RHSA-2026:21706
Vulnerability from csaf_opensuse - Published: 2026-05-28 00:00 - Updated: 2026-09-16 18:19Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:21706.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:21706.
Patchnames: RHSA-2026:21706
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
important
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-39981
Threats
Impact
moderate
References
69 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:21706.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:21706.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:21706",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_21706.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:21706",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-May/005702.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:21706",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-May/005702.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39981 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68183 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68347 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68347/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71116 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23270 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23455 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31408 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31532 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31684 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31684/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31685 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31709 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43020 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43051 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43158 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43163 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43190 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46195 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46195/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:19:41Z",
"generator": {
"date": "2026-05-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:21706",
"initial_release_date": "2026-05-28T00:00:00Z",
"revision_history": [
{
"date": "2026-05-28T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:46:57Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:19:41Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.126.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.126.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.126.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.126.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.126.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.126.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.126.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.126.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.126.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.126.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.126.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.126.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.126.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.126.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.126.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.126.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.126.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.126.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.126.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.126.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.126.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-39981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39981"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible UAFs\n\nThis attemps to fix possible UAFs caused by struct mgmt_pending being\nfreed while still being processed like in the following trace, in order\nto fix mgmt_pending_valid is introduce and use to check if the\nmgmt_pending hasn\u0027t been removed from the pending list, on the complete\ncallbacks it is used to check and in addtion remove the cmd from the list\nwhile holding mgmt_pending_lock to avoid TOCTOU problems since if the cmd\nis left on the list it can still be accessed and freed.\n\nBUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223\nRead of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55\n\nCPU: 0 UID: 0 PID: 55 Comm: kworker/u11:0 Not tainted 6.16.4 #2 PREEMPT(full)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xca/0x240 mm/kasan/report.c:482\n kasan_report+0x118/0x150 mm/kasan/report.c:595\n mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223\n hci_cmd_sync_work+0x210/0x3a0 net/bluetooth/hci_sync.c:332\n process_one_work kernel/workqueue.c:3238 [inline]\n process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321\n worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402\n kthread+0x711/0x8a0 kernel/kthread.c:464\n ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148\n ret_from_fork_asm+0x1a/0x30 