OPENSUSE-SU-2026:10859-1
Vulnerability from csaf_opensuse - Published: 2026-05-25 00:00 - Updated: 2026-09-17 17:06Summary
kernel-devel-7.0.10-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: kernel-devel-7.0.10-1.1 on GA media
Description of the patch: These are all security issues fixed in the kernel-devel-7.0.10-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10859
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.2 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
important
7.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
important
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-43491
Threats
Impact
important
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "kernel-devel-7.0.10-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the kernel-devel-7.0.10-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10859",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10859-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43491 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43491/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43492 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43492/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43493 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43493/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43495 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43496 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43497 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43497/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43498 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43498/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43499 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43499/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43501 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43502 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43502/"
}
],
"title": "kernel-devel-7.0.10-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-17T17:06:37Z",
"generator": {
"date": "2026-05-25T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10859-1",
"initial_release_date": "2026-05-25T00:00:00Z",
"revision_history": [
{
"date": "2026-05-25T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:11:57Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:12:58Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:06:37Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.0.10-1.1.aarch64",
"product": {
"name": "kernel-devel-0:7.0.10-1.1.aarch64",
"product_id": "kernel-devel-0:7.0.10-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.10-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.0.10-1.1.aarch64",
"product": {
"name": "kernel-macros-0:7.0.10-1.1.aarch64",
"product_id": "kernel-macros-0:7.0.10-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.10-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.0.10-1.1.aarch64",
"product": {
"name": "kernel-source-0:7.0.10-1.1.aarch64",
"product_id": "kernel-source-0:7.0.10-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.10-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"product": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"product_id": "kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.10-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.0.10-1.1.ppc64le",
"product": {
"name": "kernel-devel-0:7.0.10-1.1.ppc64le",
"product_id": "kernel-devel-0:7.0.10-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.10-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.0.10-1.1.ppc64le",
"product": {
"name": "kernel-macros-0:7.0.10-1.1.ppc64le",
"product_id": "kernel-macros-0:7.0.10-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.10-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.0.10-1.1.ppc64le",
"product": {
"name": "kernel-source-0:7.0.10-1.1.ppc64le",
"product_id": "kernel-source-0:7.0.10-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.10-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"product": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"product_id": "kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.10-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.0.10-1.1.s390x",
"product": {
"name": "kernel-devel-0:7.0.10-1.1.s390x",
"product_id": "kernel-devel-0:7.0.10-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.10-1.1?arch=s390x\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.0.10-1.1.s390x",
"product": {
"name": "kernel-macros-0:7.0.10-1.1.s390x",
"product_id": "kernel-macros-0:7.0.10-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.10-1.1?arch=s390x\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.0.10-1.1.s390x",
"product": {
"name": "kernel-source-0:7.0.10-1.1.s390x",
"product_id": "kernel-source-0:7.0.10-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.10-1.1?arch=s390x\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.0.10-1.1.s390x",
