OPENSUSE-SU-2026:11014-1
Vulnerability from csaf_opensuse - Published: 2026-06-12 00:00 - Updated: 2026-09-16 21:16Summary
kernel-devel-7.0.12-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: kernel-devel-7.0.12-1.1 on GA media
Description of the patch: These are all security issues fixed in the kernel-devel-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11014
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
low
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
low
4.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-46244
Threats
Impact
moderate
References
181 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "kernel-devel-7.0.12-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the kernel-devel-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11014",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11014-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46244 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46273 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46273/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46274 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46274/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46275 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46275/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46277 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46277/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46278 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46279 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46279/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46280 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46281 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46281/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46282 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46283 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46284 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46284/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46285 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46286 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46286/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46287 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46287/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46288 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46288/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46289 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46290 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46290/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46291 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46292 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46292/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46293 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46294 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46295 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46296 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46297 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46298 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46299 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46301 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46301/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46302 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46303 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46304 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46305 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46305/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46306 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46306/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46307 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46309 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46309/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46310 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46311 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46312 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46312/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46313 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46313/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46314 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46315 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46316 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46316/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46317 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46317/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46318 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46318/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46319 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46320 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46320/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46321 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46321/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46322 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46324 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46324/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46332 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52904 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52905 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52905/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52906 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52907 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52907/"
}
],
"title": "kernel-devel-7.0.12-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-16T21:16:21Z",
"generator": {
"date": "2026-06-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11014-1",
"initial_release_date": "2026-06-12T00:00:00Z",
"revision_history": [
{
"date": "2026-06-12T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:14:25Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:16:21Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.0.12-1.1.aarch64",
"product": {
"name": "kernel-devel-7.0.12-1.1.aarch64",
"product_id": "kernel-devel-7.0.12-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.12-1.1?arch=aarch64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-7.0.12-1.1.aarch64",
"product": {
"name": "kernel-macros-7.0.12-1.1.aarch64",
"product_id": "kernel-macros-7.0.12-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.12-1.1?arch=aarch64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-7.0.12-1.1.aarch64",
"product": {
"name": "kernel-source-7.0.12-1.1.aarch64",
"product_id": "kernel-source-7.0.12-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.12-1.1?arch=aarch64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.0.12-1.1.aarch64",
"product": {
"name": "kernel-source-vanilla-7.0.12-1.1.aarch64",
"product_id": "kernel-source-vanilla-7.0.12-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.12-1.1?arch=aarch64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.0.12-1.1.ppc64le",
"product": {
"name": "kernel-devel-7.0.12-1.1.ppc64le",
"product_id": "kernel-devel-7.0.12-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.12-1.1?arch=ppc64le\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-7.0.12-1.1.ppc64le",
"product": {
"name": "kernel-macros-7.0.12-1.1.ppc64le",
"product_id": "kernel-macros-7.0.12-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.12-1.1?arch=ppc64le\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-7.0.12-1.1.ppc64le",
"product": {
"name": "kernel-source-7.0.12-1.1.ppc64le",
"product_id": "kernel-source-7.0.12-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.12-1.1?arch=ppc64le\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.0.12-1.1.ppc64le",
"product": {
"name": "kernel-source-vanilla-7.0.12-1.1.ppc64le",
"product_id": "kernel-source-vanilla-7.0.12-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.12-1.1?arch=ppc64le\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.0.12-1.1.s390x",
"product": {
"name": "kernel-devel-7.0.12-1.1.s390x",
"product_id": "kernel-devel-7.0.12-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.12-1.1?arch=s390x\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-7.0.12-1.1.s390x",
"product": {
"name": "kernel-macros-7.0.12-1.1.s390x",
"product_id": "kernel-macros-7.0.12-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.12-1.1?arch=s390x\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-7.0.12-1.1.s390x",
"product": {
"name": "kernel-source-7.0.12-1.1.s390x",
"product_id": "kernel-source-7.0.12-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.12-1.1?arch=s390x\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.0.12-1.1.s390x",
"product": {
"name": "kernel-source-vanilla-7.0.12-1.1.s390x",
"product_id": "kernel-source-vanilla-7.0.12-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.12-1.1?arch=s390x\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.0.12-1.1.x86_64",
"product": {
"name": "kernel-devel-7.0.12-1.1.x86_64",
"product_id": "kernel-devel-7.0.12-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.0.12-1.1?arch=x86_64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-7.0.12-1.1.x86_64",
"product": {
"name": "kernel-macros-7.0.12-1.1.x86_64",
"product_id": "kernel-macros-7.0.12-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.0.12-1.1?arch=x86_64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-7.0.12-1.1.x86_64",
"product": {