home/kwqcheii/source/fuzzing/kernel/kasan/linux-6.16.4/arch/x86/entry/entry_64.S:245\n \u003c/TASK\u003e\n\nAllocated by task 12210:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4364\n kmalloc_noprof include/linux/slab.h:905 [inline]\n kzalloc_noprof include/linux/slab.h:1039 [inline]\n mgmt_pending_new+0x65/0x1e0 net/bluetooth/mgmt_util.c:269\n mgmt_pending_add+0x35/0x140 net/bluetooth/mgmt_util.c:296\n __add_adv_patterns_monitor+0x130/0x200 net/bluetooth/mgmt.c:5247\n add_adv_patterns_monitor+0x214/0x360 net/bluetooth/mgmt.c:5364\n hci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719\n hci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839\n sock_sendmsg_nosec net/socket.c:714 [inline]\n __sock_sendmsg+0x219/0x270 net/socket.c:729\n sock_write_iter+0x258/0x330 net/socket.c:1133\n new_sync_write fs/read_write.c:593 [inline]\n vfs_write+0x5c9/0xb30 fs/read_write.c:686\n ksys_write+0x145/0x250 fs/read_write.c:738\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 12221:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x62/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2381 [inline]\n slab_free mm/slub.c:4648 [inline]\n kfree+0x18e/0x440 mm/slub.c:4847\n mgmt_pending_free net/bluetooth/mgmt_util.c:311 [inline]\n mgmt_pending_foreach+0x30d/0x380 net/bluetooth/mgmt_util.c:257\n __mgmt_power_off+0x169/0x350 net/bluetooth/mgmt.c:9444\n hci_dev_close_sync+0x754/0x1330 net/bluetooth/hci_sync.c:5290\n hci_dev_do_close net/bluetooth/hci_core.c:501 [inline]\n hci_dev_close+0x108/0x200 net/bluetooth/hci_core.c:526\n sock_do_ioctl+0xd9/0x300 net/socket.c:1192\n sock_ioctl+0x576/0x790 net/socket.c:1313\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xf\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39981",
"url": "https://www.suse.com/security/cve/CVE-2025-39981"
},
{
"category": "external",
"summary": "SUSE Bug 1252060 for CVE-2025-39981",
"url": "https://bugzilla.suse.com/1252060"
},
{
"category": "external",
"summary": "SUSE Bug 1252061 for CVE-2025-39981",
"url": "https://bugzilla.suse.com/1252061"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-39981"
},
{
"cve": "CVE-2025-68183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68183"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: don\u0027t clear IMA_DIGSIG flag when setting or removing non-IMA xattr\n\nCurrently when both IMA and EVM are in fix mode, the IMA signature will\nbe reset to IMA hash if a program first stores IMA signature in\nsecurity.ima and then writes/removes some other security xattr for the\nfile.\n\nFor example, on Fedora, after booting the kernel with \"ima_appraise=fix\nevm=fix ima_policy=appraise_tcb\" and installing rpm-plugin-ima,\ninstalling/reinstalling a package will not make good reference IMA\nsignature generated. Instead IMA hash is generated,\n\n # getfattr -m - -d -e hex /usr/bin/bash\n # file: usr/bin/bash\n security.ima=0x0404...\n\nThis happens because when setting security.selinux, the IMA_DIGSIG flag\nthat had been set early was cleared. As a result, IMA hash is generated\nwhen the file is closed.\n\nSimilarly, IMA signature can be cleared on file close after removing\nsecurity xattr like security.evm or setting/removing ACL.\n\nPrevent replacing the IMA file signature with a file hash, by preventing\nthe IMA_DIGSIG flag from being reset.\n\nHere\u0027s a minimal C reproducer which sets security.selinux as the last\nstep which can also replaced by removing security.evm or setting ACL,\n\n #include \u003cstdio.h\u003e\n #include \u003csys/xattr.h\u003e\n #include \u003cfcntl.h\u003e\n #include \u003cunistd.h\u003e\n #include \u003cstring.h\u003e\n #include \u003cstdlib.h\u003e\n\n int main() {\n const char* file_path = \"/usr/sbin/test_binary\";\n const char* hex_string = \"030204d33204490066306402304\";\n int length = strlen(hex_string);\n char* ima_attr_value;\n int fd;\n\n fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);\n if (fd == -1) {\n perror(\"Error opening file\");\n return 1;\n }\n\n ima_attr_value = (char*)malloc(length / 2 );\n for (int i = 0, j = 0; i \u003c length; i += 2, j++) {\n sscanf(hex_string + i, \"%2hhx\", \u0026ima_attr_value[j]);\n }\n\n if (fsetxattr(fd, \"security.ima\", ima_attr_value, length/2, 0) == -1) {\n perror(\"Error setting extended attribute\");\n close(fd);\n return 1;\n }\n\n const char* selinux_value= \"system_u:object_r:bin_t:s0\";\n if (fsetxattr(fd, \"security.selinux\", selinux_value, strlen(selinux_value), 0) == -1) {\n perror(\"Error setting extended attribute\");\n close(fd);\n return 1;\n }\n\n close(fd);\n\n return 0;\n }",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68183",
"url": "https://www.suse.com/security/cve/CVE-2025-68183"
},
{
"category": "external",
"summary": "SUSE Bug 1255251 for CVE-2025-68183",
"url": "https://bugzilla.suse.com/1255251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68183"
},
{
"cve": "CVE-2025-68347",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68347"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events\n\nThe DSP event handling code in hwdep_read() could write more bytes to\nthe user buffer than requested, when a user provides a buffer smaller\nthan the event header size (8 bytes).\n\nFix by using min_t() to clamp the copy size, This ensures we never copy\nmore than the user requested.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68347",