"product": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.s390x",
"product_id": "kernel-source-vanilla-0:7.0.10-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.10-1.1?arch=s390x\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.0.10-1.1.x86_64",
"product": {
"name": "kernel-devel-0:7.0.10-1.1.x86_64",
"product_id": "kernel-devel-0:7.0.10-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.10-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.0.10-1.1.x86_64",
"product": {
"name": "kernel-macros-0:7.0.10-1.1.x86_64",
"product_id": "kernel-macros-0:7.0.10-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.10-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.0.10-1.1.x86_64",
"product": {
"name": "kernel-source-0:7.0.10-1.1.x86_64",
"product_id": "kernel-source-0:7.0.10-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.10-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.0.10-1.1.x86_64",
"product": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.x86_64",
"product_id": "kernel-source-vanilla-0:7.0.10-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.10:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.10-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.0.10-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.0.10-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64"
},
"product_reference": "kernel-devel-0:7.0.10-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.0.10-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le"
},
"product_reference": "kernel-devel-0:7.0.10-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.0.10-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x"
},
"product_reference": "kernel-devel-0:7.0.10-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.0.10-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64"
},
"product_reference": "kernel-devel-0:7.0.10-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.0.10-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64"
},
"product_reference": "kernel-macros-0:7.0.10-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.0.10-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le"
},
"product_reference": "kernel-macros-0:7.0.10-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.0.10-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x"
},
"product_reference": "kernel-macros-0:7.0.10-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.0.10-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64"
},
"product_reference": "kernel-macros-0:7.0.10-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.0.10-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64"
},
"product_reference": "kernel-source-0:7.0.10-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.0.10-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le"
},
"product_reference": "kernel-source-0:7.0.10-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.0.10-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x"
},
"product_reference": "kernel-source-0:7.0.10-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.0.10-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64"
},
"product_reference": "kernel-source-0:7.0.10-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64"
},
"product_reference": "kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le"
},
"product_reference": "kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x"
},
"product_reference": "kernel-source-vanilla-0:7.0.10-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.0.10-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
},
"product_reference": "kernel-source-vanilla-0:7.0.10-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43491",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43491"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qrtr: ns: Limit the maximum server registration per node\n\nCurrent code does no bound checking on the number of servers added per\nnode. A malicious client can flood NEW_SERVER messages and exhaust memory.\n\nFix this issue by limiting the maximum number of server registrations to\n256 per node. If the NEW_SERVER message is received for an old port, then\ndon\u0027t restrict it as it will get replaced. While at it, also rate limit\nthe error messages in the failure path of qrtr_ns_worker().\n\nNote that the limit of 256 is chosen based on the current platform\nrequirements. If requirement changes in the future, this limit can be\nincreased.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43491",
"url": "https://www.suse.com/security/cve/CVE-2026-43491"
},
{
"category": "external",
"summary": "SUSE Bug 1265628 for CVE-2026-43491",
"url": "https://bugzilla.suse.com/1265628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43491"
},
{