"name": "kernel-source-7.0.12-1.1.x86_64",
"product_id": "kernel-source-7.0.12-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.0.12-1.1?arch=x86_64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.0.12-1.1.x86_64",
"product": {
"name": "kernel-source-vanilla-7.0.12-1.1.x86_64",
"product_id": "kernel-source-vanilla-7.0.12-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.0.12:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.0.12-1.1?arch=x86_64\u0026upstream=kernel-source-7.0.12-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64"
},
"product_reference": "kernel-devel-7.0.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le"
},
"product_reference": "kernel-devel-7.0.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.0.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x"
},
"product_reference": "kernel-devel-7.0.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64"
},
"product_reference": "kernel-devel-7.0.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64"
},
"product_reference": "kernel-macros-7.0.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le"
},
"product_reference": "kernel-macros-7.0.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.0.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x"
},
"product_reference": "kernel-macros-7.0.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64"
},
"product_reference": "kernel-macros-7.0.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64"
},
"product_reference": "kernel-source-7.0.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le"
},
"product_reference": "kernel-source-7.0.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.0.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x"
},
"product_reference": "kernel-source-7.0.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64"
},
"product_reference": "kernel-source-7.0.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64"
},
"product_reference": "kernel-source-vanilla-7.0.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le"
},
"product_reference": "kernel-source-vanilla-7.0.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.0.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x"
},
"product_reference": "kernel-source-vanilla-7.0.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
},
"product_reference": "kernel-source-vanilla-7.0.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-46244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46244"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_inner: Fix IPv6 inner_thoff desync\n\nIn nft_inner_parse_l2l3(), when processing inner IPv6 packets,\nipv6_find_hdr() correctly computes the transport header offset\ntraversing all extension headers, but the result is immediately\noverwritten with nhoff + sizeof(_ip6h) (40 bytes), which only\naccounts for the IPv6 base header. This creates a desync between\ninner_thoff (wrong - points to extension header start) and l4proto\n(correct - e.g., IPPROTO_TCP), enabling transport header forgery\nand potential firewall bypass. This issue affects stable versions\nfrom Linux 6.2.\n\nFor comparison, the normal (non-inner) IPv6 path correctly\npreserves ipv6_find_hdr()\u0027s result. Removing the incorrect overwrite\nensures that ipv6_find_hdr()\u0027s calculated transport header offset is\npreserved, thereby fixing the desynchronization.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46244",
"url": "https://www.suse.com/security/cve/CVE-2026-46244"
},
{
"category": "external",
"summary": "SUSE Bug 1267654 for CVE-2026-46244",
"url": "https://bugzilla.suse.com/1267654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46244"
},
{
"cve": "CVE-2026-46273",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46273"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmveth: Disable GSO for packets with small MSS\n\nSome physical adapters on Power systems do not support segmentation\noffload when the MSS is less than 224 bytes. Attempting to send such\npackets causes the adapter to freeze, stopping all traffic until\nmanually reset.\n\nImplement ndo_features_check to disable GSO for packets with small MSS\nvalues. The network stack will perform software segmentation instead.\n\nThe 224-byte minimum matches ibmvnic\ncommit \u003cf10b09ef687f\u003e (\"ibmvnic: Enforce stronger sanity checks\non GSO packets\")\nwhich uses the same physical adapters in SEA configurations.\n\nThe issue occurs specifically when the hardware attempts to perform\nsegmentation (gso_segs \u003e 1) with a small MSS. Single-segment GSO packets\n(gso_segs == 1) do not trigger the problematic LSO code path and are\ntransmitted normally without segmentation.\n\nAdd an ndo_features_check callback to disable GSO when MSS \u003c 224 bytes.\nAlso call vlan_features_check() to ensure proper handling of VLAN packets,\nparticularly QinQ (802.1ad) configurations where the hardware parser may\nnot support certain offload features.\n\nValidated using iptables to force small MSS values. Without the fix,\nthe adapter freezes. With the fix, packets are segmented in software\nand transmission succeeds. Comprehensive regression testing completedd\n(MSS tests, performance, stability).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46273",
