<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2015:2194-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2015-12-04T09:34:09Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2015-12-04T09:34:09Z</InitialReleaseDate>
    <CurrentReleaseDate>2015-12-04T09:34:09Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">The SUSE Linux Enterprise 12 kernel was updated to 3.12.51 to receive various security and bugfixes.

Following security bugs were fixed:
- CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers were valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936).
- CVE-2015-5283: The sctp_init function in net/sctp/protocol.c in the Linux kernel had an incorrect sequence of protocol-initialization steps, which allowed local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished (bnc#947155).
- CVE-2015-2925: The prepend_path function in fs/dcache.c in the Linux kernel did not properly handle rename actions inside a bind mount, which allowed local users to bypass an intended container protection mechanism by renaming a directory, related to a 'double-chroot attack (bnc#926238).
- CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404).
- CVE-2015-5307: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c (bnc#953527).
- CVE-2015-7990: RDS: There was no verification that an underlying transport exists when creating a connection, causing usage of a NULL pointer (bsc#952384).
- CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440).
- CVE-2015-0272: Missing checks allowed remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215 (bnc#944296).

The following non-security bugs were fixed:
- ALSA: hda - Disable 64bit address for Creative HDA controllers (bnc#814440).
- Add PCI IDs of Intel Sunrise Point-H SATA Controller S232/236 (bsc#953796).
- Btrfs: fix file corruption and data loss after cloning inline extents (bnc#956053).
- Btrfs: fix truncation of compressed and inlined extents (bnc#956053).
- Disable some ppc64le netfilter modules to restore the kabi (bsc#951546)
- Fix regression in NFSRDMA server (bsc#951110).
- KEYS: Fix race between key destruction and finding a keyring by name (bsc#951440).
- KVM: x86: call irq notifiers with directed EOI (bsc#950862).
- NVMe: Add shutdown timeout as module parameter (bnc#936076).
- NVMe: Mismatched host/device page size support (bsc#935961).
- PCI: Drop 'setting latency timer' messages (bsc#956047).
- SCSI: Fix hard lockup in scsi_remove_target() (bsc#944749).
- SCSI: hosts: update to use ida_simple for host_no (bsc#939926)
- SUNRPC: Fix oops when trace sunrpc_task events in nfs client (bnc#956703).
- Sync ppc64le netfilter config options with other archs (bnc#951546)
- Update kabi files with sbc_parse_cdb symbol change (bsc#954635).
- apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task (bsc#921949).
- apparmor: temporary work around for bug while unloading policy (boo#941867).
- audit: correctly record file names with different path name types (bsc#950013).
- audit: create private file name copies when auditing inodes (bsc#950013).
- cpu: Defer smpboot kthread unparking until CPU known to scheduler (bsc#936773).
- dlm: make posix locks interruptible, (bsc#947241).
- dm sysfs: introduce ability to add writable attributes (bsc#904348).
- dm-snap: avoid deadock on s-&gt;lock when a read is split (bsc#939826).
- dm: do not start current request if it would've merged with the previous (bsc#904348).
- dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348).
- dmapi: Fix xfs dmapi to not unlock and lock XFS_ILOCK_EXCL (bsc#949744).
- drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt, v2 (bsc#942938).
- drm/i915: add hotplug activation period to hotplug update mask (bsc#953980).
- fanotify: fix notification of groups with inode and mount marks (bsc#955533).
- genirq: Make sure irq descriptors really exist when __irq_alloc_descs returns (bsc#945626).
- hv: vss: run only on supported host versions (bnc#949504).
- ipv4: Do not increase PMTU with Datagram Too Big message (bsc#955224).
- ipv6: Check RTF_LOCAL on rt-&gt;rt6i_flags instead of rt-&gt;dst.flags (bsc#947321).
- ipv6: Consider RTF_CACHE when searching the fib6 tree (bsc#947321).
- ipv6: Extend the route lookups to low priority metrics (bsc#947321).
- ipv6: Stop /128 route from disappearing after pmtu update (bsc#947321).
