File _patchinfo of Package patchinfo.3106
<patchinfo incident="3106">
<issue id="991667" tracker="bnc">VUL-0: CVE-2016-6480: kernel live patches: double read leading to kernel information discosure</issue>
<issue id="2016-6480" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>mbenes</packager>
<description>This update for the Linux Kernel 3.12.62-60_62 fixes several issues.
The following security bugs were fixed:
- CVE-2016-6480: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability (bsc#991667).
The following non-security bugs were fixed:
</description>
<summary>Security update for Linux Kernel Live Patch 7 for SLE 12 SP1</summary>
</patchinfo>