View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-7913 severity important: SUSE including 147 source package names (cluster-md-kmp-default-4.4.38-93.1, cluster-network-kmp-default-4.4.38-93.1, …), 477 product×package rows across 88 product lines (HPE Helion OpenStack 8, SLES for SAP Applications 11 SP2, … (88 product lines)): Known Not Affected 277, Fixed 200.
The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.