Users of linux-libre@4.1 should take notice: I've been unable to find backported patches for CVE-2017-1000364 (Stack Clash mitigation) for linux-4.1. Also, upstream support for that kernel version will reach end-of-life in about a month, so you should plan to migrate to another kernel version soon.
Mark