- ipv6: Stop rt6_info from using inet_peer's metrics (bsc#947321).
- ipv6: distinguish frag queues by device for multicast and link-local packets (bsc#955422).
- ipvs: drop first packet to dead server (bsc#946078).
- kABI: protect struct ahci_host_priv.
- kABI: protect struct rt6_info changes from bsc#947321 changes (bsc#947321).
- kabi: Hide rt6_* types from genksyms on ppc64le (bsc#951546).
- kabi: Restore kabi in struct iscsi_tpg_attrib (bsc#954635).
- kabi: Restore kabi in struct se_cmd (bsc#954635).
- kabi: Restore kabi in struct se_subsystem_api (bsc#954635).
- kabi: protect skb_copy_and_csum_datagram_iovec() signature (bsc#951199).
- kgr: fix migration of kthreads to the new universe.
- kgr: wake up kthreads periodically.
- ktime: add ktime_after and ktime_before helper (bsc#904348).
- macvlan: Support bonding events (bsc#948521).
- net: add length argument to skb_copy_and_csum_datagram_iovec (bsc#951199).
- net: handle null iovec pointer in skb_copy_and_csum_datagram_iovec() (bsc#951199).
- pci: Update VPD size with correct length (bsc#924493).
- rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706).
- ring-buffer: Always run per-cpu ring buffer resize with schedule_work_on() (bnc#956711).
- route: Use ipv4_mtu instead of raw rt_pmtu (bsc#955224).
- rtc: cmos: Cancel alarm timer if alarm time is equal to now+1 seconds (bsc#930145).
- rtc: cmos: Revert 'rtc-cmos: Add an alarm disable quirk' (bsc#930145).
- sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100).
- sunrpc/cache: make cache flushing more reliable (bsc#947478).
- supported.conf: Add missing dependencies of supported modules hwmon_vid needed by nct6775 hwmon_vid needed by w83627ehf reed_solomon needed by ramoops
- supported.conf: Fix dependencies on ppc64le of_mdio needed by mdio-gpio
- target/pr: fix core_scsi3_pr_seq_non_holder() caller (bnc#952666).
- target/rbd: fix COMPARE AND WRITE page vector leak (bnc#948831).
- target/rbd: fix PR info memory leaks (bnc#948831).
- target: Send UA upon LUN RESET tmr completion (bsc#933514).
- target: use '^A' when allocating UAs (bsc#933514).
- usbvision fix overflow of interfaces array (bnc#950998).
- vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750).
- vmxnet3: adjust ring sizes when interface is down (bsc#950750).
- x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at runtime, instead of top-down (bsc#940853).
- x86/evtchn: make use of PHYSDEVOP_map_pirq.
- x86/mm/hotplug: Modify PGD entry when removing memory (VM Functionality, bnc#955148).
- x86/mm/hotplug: Pass sync_global_pgds() a correct argument in remove_pagetable() (VM Functionality, bnc#955148).
- xfs: DIO needs an ioend for writes (bsc#949744).
- xfs: DIO write completion size updates race (bsc#949744).
- xfs: DIO writes within EOF do not need an ioend (bsc#949744).
- xfs: always drain dio before extending aio write submission (bsc#949744).
- xfs: direct IO EOF zeroing needs to drain AIO (bsc#949744).
- xfs: do not allocate an ioend for direct I/O completions (bsc#949744).
- xfs: factor DIO write mapping from get_blocks (bsc#949744).
- xfs: handle DIO overwrite EOF update completion correctly (bsc#949744).
- xfs: move DIO mapping size calculation (bsc#949744).
- xfs: using generic_file_direct_write() is unnecessary (bsc#949744).
- xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#951165).