"url": "https://www.suse.com/security/cve/CVE-2026-46273"
},
{
"category": "external",
"summary": "SUSE Bug 1267651 for CVE-2026-46273",
"url": "https://bugzilla.suse.com/1267651"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46273"
},
{
"cve": "CVE-2026-46274",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46274"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio-wq: check that the predecessor is hashed in io_wq_remove_pending()\n\nio_wq_remove_pending() needs to fix up wq-\u003ehash_tail[] if the cancelled\nwork was the tail of its hash bucket. When doing this, it checks whether\nthe preceding entry in acct-\u003ework_list has the same hash value, but\nnever checks that the predecessor is hashed at all. io_get_work_hash()\nis simply atomic_read(\u0026work-\u003eflags) \u003e\u003e IO_WQ_HASH_SHIFT, and the hash\nbits are never set for non-hashed work, so it returns 0. Thus, when a\nhashed bucket-0 work is cancelled while a non-hashed work is its list\npredecessor, the check spuriously passes and a pointer to the non-hashed\nio_kiocb is stored in wq-\u003ehash_tail[0].\n\nBecause non-hashed work is dequeued via the fast path in\nio_get_next_work(), which never touches hash_tail[], the stale pointer\nis never cleared. Therefore, after the non-hashed io_kiocb completes and\nis freed back to req_cachep, wq-\u003ehash_tail[0] is a dangling pointer. The\nio_wq is per-task (tctx-\u003eio_wq) and survives ring open/close, so the\ndangling pointer persists for the lifetime of the task; the next hashed\nbucket-0 enqueue dereferences it in io_wq_insert_work() and\nwq_list_add_after() writes through freed memory.\n\nAdd the missing io_wq_is_hashed() check so a non-hashed predecessor\nnever inherits a hash_tail[] slot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46274",
"url": "https://www.suse.com/security/cve/CVE-2026-46274"
},
{
"category": "external",
"summary": "SUSE Bug 1267918 for CVE-2026-46274",
"url": "https://bugzilla.suse.com/1267918"
},
{
"category": "external",
"summary": "SUSE Bug 1268624 for CVE-2026-46274",
"url": "https://bugzilla.suse.com/1268624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46274"
},
{
"cve": "CVE-2026-46275",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46275"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_uart: fix UAFs and race conditions in close and init paths\n\nVulnerabilities leading to Use-After-Free (UAF) and Null Pointer\nDereference (NPD) conditions were observed in the lifecycle management\nof hci_uart.\n\nThe primary issue arises because the workqueues (init_ready and\nwrite_work) are only flushed/cancelled if the HCI_UART_PROTO_READY\nflag is set during TTY close. If a hangup occurs before setup completes,\nhci_uart_tty_close() skips the teardown of these workqueues and\nproceeds to free the `hu` struct. When the scheduled work executes\nlater, it blindly dereferences the freed `hu` struct.\n\nFurthermore, several data races and UAFs were identified in the teardown\nsequence:\n1. Calling hci_uart_flush() from hci_uart_close() without effectively\n disabling write_work causes a race condition where both can concurrently\n double-free hu-\u003etx_skb. This happens because protocol timers can\n concurrently invoke hci_uart_tx_wakeup() and requeue write_work.\n2. Calling hci_free_dev(hdev) before hu-\u003eproto-\u003eclose(hu) causes a UAF\n when vendor specific protocol close callbacks dereference hu-\u003ehdev.\n3. In the initialization error paths, failing to take the proto_lock\n write lock before clearing PROTO_READY leads to races with active\n readers. Additionally, hci_uart_tty_receive() accesses hu-\u003ehdev\n outside the read lock, leading to UAFs if the initialization error\n path frees hdev concurrently.\n\nFix these synchronization and lifecycle issues by:\n1. Re-ordering hci_uart_tty_close() to clear HCI_UART_PROTO_READY first,\n followed immediately by a cancel_work_sync(\u0026hu-\u003ewrite_work). Clearing\n the flag locks out concurrent protocol timers from successfully invoking\n hci_uart_tx_wakeup(), effectively rendering the cancellation permanent\n and preventing the tx_skb double-free.