View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-4485 severity moderate: SUSE including 147 source package names (kernel-bigsmp-3.0.101-0.47.86.1, kernel-bigsmp-base-3.0.101-0.47.86.1, …), 482 product×package rows across 66 product lines (HPE Helion OpenStack 8, SLES for SAP Applications 11 SP3, … (66 product lines)): Known Not Affected 253, Fixed 229.
The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message.