- xhci: change xhci 1.0 only restrictions to support xhci 1.1 (bnc#949463).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-SLE-DESKTOP-12-2015-945,SUSE-SLE-Live-Patching-12-2015-945,SUSE-SLE-Module-Public-Cloud-12-2015-945,SUSE-SLE-SDK-12-2015-945,SUSE-SLE-SERVER-12-2015-945,SUSE-SLE-WE-12-2015-945</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      <Description>Link for SUSE-SU-2015:2194-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2015-December/001718.html</URL>
      <Description>E-Mail link for SUSE-SU-2015:2194-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/814440</URL>
      <Description>SUSE Bug 814440</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/867595</URL>
      <Description>SUSE Bug 867595</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/904348</URL>
      <Description>SUSE Bug 904348</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/921949</URL>
      <Description>SUSE Bug 921949</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/924493</URL>
      <Description>SUSE Bug 924493</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/930145</URL>
      <Description>SUSE Bug 930145</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/933514</URL>
      <Description>SUSE Bug 933514</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/935961</URL>
      <Description>SUSE Bug 935961</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/936076</URL>
      <Description>SUSE Bug 936076</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/936773</URL>
      <Description>SUSE Bug 936773</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/939826</URL>
      <Description>SUSE Bug 939826</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/939926</URL>
      <Description>SUSE Bug 939926</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/940853</URL>
      <Description>SUSE Bug 940853</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/941202</URL>
      <Description>SUSE Bug 941202</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/941867</URL>
      <Description>SUSE Bug 941867</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/942938</URL>
      <Description>SUSE Bug 942938</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/944749</URL>
      <Description>SUSE Bug 944749</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/945626</URL>
      <Description>SUSE Bug 945626</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/946078</URL>
      <Description>SUSE Bug 946078</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/947241</URL>
      <Description>SUSE Bug 947241</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/947321</URL>
      <Description>SUSE Bug 947321</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/947478</URL>
      <Description>SUSE Bug 947478</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/948521</URL>
      <Description>SUSE Bug 948521</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/948685</URL>
      <Description>SUSE Bug 948685</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/948831</URL>
      <Description>SUSE Bug 948831</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/949100</URL>
      <Description>SUSE Bug 949100</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/949463</URL>
      <Description>SUSE Bug 949463</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/949504</URL>
      <Description>SUSE Bug 949504</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/949706</URL>
      <Description>SUSE Bug 949706</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/949744</URL>
      <Description>SUSE Bug 949744</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/950013</URL>
      <Description>SUSE Bug 950013</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/950750</URL>
      <Description>SUSE Bug 950750</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/950862</URL>
      <Description>SUSE Bug 950862</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/950998</URL>
      <Description>SUSE Bug 950998</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/951110</URL>
      <Description>SUSE Bug 951110</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/951165</URL>
      <Description>SUSE Bug 951165</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/951199</URL>
      <Description>SUSE Bug 951199</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/951440</URL>
      <Description>SUSE Bug 951440</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/951546</URL>
      <Description>SUSE Bug 951546</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/952666</URL>
      <Description>SUSE Bug 952666</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/952758</URL>
      <Description>SUSE Bug 952758</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/953796</URL>
      <Description>SUSE Bug 953796</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/953980</URL>
      <Description>SUSE Bug 953980</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/954635</URL>
      <Description>SUSE Bug 954635</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/955148</URL>
      <Description>SUSE Bug 955148</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/955224</URL>
      <Description>SUSE Bug 955224</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/955422</URL>
      <Description>SUSE Bug 955422</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/955533</URL>
      <Description>SUSE Bug 955533</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/955644</URL>
      <Description>SUSE Bug 955644</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/956047</URL>
      <Description>SUSE Bug 956047</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/956053</URL>
      <Description>SUSE Bug 956053</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/956703</URL>
      <Description>SUSE Bug 956703</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/956711</URL>
      <Description>SUSE Bug 956711</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-0272/</URL>
      <Description>SUSE CVE CVE-2015-0272 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-2925/</URL>
      <Description>SUSE CVE CVE-2015-2925 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-5283/</URL>
      <Description>SUSE CVE CVE-2015-5283 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-5307/</URL>
      <Description>SUSE CVE CVE-2015-5307 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-7799/</URL>
      <Description>SUSE CVE CVE-2015-7799 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-7872/</URL>
      <Description>SUSE CVE CVE-2015-7872 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-7990/</URL>
      <Description>SUSE CVE CVE-2015-7990 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8104/</URL>
