kernel: add fix for CVE-2016-5195