"cve": "CVE-2026-43492",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43492"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()\n\nYiming reports an integer underflow in mpi_read_raw_from_sgl() when\nsubtracting \"lzeros\" from the unsigned \"nbytes\".\n\nFor this to happen, the scatterlist \"sgl\" needs to occupy more bytes\nthan the \"nbytes\" parameter and the first \"nbytes + 1\" bytes of the\nscatterlist must be zero. Under these conditions, the while loop\niterating over the scatterlist will count more zeroes than \"nbytes\",\nsubtract the number of zeroes from \"nbytes\" and cause the underflow.\n\nWhen commit 2d4d1eea540b (\"lib/mpi: Add mpi sgl helpers\") originally\nintroduced the bug, it couldn\u0027t be triggered because all callers of\nmpi_read_raw_from_sgl() passed a scatterlist whose length was equal to\n\"nbytes\".\n\nHowever since commit 63ba4d67594a (\"KEYS: asymmetric: Use new crypto\ninterface without scatterlists\"), the underflow can now actually be\ntriggered. When invoking a KEYCTL_PKEY_ENCRYPT system call with a\nlarger \"out_len\" than \"in_len\" and filling the \"in\" buffer with zeroes,\ncrypto_akcipher_sync_prep() will create an all-zero scatterlist used for\nboth the \"src\" and \"dst\" member of struct akcipher_request and thereby\nfulfil the conditions to trigger the bug:\n\n sys_keyctl()\n keyctl_pkey_e_d_s()\n asymmetric_key_eds_op()\n software_key_eds_op()\n crypto_akcipher_sync_encrypt()\n crypto_akcipher_sync_prep()\n crypto_akcipher_encrypt()\n rsa_enc()\n mpi_read_raw_from_sgl()\n\nTo the user this will be visible as a DoS as the kernel spins forever,\ncausing soft lockup splats as a side effect.\n\nFix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43492",
"url": "https://www.suse.com/security/cve/CVE-2026-43492"
},
{
"category": "external",
"summary": "SUSE Bug 1265629 for CVE-2026-43492",
"url": "https://bugzilla.suse.com/1265629"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43492"
},
{
"cve": "CVE-2026-43493",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43493"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Fix handling of MAY_BACKLOG requests\n\nMAY_BACKLOG requests can return EBUSY. Handle them by checking\nfor that value and filtering out EINPROGRESS notifications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43493",
"url": "https://www.suse.com/security/cve/CVE-2026-43493"
},
{
"category": "external",
"summary": "SUSE Bug 1265627 for CVE-2026-43493",
"url": "https://bugzilla.suse.com/1265627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43493"
},
{
"cve": "CVE-2026-43495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43495"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler\n\nt7xx_port_enum_msg_handler() uses the modem-supplied port_count field as\na loop bound over port_msg-\u003edata[] without checking that the message buffer\ncontains sufficient data. A modem sending port_count=65535 in a 12-byte\nbuffer triggers a slab-out-of-bounds read of up to 262140 bytes.\n\nAdd a sizeof(*port_msg) check before accessing the port message header\nfields to guard against undersized messages.\n\nAdd a struct_size() check after extracting port_count and before the loop.\n\nIn t7xx_parse_host_rt_data(), guard the rt_feature header read with a\nremaining-buffer check before accessing data_len, validate feat_data_len\nagainst the actual remaining buffer to prevent OOB reads and signed\ninteger overflow on offset.\n\nPass msg_len from both call sites: skb-\u003elen at the DPMAIF path after\nskb_pull(), and the validated feat_data_len at the handshake path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43495",
"url": "https://www.suse.com/security/cve/CVE-2026-43495"
},
{
"category": "external",
"summary": "SUSE Bug 1265999 for CVE-2026-43495",
"url": "https://bugzilla.suse.com/1265999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43495"
},
{
"cve": "CVE-2026-43496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43496"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked\n\nWhen red qdisc has children (eg qfq qdisc) whose peek() callback is\nqdisc_peek_dequeued(), we could get a kernel panic. When the parent of such\nqdiscs (eg illustrated in patch #3 as tbf) wants to retrieve an skb from\nits child (red in this case), it will do the following:\n 1a. do a peek() - and when sensing there\u0027s an skb the child can offer, then\n - the child in this case(red) calls its child\u0027s (qfq) peek.\n qfq does the right thing and will return the gso_skb queue packet.\n Note: if there wasnt a gso_skb entry then qfq will store it there.\n 1b. invoke a dequeue() on the child (red). And herein lies the problem.\n - red will call the child\u0027s dequeue() which will essentially just\n try to grab something of qfq\u0027s queue.