View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-4486 severity low: SUSE including 226 source package names (kernel-bigsmp-3.0.101-0.47.86.1, kernel-bigsmp-base-3.0.101-0.47.86.1, …), 510 product×package rows across 71 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (71 product lines)): Fixed 371, Known Not Affected 139.
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.