"url": "https://www.suse.com/security/cve/CVE-2025-68347"
},
{
"category": "external",
"summary": "SUSE Bug 1255706 for CVE-2025-68347",
"url": "https://bugzilla.suse.com/1255706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68347"
},
{
"cve": "CVE-2025-71116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71116"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: make decode_pool() more resilient against corrupted osdmaps\n\nIf the osdmap is (maliciously) corrupted such that the encoded length\nof ceph_pg_pool envelope is less than what is expected for a particular\nencoding version, out-of-bounds reads may ensue because the only bounds\ncheck that is there is based on that length value.\n\nThis patch adds explicit bounds checks for each field that is decoded\nor skipped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71116",
"url": "https://www.suse.com/security/cve/CVE-2025-71116"
},
{
"category": "external",
"summary": "SUSE Bug 1256744 for CVE-2025-71116",
"url": "https://bugzilla.suse.com/1256744"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-71116"
},
{
"cve": "CVE-2026-23243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23243"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/umad: Reject negative data_len in ib_umad_write\n\nib_umad_write computes data_len from user-controlled count and the\nMAD header sizes. With a mismatched user MAD header size and RMPP\nheader length, data_len can become negative and reach ib_create_send_mad().\nThis can make the padding calculation exceed the segment size and trigger\nan out-of-bounds memset in alloc_send_rmpp_list().\n\nAdd an explicit check to reject negative data_len before creating the\nsend buffer.\n\nKASAN splat:\n[ 211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0\n[ 211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102\n[ 211.365867] ib_create_send_mad+0xa01/0x11b0\n[ 211.365887] ib_umad_write+0x853/0x1c80",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23243",
"url": "https://www.suse.com/security/cve/CVE-2026-23243"
},
{
"category": "external",
"summary": "SUSE Bug 1259797 for CVE-2026-23243",
"url": "https://bugzilla.suse.com/1259797"
},
{
"category": "external",
"summary": "SUSE Bug 1259798 for CVE-2026-23243",
"url": "https://bugzilla.suse.com/1259798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23243"
},
{
"cve": "CVE-2026-23270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23270"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks\n\nAs Paolo said earlier [1]:\n\n\"Since the blamed commit below, classify can return TC_ACT_CONSUMED while\nthe current skb being held by the defragmentation engine. As reported by\nGangMin Kim, if such packet is that may cause a UaF when the defrag engine\nlater on tries to tuch again such packet.\"\n\nact_ct was never meant to be used in the egress path, however some users\nare attaching it to egress today [2]. Attempting to reach a middle\nground, we noticed that, while most qdiscs are not handling\nTC_ACT_CONSUMED, clsact/ingress qdiscs are. With that in mind, we\naddress the issue by only allowing act_ct to bind to clsact/ingress\nqdiscs and shared blocks. That way it\u0027s still possible to attach act_ct to\negress (albeit only with clsact).\n\n[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/\n[2] https://lore.kernel.org/netdev/cc6bfb4a-4a2b-42d8-b9ce-7ef6644fb22b@ovn.org/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23270",
"url": "https://www.suse.com/security/cve/CVE-2026-23270"
},
{
"category": "external",
"summary": "SUSE Bug 1259886 for CVE-2026-23270",
"url": "https://bugzilla.suse.com/1259886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-23270"
},
{
"cve": "CVE-2026-23455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23455"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()\n\nIn DecodeQ931(), the UserUserIE code path reads a 16-bit length from\nthe packet, then decrements it by 1 to skip the protocol discriminator\nbyte before passing it to DecodeH323_UserInformation(). If the encoded\nlength is 0, the decrement wraps to -1, which is then passed as a\nlarge value to the decoder, leading to an out-of-bounds read.\n\nAdd a check to ensure len is positive after the decrement.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23455",
"url": "https://www.suse.com/security/cve/CVE-2026-23455"
},
{
"category": "external",
"summary": "SUSE Bug 1261687 for CVE-2026-23455",
"url": "https://bugzilla.suse.com/1261687"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-23455"
},
{
