View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-5696 severity moderate: SUSE including 159 source package names (kernel-bigmem-3.0.101-94.1, kernel-bigmem-base-3.0.101-94.1, …), 548 product×package rows across 87 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.0, … (87 product lines)): Fixed 290, Known Not Affected 258.
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.