packets
bnc#977847
Bug fix request for SLES 11 SP2 LTSS: kernel-default, bsc#929143
bnc#978822
VUL-0: CVE-2016-4486: kernel: Information leak in rtnetlink
Selected Binaries
openSUSE Build Service is sponsored by