"cve": "CVE-2026-31408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31408"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold\n\nsco_recv_frame() reads conn-\u003esk under sco_conn_lock() but immediately\nreleases the lock without holding a reference to the socket. A concurrent\nclose() can free the socket between the lock release and the subsequent\nsk-\u003esk_state access, resulting in a use-after-free.\n\nOther functions in the same file (sco_sock_timeout(), sco_conn_del())\ncorrectly use sco_sock_hold() to safely hold a reference under the lock.\n\nFix by using sco_sock_hold() to take a reference before releasing the\nlock, and adding sock_put() on all exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31408",
"url": "https://www.suse.com/security/cve/CVE-2026-31408"
},
{
"category": "external",
"summary": "SUSE Bug 1261797 for CVE-2026-31408",
"url": "https://bugzilla.suse.com/1261797"
},
{
"category": "external",
"summary": "SUSE Bug 1261799 for CVE-2026-31408",
"url": "https://bugzilla.suse.com/1261799"
},
{
"category": "external",
"summary": "SUSE Bug 1265552 for CVE-2026-31408",
"url": "https://bugzilla.suse.com/1265552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31408"
},
{
"cve": "CVE-2026-31532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: raw: fix ro-\u003euniq use-after-free in raw_rcv()\n\nraw_release() unregisters raw CAN receive filters via can_rx_unregister(),\nbut receiver deletion is deferred with call_rcu(). This leaves a window\nwhere raw_rcv() may still be running in an RCU read-side critical section\nafter raw_release() frees ro-\u003euniq, leading to a use-after-free of the\npercpu uniq storage.\n\nMove free_percpu(ro-\u003euniq) out of raw_release() and into a raw-specific\nsocket destructor. can_rx_unregister() takes an extra reference to the\nsocket and only drops it from the RCU callback, so freeing uniq from\nsk_destruct ensures the percpu area is not released until the relevant\ncallbacks have drained.\n\n[mkl: applied manually]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31532",
"url": "https://www.suse.com/security/cve/CVE-2026-31532"
},
{
"category": "external",
"summary": "SUSE Bug 1262757 for CVE-2026-31532",
"url": "https://bugzilla.suse.com/1262757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-31532"
},
{
"cve": "CVE-2026-31684",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31684"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: act_csum: validate nested VLAN headers\n\ntcf_csum_act() walks nested VLAN headers directly from skb-\u003edata when an\nskb still carries in-payload VLAN tags. The current code reads\nvlan-\u003eh_vlan_encapsulated_proto and then pulls VLAN_HLEN bytes without\nfirst ensuring that the full VLAN header is present in the linear area.\n\nIf only part of an inner VLAN header is linearized, accessing\nh_vlan_encapsulated_proto reads past the linear area, and the following\nskb_pull(VLAN_HLEN) may violate skb invariants.\n\nFix this by requiring pskb_may_pull(skb, VLAN_HLEN) before accessing and\npulling each nested VLAN header. If the header still is not fully\navailable, drop the packet through the existing error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31684",
"url": "https://www.suse.com/security/cve/CVE-2026-31684"
},
{
"category": "external",
"summary": "SUSE Bug 1263596 for CVE-2026-31684",
"url": "https://bugzilla.suse.com/1263596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-31684"
},
{
"cve": "CVE-2026-31685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6t_eui64: reject invalid MAC header for all packets\n\n`eui64_mt6()` derives a modified EUI-64 from the Ethernet source address\nand compares it with the low 64 bits of the IPv6 source address.\n\nThe existing guard only rejects an invalid MAC header when\n`par-\u003efragoff != 0`. For packets with `par-\u003efragoff == 0`, `eui64_mt6()`\ncan still reach `eth_hdr(skb)` even when the MAC header is not valid.\n\nFix this by removing the `par-\u003efragoff != 0` condition so that packets\nwith an invalid MAC header are rejected before accessing `eth_hdr(skb)`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31685",
"url": "https://www.suse.com/security/cve/CVE-2026-31685"
},
{
"category": "external",
"summary": "SUSE Bug 1263668 for CVE-2026-31685",
"url": "https://bugzilla.suse.com/1263668"
},
{
"category": "external",
"summary": "SUSE Bug 1263670 for CVE-2026-31685",
"url": "https://bugzilla.suse.com/1263670"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31685"
},
{
"cve": "CVE-2026-31709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: validate the whole DACL before rewriting it in cifsacl\n\nbuild_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a\nserver-supplied dacloffset and then use the incoming ACL to rebuild the\nchmod/chown security descriptor.\n\nThe original fix only checked that the struct smb_acl header fits before\nreading dacl_ptr-\u003esize or dacl_ptr-\u003enum_aces. That avoids the immediate\nheader-field OOB read, but the rewrite helpers still walk ACEs based on\npdacl-\u003enum_aces with no structural validation of the incoming DACL body.\n\nA malicious server can return a truncated DACL that still contains a\nheader, claims one or more ACEs, and then drive\nreplace_sids_and_copy_aces() or set_chmod_dacl() past the validated\nextent while they compare or copy attacker-controlled ACEs.\n\nFactor the DACL structural checks into validate_dacl(), extend them to\nvalidate each ACE against the DACL bounds, and use the shared validator\nbefore the chmod/chown rebuild paths. parse_dacl() reuses the same\nvalidator so the read-side parser and write-side rewrite paths agree on\nwhat constitutes a well-formed incoming DACL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31709",
