# CVEs published 2016-11-16

13 CVEs were published on November 16, 2016: 0 critical, 1 high. Days are UTC.

- [CVE-2015-8961](https://cve.now/CVE-2015-8961.md): The \_\_ext4\_journal\_stop function in fs/ext4/ext4\_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a de (no CVSS)
- [CVE-2015-8962](https://cve.now/CVE-2015-8962.md): Double free vulnerability in the sg\_common\_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain pri (no CVSS)
- [CVE-2015-8963](https://cve.now/CVE-2015-8963.md): Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (us (CVSS 7.0)
- [CVE-2015-8964](https://cve.now/CVE-2015-8964.md): The tty\_set\_termios\_ldisc function in drivers/tty/tty\_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive informat (no CVSS)
- [CVE-2016-7910](https://cve.now/CVE-2016-7910.md): Use-after-free vulnerability in the disk\_seqf\_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain pri (no CVSS)
- [CVE-2016-7911](https://cve.now/CVE-2016-7911.md): Race condition in the get\_task\_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or c (no CVSS)
- [CVE-2016-7912](https://cve.now/CVE-2016-7912.md): Use-after-free vulnerability in the ffs\_user\_copy\_worker function in drivers/usb/gadget/function/f\_fs.c in the Linux kernel before 4.5.3 all (no CVSS)
- [CVE-2016-7913](https://cve.now/CVE-2016-7913.md): The xc2028\_set\_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges o (no CVSS)
- [CVE-2016-7914](https://cve.now/CVE-2016-7914.md): The assoc\_array\_insert\_into\_terminal\_node function in lib/assoc\_array.c in the Linux kernel before 4.5.3 does not check whether a slot is a (no CVSS)
- [CVE-2016-7915](https://cve.now/CVE-2016-7915.md): The hid\_input\_field function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensit (no CVSS)
- [CVE-2016-7916](https://cve.now/CVE-2016-7916.md): Race condition in the environ\_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive inform (no CVSS)
- [CVE-2016-7917](https://cve.now/CVE-2016-7917.md): The nfnetlink\_rcv\_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length (no CVSS)
- [CVE-2016-9318](https://cve.now/CVE-2016-9318.md): libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the curre (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.