\n2. Note: Clearing PROTO_READY early causes hci_uart_close() to skip\n hu-\u003eproto-\u003eflush(). This is perfectly safe in the tty_close path\n because hu-\u003eproto-\u003eclose() executes shortly after, which intrinsically\n purges all protocol SKB queues and tears down the state.\n3. Relocating hu-\u003eproto-\u003eclose(hu) strictly prior to hci_free_dev(hdev)\n across all close and error paths to prevent vendor-level UAFs.\n4. Moving the hdev-\u003estat.byte_rx increment in hci_uart_tty_receive()\n inside the proto_lock read-side critical section to safely synchronize\n with device unregistration.\n5. Adding cancel_work_sync(\u0026hu-\u003ewrite_work) to hci_uart_close() to safely\n flush the workqueue before hci_uart_flush() is invoked via the HCI core.\n6. Utilizing cancel_work_sync() instead of disable_work_sync() across\n all paths to prevent permanently breaking user-space retry capabilities.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46275",
"url": "https://www.suse.com/security/cve/CVE-2026-46275"
},
{
"category": "external",
"summary": "SUSE Bug 1267968 for CVE-2026-46275",
"url": "https://bugzilla.suse.com/1267968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46275"
},
{
"cve": "CVE-2026-46276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46276"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix zero-size GDS range init on RDNA4\n\nRDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip memory\nresources. The gfx_v12_0 initialisation code correctly leaves\nadev-\u003egds.gds_size, adev-\u003egds.gws_size, and adev-\u003egds.oa_size at\nzero to reflect this.\n\namdgpu_ttm_init() unconditionally calls amdgpu_ttm_init_on_chip() for\neach of these resources regardless of size. When the size is zero,\namdgpu_ttm_init_on_chip() forwards the call to ttm_range_man_init(),\nwhich calls drm_mm_init(mm, 0, 0). drm_mm_init() immediately fires\nDRM_MM_BUG_ON(start + size \u003c= start) -- trivially true when size is\nzero -- crashing the kernel during modprobe of amdgpu on an RX 9070 XT.\n\nGuard against this by returning 0 early from\namdgpu_ttm_init_on_chip() when size_in_page is zero. This skips TTM\nresource manager registration for hardware resources that are absent,\nwithout affecting any other GPU type.\n\nDRM_MM_BUG_ON() only asserts if CONFIG_DRM_DEBUG_MM is enabled in\nthe kernel config. This is apparently rarely enabled as these chips\nhave been in the market for over a year and this issue was only reported\nnow.\n\nOops-Analysis: http://oops.fenrus.org/reports/bugzilla.korg/221376/report.html\n(cherry picked from commit 5719ce5865279cad4fd5f01011fe037168503f2d)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46276",
"url": "https://www.suse.com/security/cve/CVE-2026-46276"
},
{
"category": "external",
"summary": "SUSE Bug 1267922 for CVE-2026-46276",
"url": "https://bugzilla.suse.com/1267922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46276"
},
{
"cve": "CVE-2026-46277",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46277"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/zone_device: do not touch device folio after calling -\u003efolio_free()\n\nThe contents of a device folio can immediately change after calling\n-\u003efolio_free(), as the folio may be reallocated by a driver with a\ndifferent order. Instead of touching the folio again to extract the\npgmap, use the local stack variable when calling percpu_ref_put_many().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46277",
"url": "https://www.suse.com/security/cve/CVE-2026-46277"
},
{
"category": "external",
"summary": "SUSE Bug 1267960 for CVE-2026-46277",
"url": "https://bugzilla.suse.com/1267960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46277"
},
{
"cve": "CVE-2026-46278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46278"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: Fix segfault when updating ftrace mask\n\nFix invalid data access by passing right data for debugfs entry.\n\n[ 171.549793] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n[ 171.559248] Mem abort info:\n[ 171.562173] ESR = 0x0000000096000044\n[ 171.566227] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 171.573108] SET = 0, FnV = 0\n[ 171.576448] EA = 0, S1PTW = 0\n[ 171.579745] FSC = 0x04: level 0 translation fault\n[ 171.584760] Data abort info:\n[ 171.588012] ISV = 0, ISS = 0x00000044, ISS2 = 0x00000000\n[ 171.593734] CM = 0, WnR = 1, TnD = 0, TagAccess = 0\n[ 171.598962] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 171.604471] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000083837000\n[ 171.611358] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000\n[ 171.618500] Internal error: Oops: 0000000096000044 [#1] SMP\n[ 171.624222] Modules linked in: powervr drm_shmem_helper drm_gpuvm...