Arch Linux Security Advisory ASA-201612-11
=========================================
Severity: High
Date : 2016-12-10
CVE-ID : CVE-2016-9919
Package : linux-grsec
Type: denial of service
Remote : Yes
Link : https://wiki.archlinux.org/title/CVE
Description
The package linux-grsec before version 1:4.8.12.r201612062306-2 is
vulnerable to denial of service.
Resolution
=========
Upgrade to 1:4.8.12.r201612062306-2.
# pacman -Syu "linux-grsec>=1:4.8.12.r201612062306-2"
The problem has been fixed upstream but no release is available yet.
Note that while this isn't fixed in upstream 4.8.12 / 4.8.13, it's fixed
in 4.8.13-201612082118.patch so 4.8.13.r201612082118-1 no longer carries
the patch in the downstream package.