← Search the atlas
SUSE-SU-2016:3248-1
Not scored
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP 3 kernel was updated to fix two security issues.
The following security bugs were fixed:
- CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604).
- CVE-2016-9794: A use-after-free vulnerability in the ALSA pcm layer allowed local users to cause a denial of service, memory corruption or possibly even to elevate their privileges (bsc#1013533).
Exploit probability
Not scored
Published
December 22, 2016
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Manager Proxy 2.1
kernel-trace
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-trace
SUSE:Manager Proxy 2.1
kernel-syms
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-syms
SUSE:OpenStack Cloud 5
kernel-xen
SUSE:Manager 2.1
kernel-syms
SUSE:OpenStack Cloud 5
kernel-source
SUSE:Linux Enterprise Point of Sale 11 SP3
kernel-trace
SUSE:Linux Enterprise Point of Sale 11 SP3
kernel-xen
SUSE:Linux Enterprise Point of Sale 11 SP3
kernel-syms
SUSE:Manager 2.1
kernel-ec2
SUSE:Manager Proxy 2.1
kernel-bigsmp
SUSE:Manager Proxy 2.1
kernel-xen
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-pae
SUSE:OpenStack Cloud 5
kernel-bigsmp
SUSE:Linux Enterprise Point of Sale 11 SP3
kernel-default
SUSE:Linux Enterprise Point of Sale 11 SP3
kernel-source
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-xen
SUSE:Linux Enterprise Point of Sale 11 SP3
kernel-pae
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-source
SUSE:Manager 2.1
kernel-xen
SUSE:Manager 2.1
kernel-source
SUSE:Linux Enterprise Point of Sale 11 SP3
kernel-ec2
SUSE:OpenStack Cloud 5
kernel-trace
SUSE:OpenStack Cloud 5
kernel-syms
SUSE:Manager 2.1
kernel-default
SUSE:Manager 2.1
kernel-trace
SUSE:OpenStack Cloud 5
kernel-ec2
SUSE:Manager Proxy 2.1
kernel-default
SUSE:OpenStack Cloud 5
kernel-default
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-bigsmp
SUSE:Manager Proxy 2.1
kernel-source
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-default
SUSE:Manager 2.1
kernel-bigsmp
SUSE:Manager Proxy 2.1
kernel-ec2
SUSE:Linux Enterprise Server 11 SP3-LTSS
kernel-ec2
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2016:3248-1
The SUSE Linux Enterprise 11 SP 3 kernel was updated to fix two security issues.
The following security bugs were fixed:
- CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604).
- CVE-2016-9794: A use-after-free vulnerability in the ALSA pcm layer allowed local users to cause a denial of service, memory corruption or possibly even to elevate their privileges (bsc#1013533).
View original source ↗
05 / REFERENCES
Further evidence