File _patchinfo of Package patchinfo.5739

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.5739

<patchinfo incident="5739">
  <issue id="1001419" tracker="bnc">L3: Oops: System Reset, sig: 6</issue>
  <issue id="1001486" tracker="bnc">VUL-0: CVE-2016-7039, CVE-2016-8666: kernel-source: remote crash via stack overflow</issue>
  <issue id="1002165" tracker="bnc">Please integrate patch "sched/core: Fix a race between try_to_wake_up() and a woken up task" in SLES 11 SP4</issue>
  <issue id="1004418" tracker="bnc">VUL-0: CVE-2016-5195: kernel: local privilege escalation using MAP_PRIVATE</issue>
  <issue id="2016-8666" tracker="cve" />
  <issue id="2016-5195" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>mkubecek</packager>
  <reboot_needed/>
  <description>
The openSUSE 13.1 kernel was updated to fix bugs and security issues.

The following security bugs were fixed:

- CVE-2016-8666: The IP stack in the Linux kernel allowed remote attackers
  to cause a denial of service (stack consumption and panic) or possibly
  have unspecified other impact by triggering use of the GRO path for
  packets with tunnel stacking, as demonstrated by interleaved IPv4 headers
  and GRE headers, a related issue to CVE-2016-7039 (bnc#1001486).
- CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed,
  which is reportedly exploited in the wild (bsc#1004418).

The following non-security bugs were fixed:

- sched/core: Fix a race between try_to_wake_up() and a woken up task (bsc#1002165, bsc#1001419).
- sched/core: Fix an SMP ordering race in try_to_wake_up() vs. schedule() (bnc#1001419).
- tunnels: Do not apply GRO to multiple layers of encapsulation (bsc#1001486).
</description>
<summary>Security update for the Linux Kernel</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.5739

Places