\n[ 171.656580] CPU: 0 UID: 0 PID: 549 Comm: bash Not tainted 7.0.0-rc2-g730b257ba723-dirty #13 PREEMPT\n[ 171.665773] Hardware name: BeagleBoard.org BeaglePlay (DT)\n[ 171.671296] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 171.678306] pc : pvr_fw_trace_mask_set+0x78/0x154 [powervr]\n[ 171.683959] lr : pvr_fw_trace_mask_set+0x4c/0x154 [powervr]\n[ 171.689593] sp : ffff8000835ebb90\n[ 171.692929] x29: ffff8000835ebc00 x28: ffff000005c60f80 x27: 0000000000000000\n[ 171.700130] x26: 0000000000000000 x25: ffff00000504af28 x24: 0000000000000000\n[ 171.707324] x23: ffff00000504af50 x22: 0000000000000203 x21: 0000000000000000\n[ 171.714518] x20: ffff000005c44a80 x19: ffff000005c457b8 x18: 0000000000000000\n[ 171.721715] x17: 0000000000000000 x16: 0000000000000000 x15: 0000aaaae8887580\n[ 171.728908] x14: 0000000000000000 x13: 0000000000000000 x12: ffff8000835ebc30\n[ 171.736095] x11: ffff00000504af2a x10: ffff00008504af29 x9 : 0fffffffffffffff\n[ 171.743286] x8 : ffff8000835ebbf8 x7 : 0000000000000000 x6 : 000000000000002a\n[ 171.750479] x5 : ffff00000504af2e x4 : 0000000000000000 x3 : 0000000000000010\n[ 171.757674] x2 : 0000000000000203 x1 : 0000000000000000 x0 : ffff8000835ebba0\n[ 171.764871] Call trace:\n[ 171.767342] pvr_fw_trace_mask_set+0x78/0x154 [powervr] (P)\n[ 171.772984] simple_attr_write_xsigned.isra.0+0xe0/0x19c\n[ 171.778341] simple_attr_write+0x18/0x24\n[ 171.782296] debugfs_attr_write+0x50/0x98\n[ 171.786341] full_proxy_write+0x6c/0xa8\n[ 171.790208] vfs_write+0xd4/0x350\n[ 171.793561] ksys_write+0x70/0x108\n[ 171.796995] __arm64_sys_write+0x1c/0x28\n[ 171.800952] invoke_syscall+0x48/0x10c\n[ 171.804740] el0_svc_common.constprop.0+0x40/0xe0\n[ 171.809487] do_el0_svc+0x1c/0x28\n[ 171.812834] el0_svc+0x34/0x108\n[ 171.816013] el0t_64_sync_handler+0xa0/0xe4\n[ 171.820237] el0t_64_sync+0x198/0x19c\n[ 171.823939] Code: 32000262 b90ac293 1a931056 9134e293 (b9000036)\n[ 171.830073] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46278",
"url": "https://www.suse.com/security/cve/CVE-2026-46278"
},
{
"category": "external",
"summary": "SUSE Bug 1267915 for CVE-2026-46278",
"url": "https://bugzilla.suse.com/1267915"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46278"
},
{
"cve": "CVE-2026-46279",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46279"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/alloc_tag: clear codetag for pages allocated before page_ext initialization\n\nDue to initialization ordering, page_ext is allocated and initialized\nrelatively late during boot. Some pages have already been allocated and\nfreed before page_ext becomes available, leaving their codetag\nuninitialized.\n\nA clear example is in init_section_page_ext(): alloc_page_ext() calls\nkmemleak_alloc(). If the slab cache has no free objects, it falls back to\nthe buddy allocator to allocate memory. However, at this point page_ext\nis not yet fully initialized, so these newly allocated pages have no\ncodetag set. These pages may later be reclaimed by KASAN, which causes\nthe warning to trigger when they are freed because their codetag ref is\nstill empty.\n\nUse a global array to track pages allocated before page_ext is fully\ninitialized. The array size is fixed at 8192 entries, and will emit a\nwarning if this limit is exceeded. When page_ext initialization\ncompletes, set their codetag to empty to avoid warnings when they are\nfreed later.\n\nThis warning is only observed with CONFIG_MEM_ALLOC_PROFILING_DEBUG=Y and\nmem_profiling_compressed disabled:\n\n[ 9.582133] ------------[ cut here ]------------\n[ 9.582137] alloc_tag was not set\n[ 9.582139] WARNING: ./include/linux/alloc_tag.h:164 at __pgalloc_tag_sub+0x40f/0x550, CPU#5: systemd/1\n[ 9.582190] CPU: 5 UID: 0 PID: 1 Comm: systemd Not tainted 7.0.0-rc4 #1 PREEMPT(lazy)\n[ 9.582192] Hardware name: Red Hat KVM, BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[ 9.582194] RIP: 0010:__pgalloc_tag_sub+0x40f/0x550\n[ 9.582196] Code: 00 00 4c 29 e5 48 8b 05 1f 88 56 05 48 8d 4c ad 00 48 8d 2c c8 e9 87 fd ff ff 0f 0b 0f 0b e9 f3 fe ff ff 48 8d 3d 61 2f ed 03 \u003c67\u003e 48 0f b9 3a e9 b3 fd ff ff 0f 0b eb e4 e8 5e cd 14 02 4c 89 c7\n[ 9.582197] RSP: 0018:ffffc9000001f940 EFLAGS: 00010246\n[ 9.582200] RAX: dffffc0000000000 RBX: 1ffff92000003f2b RCX: 1ffff110200d806c\n[ 9.582201] RDX: ffff8881006c0360 RSI: 0000000000000004 RDI: ffffffff9bc7b460\n[ 9.582202] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff3a62324\n[ 9.582203] R10: ffffffff9d311923 R11: 0000000000000000 R12: ffffea0004001b00\n[ 9.582204] R13: 0000000000002000 R14: ffffea0000000000 R15: ffff8881006c0360\n[ 9.582206] FS: 00007ffbbcf2d940(0000) GS:ffff888450479000(0000) knlGS:0000000000000000\n[ 