\n\n[ 78.667668][ T363] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]\n[ 78.667927][ T363] CPU: 1 UID: 0 PID: 363 Comm: ping Not tainted 7.1.0-rc1-00033-g46f74a3f7d57-dirty #790 PREEMPT(full)\n[ 78.668263][ T363] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011\n[ 78.668486][ T363] RIP: 0010:qfq_dequeue+0x446/0xc90 [sch_qfq]\n[ 78.668718][ T363] Code: 54 c0 e8 dd 90 00 f1 48 c7 c7 e0 03 54 c0 48 89 de e8 ce 90 00 f1 48 8d 7b 48 b8 ff ff 37 00 48 89 fa 48 c1 e0 2a 48 c1 ea 03 \u003c80\u003e 3c 02 00 74 05 e8 ef a1 e1 f1 48 8b 7b 48 48 8d 54 24 58 48 8d\n[ 78.669312][ T363] RSP: 0018:ffff88810de573e0 EFLAGS: 00010216\n[ 78.669533][ T363] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000\n[ 78.669790][ T363] RDX: 0000000000000009 RSI: 0000000000000004 RDI: 0000000000000048\n[ 78.670044][ T363] RBP: ffff888110dc4000 R08: ffffffffb1b0885a R09: fffffbfff6ba9078\n[ 78.670297][ T363] R10: 0000000000000003 R11: ffff888110e31c80 R12: 0000001880000000\n[ 78.670560][ T363] R13: ffff888110dc4150 R14: ffff888110dc42b8 R15: 0000000000000200\n[ 78.670814][ T363] FS: 00007f66a8f09c40(0000) GS:ffff888163428000(0000) knlGS:0000000000000000\n[ 78.671110][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 78.671324][ T363] CR2: 000055db4c6a30a8 CR3: 000000010da67000 CR4: 0000000000750ef0\n[ 78.671585][ T363] PKRU: 55555554\n[ 78.671713][ T363] Call Trace:\n[ 78.671843][ T363] \u003cTASK\u003e\n[ 78.671936][ T363] ? __pfx_qfq_dequeue+0x10/0x10 [sch_qfq]\n[ 78.672148][ T363] ? __pfx__printk+0x10/0x10\n[ 78.672322][ T363] ? srso_alias_return_thunk+0x5/0xfbef5\n[ 78.672496][ T363] ? lockdep_hardirqs_on_prepare+0xa8/0x1a0\n[ 78.672706][ T363] ? srso_alias_return_thunk+0x5/0xfbef5\n[ 78.672875][ T363] ? trace_hardirqs_on+0x19/0x1a0\n[ 78.673047][ T363] red_dequeue+0x65/0x270 [sch_red]\n[ 78.673217][ T363] ? srso_alias_return_thunk+0x5/0xfbef5\n[ 78.673385][ T363] tbf_dequeue.cold+0xb0/0x70c [sch_tbf]\n[ 78.673566][ T363] __qdisc_run+0x169/0x1900\n\nThe right thing to do in #1b is to grab the skb off gso_skb queue.\nThis patchset fixes that issue by changing #1b to use qdisc_dequeue_peeked()\nmethod instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43496",
"url": "https://www.suse.com/security/cve/CVE-2026-43496"
},
{
"category": "external",
"summary": "SUSE Bug 1266000 for CVE-2026-43496",
"url": "https://bugzilla.suse.com/1266000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43496"
},
{
"cve": "CVE-2026-43497",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43497"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free\n\ndlfb_ops_mmap() uses remap_pfn_range() to map vmalloc framebuffer pages\nto userspace but sets no vm_ops on the VMA. This means the kernel cannot\ntrack active mmaps. When dlfb_realloc_framebuffer() replaces the backing\nbuffer via FBIOPUT_VSCREENINFO, existing mmap PTEs are not invalidated.\nOn USB disconnect, dlfb_ops_destroy() calls vfree() on the old pages\nwhile userspace PTEs still reference them, resulting in a use-after-free:\nthe process retains read/write access to freed kernel pages.\n\nAdd vm_operations_struct with open/close callbacks that maintain an\natomic mmap_count on struct dlfb_data. In dlfb_realloc_framebuffer(),\ncheck mmap_count and return -EBUSY if the buffer is currently mapped,\npreventing buffer replacement while userspace holds stale PTEs.\n\nTested with PoC using dummy_hcd + raw_gadget USB device emulation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43497",
"url": "https://www.suse.com/security/cve/CVE-2026-43497"
},
{
"category": "external",
"summary": "SUSE Bug 1266003 for CVE-2026-43497",
"url": "https://bugzilla.suse.com/1266003"
},
{
"category": "external",
"summary": "SUSE Bug 1266013 for CVE-2026-43497",
"url": "https://bugzilla.suse.com/1266013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43497"
},
{
"cve": "CVE-2026-43498",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43498"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/ivpu: Disallow re-exporting imported GEM objects\n\nPrevent re-exporting of imported GEM buffers by adding a custom\nprime_handle_to_fd callback that checks if the object is imported\nand returns -EOPNOTSUPP if so.\n\nRe-exporting imported GEM buffers causes loss of buffer flags settings,\nleading to incorrect device access and data corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43498",
"url": "https://www.suse.com/security/cve/CVE-2026-43498"
},
{
"category": "external",
"summary": "SUSE Bug 1266002 for CVE-2026-43498",
"url": "https://bugzilla.suse.com/1266002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43498"
},
{
"cve": "CVE-2026-43499",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43499"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtmutex: Use waiter::task instead of current in remove_waiter()\n\nremove_waiter() is used by the slowlock paths, but it is also used for\nproxy-lock rollback in rt_mutex_start_proxy_lock() when invoked from\nfutex_requeue().\n\nIn the latter case waiter::task is not current, but remove_waiter()\noperates on current for the dequeue operation. That results in several\nproblems:\n\n 1) the rbtree dequeue happens without waiter::task::pi_lock being held\n\n 2) the waiter task\u0027s pi_blocked_on state is not cleared, which leaves a\n dangling pointer primed for UAF around.\n\n 3) rt_mutex_adjust_prio_chain() operates on the wrong top priority waiter\n task\n\nUse waiter::task instead of current in all related operations in\nremove_waiter() to cure those problems.\n\n[ tglx: Fixup rt_mutex_adjust_prio_chain(), add a comment and amend the\n \tchangelog ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43499",