      <Description>SUSE CVE CVE-2015-8104 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12" CPE="cpe:/o:suse:sled:12">SUSE Linux Enterprise Desktop 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Live Patching 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Live Patching 12">
        <FullProductName ProductID="SUSE Linux Enterprise Live Patching 12" CPE="cpe:/o:suse:sle-live-patching:12">SUSE Linux Enterprise Live Patching 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Public Cloud 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Public Cloud 12">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 12" CPE="cpe:/o:suse:sle-module-public-cloud:12">SUSE Linux Enterprise Module for Public Cloud 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12" CPE="cpe:/o:suse:sles:12">SUSE Linux Enterprise Server 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12" CPE="cpe:/o:suse:sles_sap:12">SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 12">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12" CPE="cpe:/o:suse:sle-sdk:12">SUSE Linux Enterprise Software Development Kit 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12" CPE="cpe:/o:suse:sle-we:12">SUSE Linux Enterprise Workstation Extension 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-default-3.12.51-52.31.1">kernel-default-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-default-devel-3.12.51-52.31.1">kernel-default-devel-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-extra-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-default-extra-3.12.51-52.31.1">kernel-default-extra-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-devel-3.12.51-52.31.1">kernel-devel-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-macros-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-macros-3.12.51-52.31.1">kernel-macros-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-source-3.12.51-52.31.1">kernel-source-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-syms-3.12.51-52.31.1">kernel-syms-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-xen-3.12.51-52.31.1">kernel-xen-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-devel-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-xen-devel-3.12.51-52.31.1">kernel-xen-devel-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kgraft-patch-3_12_51-52_31-default-1-2.2">
      <FullProductName ProductID="kgraft-patch-3_12_51-52_31-default-1-2.2">kgraft-patch-3_12_51-52_31-default-1-2.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kgraft-patch-3_12_51-52_31-xen-1-2.2">
      <FullProductName ProductID="kgraft-patch-3_12_51-52_31-xen-1-2.2">kgraft-patch-3_12_51-52_31-xen-1-2.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-ec2-3.12.51-52.31.1">kernel-ec2-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-devel-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-ec2-devel-3.12.51-52.31.1">kernel-ec2-devel-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-extra-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-ec2-extra-3.12.51-52.31.1">kernel-ec2-extra-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-3.12.51-52.31.5">
      <FullProductName ProductID="kernel-docs-3.12.51-52.31.5">kernel-docs-3.12.51-52.31.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-build-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-obs-build-3.12.51-52.31.1">kernel-obs-build-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-default-base-3.12.51-52.31.1">kernel-default-base-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-man-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-default-man-3.12.51-52.31.1">kernel-default-man-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-base-3.12.51-52.31.1">
      <FullProductName ProductID="kernel-xen-base-3.12.51-52.31.1">kernel-xen-base-3.12.51-52.31.1</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-default-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1">kernel-default-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1">kernel-default-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-extra-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1">kernel-default-extra-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1">kernel-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1">kernel-macros-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1">kernel-source-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1">kernel-syms-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1">kernel-xen-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1">kernel-xen-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kgraft-patch-3_12_51-52_31-default-1-2.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 12">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2">kgraft-patch-3_12_51-52_31-default-1-2.2 as a component of SUSE Linux Enterprise Live Patching 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kgraft-patch-3_12_51-52_31-xen-1-2.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 12">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2">kgraft-patch-3_12_51-52_31-xen-1-2.2 as a component of SUSE Linux Enterprise Live Patching 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1">kernel-ec2-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1">kernel-ec2-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-extra-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 12">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1">kernel-ec2-extra-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1">kernel-default-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1">kernel-default-base-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1">kernel-default-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1">kernel-default-man-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1">kernel-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1">kernel-macros-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1">kernel-source-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1">kernel-syms-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1">kernel-xen-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1">kernel-xen-base-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1">kernel-xen-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1">kernel-default-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1">kernel-default-base-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1">kernel-default-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1">kernel-default-man-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1">kernel-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1">kernel-macros-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1">kernel-source-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1">kernel-syms-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1">kernel-xen-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1">kernel-xen-base-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1">kernel-xen-devel-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-3.12.51-52.31.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5">kernel-docs-3.12.51-52.31.5 as a component of SUSE Linux Enterprise Software Development Kit 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-build-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 12">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1">kernel-obs-build-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Software Development Kit 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-extra-3.12.51-52.31.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1">kernel-default-extra-3.12.51-52.31.1 as a component of SUSE Linux Enterprise Workstation Extension 12</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.</Note>
