<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2016:1382-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2016-05-23T10:37:47Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2016-05-23T10:37:47Z</InitialReleaseDate>
    <CurrentReleaseDate>2016-05-23T10:37:47Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:
- CVE-2016-2847: Limit the per-user amount of pages allocated in pipes (bsc#970948).
- CVE-2016-3136: mct_u232: add sanity checking in probe (bnc#970955).
- CVE-2016-2188: iowarrior: fix oops with malicious USB descriptors (bnc#970956).
- CVE-2016-3138: cdc-acm: more sanity checking (bnc#970911).
- CVE-2016-3137: cypress_m8: add endpoint sanity check (bnc#970970).
- CVE-2016-3951: cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind (bnc#974418).
- CVE-2016-3140: digi_acceleport: do sanity checking for the number of ports (bnc#970892).
- CVE-2016-2186: powermate: fix oops with malicious USB descriptors (bnc#970958).
- CVE-2016-2185: usb_driver_claim_interface: add sanity checking (bnc#971124).
- CVE-2016-3689: ims-pcu: sanity check against missing interfaces (bnc#971628).
- CVE-2016-3156: ipv4: Do not do expensive useless work during inetdev destroy (bsc#971360).

The following non-security bugs were fixed:
- ALSA: timer: Call notifier in the same spinlock (bsc#973378).
- ALSA: timer: Protect the whole snd_timer_close() with open race (bsc#973378).
- ALSA: timer: Sync timer deletion at closing the system timer (bsc#973378).
- ALSA: timer: Use mod_timer() for rearming the system timer (bsc#973378).
- Backport arm64 patches from SLE12-SP1-ARM
- Fix kABI additions for pipe: limit the per-user amount of pages allocated in pipes.
- Revert 'drm/radeon: call hpd_irq_event on resume' (boo#975868).
- Update config files. Enable RTC_HCTOSYS, build I2C_XGENE_SLIMPRO as a module.
- backends: guarantee one time reads of shared ring contents (bsc#957988).
- ext4: fix races between buffered IO and collapse / insert range (bsc#972174).
- ext4: fix races between page faults and hole punching (bsc#972174).
- ext4: fix races of writeback with punch hole and zero range (bsc#972174).
- ext4: move unlocked dio protection from ext4_alloc_file_blocks() (bsc#972174).
- net: thunderx: Use napi_schedule_irqoff() 
- netback: do not use last request to determine minimum Tx credit (bsc#957988).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      <Description>E-Mail link for openSUSE-SU-2016:1382-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="openSUSE Leap 42.1">
      <Branch Type="Product Name" Name="openSUSE Leap 42.1">
        <FullProductName ProductID="openSUSE Leap 42.1">openSUSE Leap 42.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-4.1.21-14.2">
      <FullProductName ProductID="kernel-debug-4.1.21-14.2">kernel-debug-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-base-4.1.21-14.2">
      <FullProductName ProductID="kernel-debug-base-4.1.21-14.2">kernel-debug-base-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-debug-devel-4.1.21-14.2">kernel-debug-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-4.1.21-14.2">
      <FullProductName ProductID="kernel-default-4.1.21-14.2">kernel-default-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-4.1.21-14.2">
      <FullProductName ProductID="kernel-default-base-4.1.21-14.2">kernel-default-base-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-default-devel-4.1.21-14.2">kernel-default-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-devel-4.1.21-14.2">kernel-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-4.1.21-14.5">
      <FullProductName ProductID="kernel-docs-4.1.21-14.5">kernel-docs-4.1.21-14.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-html-4.1.21-14.5">
      <FullProductName ProductID="kernel-docs-html-4.1.21-14.5">kernel-docs-html-4.1.21-14.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-pdf-4.1.21-14.5">
      <FullProductName ProductID="kernel-docs-pdf-4.1.21-14.5">kernel-docs-pdf-4.1.21-14.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-4.1.21-14.2">
      <FullProductName ProductID="kernel-ec2-4.1.21-14.2">kernel-ec2-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-base-4.1.21-14.2">
      <FullProductName ProductID="kernel-ec2-base-4.1.21-14.2">kernel-ec2-base-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-ec2-devel-4.1.21-14.2">kernel-ec2-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-macros-4.1.21-14.2">
      <FullProductName ProductID="kernel-macros-4.1.21-14.2">kernel-macros-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-build-4.1.21-14.4">
      <FullProductName ProductID="kernel-obs-build-4.1.21-14.4">kernel-obs-build-4.1.21-14.4</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-qa-4.1.21-14.2">
      <FullProductName ProductID="kernel-obs-qa-4.1.21-14.2">kernel-obs-qa-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-qa-xen-4.1.21-14.2">
      <FullProductName ProductID="kernel-obs-qa-xen-4.1.21-14.2">kernel-obs-qa-xen-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-4.1.21-14.2">
      <FullProductName ProductID="kernel-pae-4.1.21-14.2">kernel-pae-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-base-4.1.21-14.2">
      <FullProductName ProductID="kernel-pae-base-4.1.21-14.2">kernel-pae-base-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-pae-devel-4.1.21-14.2">kernel-pae-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pv-4.1.21-14.2">
      <FullProductName ProductID="kernel-pv-4.1.21-14.2">kernel-pv-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pv-base-4.1.21-14.2">
      <FullProductName ProductID="kernel-pv-base-4.1.21-14.2">kernel-pv-base-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pv-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-pv-devel-4.1.21-14.2">kernel-pv-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-4.1.21-14.2">
      <FullProductName ProductID="kernel-source-4.1.21-14.2">kernel-source-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-vanilla-4.1.21-14.2">
      <FullProductName ProductID="kernel-source-vanilla-4.1.21-14.2">kernel-source-vanilla-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-4.1.21-14.2">
      <FullProductName ProductID="kernel-syms-4.1.21-14.2">kernel-syms-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-4.1.21-14.2">
      <FullProductName ProductID="kernel-vanilla-4.1.21-14.2">kernel-vanilla-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-vanilla-devel-4.1.21-14.2">kernel-vanilla-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-4.1.21-14.2">
      <FullProductName ProductID="kernel-xen-4.1.21-14.2">kernel-xen-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-base-4.1.21-14.2">
      <FullProductName ProductID="kernel-xen-base-4.1.21-14.2">kernel-xen-base-4.1.21-14.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-devel-4.1.21-14.2">