"url": "https://www.suse.com/security/cve/CVE-2026-31709"
},
{
"category": "external",
"summary": "SUSE Bug 1264024 for CVE-2026-31709",
"url": "https://bugzilla.suse.com/1264024"
},
{
"category": "external",
"summary": "SUSE Bug 1264140 for CVE-2026-31709",
"url": "https://bugzilla.suse.com/1264140"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31709"
},
{
"cve": "CVE-2026-43020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate LTK enc_size on load\n\nLoad Long Term Keys stores the user-provided enc_size and later uses\nit to size fixed-size stack operations when replying to LE LTK\nrequests. An enc_size larger than the 16-byte key buffer can therefore\noverflow the reply stack buffer.\n\nReject oversized enc_size values while validating the management LTK\nrecord so invalid keys never reach the stored key state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43020",
"url": "https://www.suse.com/security/cve/CVE-2026-43020"
},
{
"category": "external",
"summary": "SUSE Bug 1264006 for CVE-2026-43020",
"url": "https://bugzilla.suse.com/1264006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43020"
},
{
"cve": "CVE-2026-43027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43027"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_helper: pass helper to expect cleanup\n\nnf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy()\nto remove expectations belonging to the helper being unregistered.\nHowever, it passes NULL instead of the helper pointer as the data\nargument, so expect_iter_me() never matches any expectation and all\nof them survive the cleanup.\n\nAfter unregister returns, nfnl_cthelper_del() frees the helper\nobject immediately. Subsequent expectation dumps or packet-driven\ninit_conntrack() calls then dereference the freed exp-\u003ehelper,\ncausing a use-after-free.\n\nPass the actual helper pointer so expectations referencing it are\nproperly destroyed before the helper object is freed.\n\n BUG: KASAN: slab-use-after-free in string+0x38f/0x430\n Read of size 1 at addr ffff888003b14d20 by task poc/103\n Call Trace:\n string+0x38f/0x430\n vsnprintf+0x3cc/0x1170\n seq_printf+0x17a/0x240\n exp_seq_show+0x2e5/0x560\n seq_read_iter+0x419/0x1280\n proc_reg_read+0x1ac/0x270\n vfs_read+0x179/0x930\n ksys_read+0xef/0x1c0\n Freed by task 103:\n The buggy address is located 32 bytes inside of\n freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43027",
"url": "https://www.suse.com/security/cve/CVE-2026-43027"
},
{
"category": "external",
"summary": "SUSE Bug 1263933 for CVE-2026-43027",
"url": "https://bugzilla.suse.com/1263933"
},
{
"category": "external",
"summary": "SUSE Bug 1264252 for CVE-2026-43027",
"url": "https://bugzilla.suse.com/1264252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43027"
},
{
"cve": "CVE-2026-43051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq\n\nThe wacom_intuos_bt_irq() function processes Bluetooth HID reports\nwithout sufficient bounds checking. A maliciously crafted short report\ncan trigger an out-of-bounds read when copying data into the wacom\nstructure.\n\nSpecifically, report 0x03 requires at least 22 bytes to safely read\nthe processed data and battery status, while report 0x04 (which\nfalls through to 0x03) requires 32 bytes.\n\nAdd explicit length checks for these report IDs and log a warning if\na short report is received.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43051",
"url": "https://www.suse.com/security/cve/CVE-2026-43051"
},
{
"category": "external",
"summary": "SUSE Bug 1264065 for CVE-2026-43051",
"url": "https://bugzilla.suse.com/1264065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43051"
},
{
"cve": "CVE-2026-43158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix freemap adjustments when adding xattrs to leaf blocks\n\nxfs/592 and xfs/794 both trip this assertion in the leaf block freemap\nadjustment code after ~20 minutes of running on my test VMs:\n\n ASSERT(ichdr-\u003efirstused \u003e= ichdr-\u003ecount * sizeof(xfs_attr_leaf_entry_t)\n\t\t\t\t\t+ xfs_attr3_leaf_hdr_size(leaf));\n\nUpon enabling quite a lot more debugging code, I narrowed this down to\nfsstress trying to set a local extended attribute with namelen=3 and\nvaluelen=71. This results in an entry size of 80 bytes.\n\nAt the start of xfs_attr3_leaf_add_work, the freemap looks like this:\n\ni 0 base 448 size 0 rhs 448 count 46\ni 1 base 388 size 132 rhs 448 count 46\ni 2 base 2120 size 4 rhs 448 count 46\nfirstused = 520\n\nwhere \"rhs\" is the first byte past the end of the leaf entry array.\nThis is inconsistent -- the entries array ends at byte 448, but\nfreemap[1] says there\u0027s free space starting at byte 388!