drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an ABORT_TASK command to abort a device write operation. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6327