    </Notes>
    <CVE>CVE-2015-0272</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-0272.html</URL>
        <Description>CVE-2015-0272</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020452</URL>
        <Description>SUSE Bug 1020452</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/944296</URL>
        <Description>SUSE Bug 944296</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951638</URL>
        <Description>SUSE Bug 951638</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/955354</URL>
        <Description>SUSE Bug 955354</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."</Note>
    </Notes>
    <CVE>CVE-2015-2925</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.9</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-2925.html</URL>
        <Description>CVE-2015-2925</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/926238</URL>
        <Description>SUSE Bug 926238</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951625</URL>
        <Description>SUSE Bug 951625</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951638</URL>
        <Description>SUSE Bug 951638</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/963994</URL>
        <Description>SUSE Bug 963994</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished.</Note>
    </Notes>
    <CVE>CVE-2015-5283</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.7</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5283.html</URL>
        <Description>CVE-2015-5283</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/947155</URL>
        <Description>SUSE Bug 947155</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.</Note>
    </Notes>
    <CVE>CVE-2015-5307</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.7</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5307.html</URL>
        <Description>CVE-2015-5307</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/953527</URL>
        <Description>SUSE Bug 953527</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/954018</URL>
        <Description>SUSE Bug 954018</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/954404</URL>
        <Description>SUSE Bug 954404</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/954405</URL>
        <Description>SUSE Bug 954405</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/962977</URL>
        <Description>SUSE Bug 962977</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.</Note>
    </Notes>
    <CVE>CVE-2015-7799</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-7799.html</URL>
        <Description>CVE-2015-7799</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020452</URL>
        <Description>SUSE Bug 1020452</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1052256</URL>
        <Description>SUSE Bug 1052256</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/949936</URL>
        <Description>SUSE Bug 949936</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951638</URL>
        <Description>SUSE Bug 951638</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands.</Note>
    </Notes>
    <CVE>CVE-2015-7872</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-7872.html</URL>
        <Description>CVE-2015-7872</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951440</URL>
        <Description>SUSE Bug 951440</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951542</URL>
        <Description>SUSE Bug 951542</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/951638</URL>
        <Description>SUSE Bug 951638</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958463</URL>
        <Description>SUSE Bug 958463</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958601</URL>
        <Description>SUSE Bug 958601</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.</Note>
    </Notes>
    <CVE>CVE-2015-7990</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5.9</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:P/I:P/A:C</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-7990.html</URL>
        <Description>CVE-2015-7990</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/945825</URL>
        <Description>SUSE Bug 945825</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/952384</URL>
        <Description>SUSE Bug 952384</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/953052</URL>
        <Description>SUSE Bug 953052</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.</Note>
    </Notes>
    <CVE>CVE-2015-8104</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-1-2.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 12:kernel-ec2-extra-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-default-man-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-macros-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-source-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-syms-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-base-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12:kernel-xen-devel-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-docs-3.12.51-52.31.5</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 12:kernel-obs-build-3.12.51-52.31.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:kernel-default-extra-3.12.51-52.31.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.7</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152194-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8104.html</URL>
        <Description>CVE-2015-8104</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1215748</URL>
        <Description>SUSE Bug 1215748</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/953527</URL>
        <Description>SUSE Bug 953527</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/954018</URL>
        <Description>SUSE Bug 954018</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/954404</URL>
        <Description>SUSE Bug 954404</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/954405</URL>
        <Description>SUSE Bug 954405</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/962977</URL>
        <Description>SUSE Bug 962977</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