\n\nBy the end of the function, the freemap is in worse shape:\n\ni 0 base 456 size 0 rhs 456 count 47\ni 1 base 388 size 52 rhs 456 count 47\ni 2 base 2120 size 4 rhs 456 count 47\nfirstused = 440\n\nImportant note: 388 is not aligned with the entries array element size\nof 8 bytes.\n\nBased on the incorrect freemap, the name area starts at byte 440, which\nis below the end of the entries array! That\u0027s why the assertion\ntriggers and the filesystem shuts down.\n\nHow did we end up here? First, recall from the previous patch that the\nfreemap array in an xattr leaf block is not intended to be a\ncomprehensive map of all free space in the leaf block. In other words,\nit\u0027s perfectly legal to have a leaf block with:\n\n * 376 bytes in use by the entries array\n * freemap[0] has [base = 376, size = 8]\n * freemap[1] has [base = 388, size = 1500]\n * the space between 376 and 388 is free, but the freemap stopped\n tracking that some time ago\n\nIf we add one xattr, the entries array grows to 384 bytes, and\nfreemap[0] becomes [base = 384, size = 0]. So far, so good. But if we\nadd a second xattr, the entries array grows to 392 bytes, and freemap[0]\ngets pushed up to [base = 392, size = 0]. This is bad, because\nfreemap[1] hasn\u0027t been updated, and now the entries array and the free\nspace claim the same space.\n\nThe fix here is to adjust all freemap entries so that none of them\ncollide with the entries array. Note that this fix relies on commit\n2a2b5932db6758 (\"xfs: fix attr leaf header freemap.size underflow\") and\nthe previous patch that resets zero length freemap entries to have\nbase = 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43158",
"url": "https://www.suse.com/security/cve/CVE-2026-43158"
},
{
"category": "external",
"summary": "SUSE Bug 1264595 for CVE-2026-43158",
"url": "https://bugzilla.suse.com/1264595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43158"
},
{
"cve": "CVE-2026-43163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43163"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/bitmap: fix GPF in write_page caused by resize race\n\nA General Protection Fault occurs in write_page() during array resize:\nRIP: 0010:write_page+0x22b/0x3c0 [md_mod]\n\nThis is a use-after-free race between bitmap_daemon_work() and\n__bitmap_resize(). The daemon iterates over `bitmap-\u003estorage.filemap`\nwithout locking, while the resize path frees that storage via\nmd_bitmap_file_unmap(). `quiesce()` does not stop the md thread,\nallowing concurrent access to freed pages.\n\nFix by holding `mddev-\u003ebitmap_info.mutex` during the bitmap update.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43163",
"url": "https://www.suse.com/security/cve/CVE-2026-43163"
},
{
"category": "external",
"summary": "SUSE Bug 1264335 for CVE-2026-43163",
"url": "https://bugzilla.suse.com/1264335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43163"
},
{
"cve": "CVE-2026-43190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_tcpmss: check remaining length before reading optlen\n\nQuoting reporter:\n In net/netfilter/xt_tcpmss.c (lines 53-68), the TCP option parser reads\n op[i+1] directly without validating the remaining option length.\n\n If the last byte of the option field is not EOL/NOP (0/1), the code attempts\n to index op[i+1]. In the case where i + 1 == optlen, this causes an\n out-of-bounds read, accessing memory past the optlen boundary\n (either reading beyond the stack buffer _opt or the\n following payload).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43190",
"url": "https://www.suse.com/security/cve/CVE-2026-43190"
},
{
"category": "external",
"summary": "SUSE Bug 1264848 for CVE-2026-43190",
"url": "https://bugzilla.suse.com/1264848"
},
{
"category": "external",
"summary": "SUSE Bug 1264849 for CVE-2026-43190",
"url": "https://bugzilla.suse.com/1264849"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43190"
},
{
"cve": "CVE-2026-46195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: validate dacloffset before building DACL pointers\n\nparse_sec_desc(), build_sec_desc(), and the chown path in\nid_mode_to_cifs_acl() all add the server-supplied dacloffset to pntsd\nbefore proving a DACL header fits inside the returned security\ndescriptor.\n\nOn 32-bit builds a malicious server can return dacloffset near\nU32_MAX, wrap the derived DACL pointer below end_of_acl, and then slip\npast the later pointer-based bounds checks. build_sec_desc() and\nid_mode_to_cifs_acl() can then dereference DACL fields from the wrapped\npointer in the chmod/chown rewrite paths.\n\nValidate dacloffset numerically before building any DACL pointer and\nreuse the same helper at the three DACL entry points.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46195",
"url": "https://www.suse.com/security/cve/CVE-2026-46195"
},
{
"category": "external",
"summary": "SUSE Bug 1266860 for CVE-2026-46195",
"url": "https://bugzilla.suse.com/1266860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.126.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.126.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.126.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46195"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…