      <FullProductName ProductID="kernel-xen-devel-4.1.21-14.2">kernel-xen-devel-4.1.21-14.2</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-debug-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-debug-4.1.21-14.2">kernel-debug-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-debug-base-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2">kernel-debug-base-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-debug-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2">kernel-debug-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-default-4.1.21-14.2">kernel-default-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2">kernel-default-base-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2">kernel-default-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-devel-4.1.21-14.2">kernel-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-4.1.21-14.5" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-docs-4.1.21-14.5">kernel-docs-4.1.21-14.5 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-html-4.1.21-14.5" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5">kernel-docs-html-4.1.21-14.5 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-pdf-4.1.21-14.5" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5">kernel-docs-pdf-4.1.21-14.5 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2">kernel-ec2-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-base-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2">kernel-ec2-base-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2">kernel-ec2-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-macros-4.1.21-14.2">kernel-macros-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-build-4.1.21-14.4" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4">kernel-obs-build-4.1.21-14.4 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-qa-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2">kernel-obs-qa-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-obs-qa-xen-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2">kernel-obs-qa-xen-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-pae-4.1.21-14.2">kernel-pae-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-base-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2">kernel-pae-base-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2">kernel-pae-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pv-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-pv-4.1.21-14.2">kernel-pv-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pv-base-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2">kernel-pv-base-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pv-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2">kernel-pv-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-source-4.1.21-14.2">kernel-source-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-vanilla-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2">kernel-source-vanilla-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-syms-4.1.21-14.2">kernel-syms-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-vanilla-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2">kernel-vanilla-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-vanilla-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2">kernel-vanilla-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-xen-4.1.21-14.2">kernel-xen-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2">kernel-xen-base-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-4.1.21-14.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 42.1">
      <FullProductName ProductID="openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2">kernel-xen-devel-4.1.21-14.2 as a component of openSUSE Leap 42.1</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.</Note>
    </Notes>
    <CVE>CVE-2016-2185</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-2185.html</URL>
        <Description>CVE-2016-2185</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/971124</URL>
        <Description>SUSE Bug 971124</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.</Note>
    </Notes>
    <CVE>CVE-2016-2186</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-2186.html</URL>
        <Description>CVE-2016-2186</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970958</URL>
        <Description>SUSE Bug 970958</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.</Note>
    </Notes>
    <CVE>CVE-2016-2188</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-2188.html</URL>
        <Description>CVE-2016-2188</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1067912</URL>
        <Description>SUSE Bug 1067912</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1132190</URL>
        <Description>SUSE Bug 1132190</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970956</URL>
        <Description>SUSE Bug 970956</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.</Note>
    </Notes>
    <CVE>CVE-2016-2847</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.6</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.2</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-2847.html</URL>
        <Description>CVE-2016-2847</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970948</URL>
        <Description>SUSE Bug 970948</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974646</URL>
        <Description>SUSE Bug 974646</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.</Note>
    </Notes>
    <CVE>CVE-2016-3136</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3136.html</URL>
        <Description>CVE-2016-3136</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970955</URL>
        <Description>SUSE Bug 970955</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and cypress_open functions.</Note>
    </Notes>
    <CVE>CVE-2016-3137</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3137.html</URL>
        <Description>CVE-2016-3137</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970970</URL>
        <Description>SUSE Bug 970970</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.</Note>
    </Notes>
    <CVE>CVE-2016-3138</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3138.html</URL>
        <Description>CVE-2016-3138</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970911</URL>
        <Description>SUSE Bug 970911</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970970</URL>
        <Description>SUSE Bug 970970</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.</Note>
    </Notes>
    <CVE>CVE-2016-3140</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3140.html</URL>
        <Description>CVE-2016-3140</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/970892</URL>
        <Description>SUSE Bug 970892</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses.</Note>
    </Notes>
    <CVE>CVE-2016-3156</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>1.5</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3156.html</URL>
        <Description>CVE-2016-3156</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/971360</URL>
        <Description>SUSE Bug 971360</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.</Note>
    </Notes>
    <CVE>CVE-2016-3689</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3689.html</URL>
        <Description>CVE-2016-3689</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/971628</URL>
        <Description>SUSE Bug 971628</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.</Note>
    </Notes>
    <CVE>CVE-2016-3951</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE Leap 42.1:kernel-debug-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-debug-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-default-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-html-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-docs-pdf-4.1.21-14.5</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-ec2-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-macros-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-build-4.1.21-14.4</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-obs-qa-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pae-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-pv-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-source-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-syms-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-vanilla-devel-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-base-4.1.21-14.2</ProductID>
        <ProductID>openSUSE Leap 42.1:kernel-xen-devel-4.1.21-14.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-3951.html</URL>
        <Description>CVE-2016-3951</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974418</URL>
        <Description>SUSE Bug 974418</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