"url": "https://www.suse.com/security/cve/CVE-2026-43499"
},
{
"category": "external",
"summary": "SUSE Bug 1266001 for CVE-2026-43499",
"url": "https://bugzilla.suse.com/1266001"
},
{
"category": "external",
"summary": "SUSE Bug 1266014 for CVE-2026-43499",
"url": "https://bugzilla.suse.com/1266014"
},
{
"category": "external",
"summary": "SUSE Bug 1271179 for CVE-2026-43499",
"url": "https://bugzilla.suse.com/1271179"
},
{
"category": "external",
"summary": "SUSE Bug 1271180 for CVE-2026-43499",
"url": "https://bugzilla.suse.com/1271180"
},
{
"category": "external",
"summary": "SUSE Bug 1272403 for CVE-2026-43499",
"url": "https://bugzilla.suse.com/1272403"
},
{
"category": "external",
"summary": "SUSE Bug 1274586 for CVE-2026-43499",
"url": "https://bugzilla.suse.com/1274586"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43499"
},
{
"cve": "CVE-2026-43501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43501"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: rpl: reserve mac_len headroom when recompressed SRH grows\n\nipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header, swaps\nthe next segment into ipv6_hdr-\u003edaddr, recompresses, then pulls the old\nheader and pushes the new one plus the IPv6 header back. The\nrecompressed header can be larger than the received one when the swap\nreduces the common-prefix length the segments share with daddr (CmprI=0,\nCmprE\u003e0, seg[0][0] != daddr[0] gives the maximum +8 bytes).\n\npskb_expand_head() was gated on segments_left == 0, so on earlier\nsegments the push consumed unchecked headroom. Once skb_push() leaves\nfewer than skb-\u003emac_len bytes in front of data,\nskb_mac_header_rebuild()\u0027s call to:\n\n\tskb_set_mac_header(skb, -skb-\u003emac_len);\n\nwill store (data - head) - mac_len into the u16 mac_header field, which\nwraps to ~65530, and the following memmove() writes mac_len bytes ~64KiB\npast skb-\u003ehead.\n\nA single AF_INET6/SOCK_RAW/IPV6_HDRINCL packet over lo with a two\nsegment type-3 SRH (CmprI=0, CmprE=15) reaches headroom 8 after one\npass; KASAN reports a 14-byte OOB write in ipv6_rthdr_rcv.\n\nFix this by expanding the head whenever the remaining room is less than\nthe push size plus mac_len, and request that much extra so the rebuilt\nMAC header fits afterwards.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43501",
"url": "https://www.suse.com/security/cve/CVE-2026-43501"
},
{
"category": "external",
"summary": "SUSE Bug 1266009 for CVE-2026-43501",
"url": "https://bugzilla.suse.com/1266009"
},
{
"category": "external",
"summary": "SUSE Bug 1266015 for CVE-2026-43501",
"url": "https://bugzilla.suse.com/1266015"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43501"
},
{
"cve": "CVE-2026-43502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43502"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: handle zerocopy send cleanup before the message is queued\n\nA zerocopy send can fail after user pages have been pinned but before\nthe message is attached to the sending socket.\n\nThe purge path currently infers zerocopy state from rm-\u003em_rs, so an\nunqueued message can be cleaned up as if it owned normal payload pages.\nHowever, zerocopy ownership is really determined by the presence of\nop_mmp_znotifier, regardless of whether the message has reached the\nsocket queue.\n\nCapture op_mmp_znotifier up front in rds_message_purge() and use it as\nthe cleanup discriminator. If the message is already associated with a\nsocket, keep the existing completion path. Otherwise, drop the pinned\npage accounting directly and release the notifier before putting the\npayload pages.\n\nThis keeps early send failure cleanup consistent with the zerocopy\nlifetime rules without changing the normal queued completion path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43502",
"url": "https://www.suse.com/security/cve/CVE-2026-43502"
},
{
"category": "external",
"summary": "SUSE Bug 1266008 for CVE-2026-43502",
"url": "https://bugzilla.suse.com/1266008"
},
{
"category": "external",
"summary": "SUSE Bug 1279563 for CVE-2026-43502",
"url": "https://bugzilla.suse.com/1279563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.0.10-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.0.10-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-25T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43502"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…