View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-4913 severity moderate: SUSE including 111 source package names (bpftool-3.10.0-957.el7, kernel-3.10.0-957.el7, …), 415 product×package rows across 65 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.0, … (65 product lines)): Known Not Affected 229, Fixed 186.
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.