9.582208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 9.582210] CR2: 000055ee3aa260d0 CR3: 0000000148b67005 CR4: 0000000000770ef0\n[ 9.582211] PKRU: 55555554\n[ 9.582212] Call Trace:\n[ 9.582213] \u003cTASK\u003e\n[ 9.582214] ? __pfx___pgalloc_tag_sub+0x10/0x10\n[ 9.582216] ? check_bytes_and_report+0x68/0x140\n[ 9.582219] __free_frozen_pages+0x2e4/0x1150\n[ 9.582221] ? __free_slab+0xc2/0x2b0\n[ 9.582224] qlist_free_all+0x4c/0xf0\n[ 9.582227] kasan_quarantine_reduce+0x15d/0x180\n[ 9.582229] __kasan_slab_alloc+0x69/0x90\n[ 9.582232] kmem_cache_alloc_noprof+0x14a/0x500\n[ 9.582234] do_getname+0x96/0x310\n[ 9.582237] do_readlinkat+0x91/0x2f0\n[ 9.582239] ? __pfx_do_readlinkat+0x10/0x10\n[ 9.582240] ? get_random_bytes_user+0x1df/0x2c0\n[ 9.582244] __x64_sys_readlinkat+0x96/0x100\n[ 9.582246] do_syscall_64+0xce/0x650\n[ 9.582250] ? __x64_sys_getrandom+0x13a/0x1e0\n[ 9.582252] ? __pfx___x64_sys_getrandom+0x10/0x10\n[ 9.582254] ? do_syscall_64+0x114/0x650\n[ 9.582255] ? ksys_read+0xfc/0x1d0\n[ 9.582258] ? __pfx_ksys_read+0x10/0x10\n[ 9.582260] ? do_syscall_64+0x114/0x650\n[ 9.582262] ? do_syscall_64+0x114/0x650\n[ 9.582264] ? __pfx_fput_close_sync+0x10/0x10\n[ 9.582266] ? file_close_fd_locked+0x178/0x2a0\n[ 9.582268] ? __x64_sys_faccessat2+0x96/0x100\n[ 9.582269] ? __x64_sys_close+0x7d/0xd0\n[ 9.582271] ? do_syscall_64+0x114/0x650\n[ 9.582273] ? do_syscall_64+0x114/0x650\n[ 9.582275] ? clear_bhb_loop+0x50/0xa0\n[ 9.582277] ? clear_bhb_l\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46279",
"url": "https://www.suse.com/security/cve/CVE-2026-46279"
},
{
"category": "external",
"summary": "SUSE Bug 1267929 for CVE-2026-46279",
"url": "https://bugzilla.suse.com/1267929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46279"
},
{
"cve": "CVE-2026-46280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46280"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib: test_hmm: evict device pages on file close to avoid use-after-free\n\nPatch series \"Minor hmm_test fixes and cleanups\".\n\nTwo bugfixes a cleanup for the HMM kernel selftests. These were mostly\nreported by Zenghui Yu with special thanks to Lorenzo for analysing and\npointing out the problems.\n\n\nThis patch (of 3):\n\nWhen dmirror_fops_release() is called it frees the dmirror struct but\ndoesn\u0027t migrate device private pages back to system memory first. This\nleaves those pages with a dangling zone_device_data pointer to the freed\ndmirror.\n\nIf a subsequent fault occurs on those pages (eg. during coredump) the\ndmirror_devmem_fault() callback dereferences the stale pointer causing a\nkernel panic. This was reported [1] when running mm/ksft_hmm.sh on arm64,\nwhere a test failure triggered SIGABRT and the resulting coredump walked\nthe VMAs faulting in the stale device private pages.\n\nFix this by calling dmirror_device_evict_chunk() for each devmem chunk in\ndmirror_fops_release() to migrate all device private pages back to system\nmemory before freeing the dmirror struct. The function is moved earlier\nin the file to avoid a forward declaration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46280",
"url": "https://www.suse.com/security/cve/CVE-2026-46280"
},
{
"category": "external",
"summary": "SUSE Bug 1267958 for CVE-2026-46280",
"url": "https://bugzilla.suse.com/1267958"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46280"
},
{
"cve": "CVE-2026-46281",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46281"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmalloc: fix buffer overflow in vrealloc_node_align()\n\nCommit 4c5d3365882d (\"mm/vmalloc: allow to set node and align in\nvrealloc\") added the ability to force a new allocation if the current\npointer is on the wrong NUMA node, or if an alignment constraint is not\nmet, even if the user is shrinking the allocation.\n\nOn this path (need_realloc), the code allocates a new object of \u0027size\u0027\nbytes and then memcpy()s \u0027old_size\u0027 bytes into it. If the request is to\nshrink the object (size \u003c old_size), this results in an out-of-bounds\nwrite on the new buffer.\n\nFix this by bounding the copy length by the new allocation size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46281",
"url": "https://www.suse.com/security/cve/CVE-2026-46281"
},
{
"category": "external",
"summary": "SUSE Bug 1267961 for CVE-2026-46281",
"url": "https://bugzilla.suse.com/1267961"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46281"
},
{
"cve": "CVE-2026-46282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46282"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: frequency: admv1013: fix NULL pointer dereference on str\n\nWhen device_property_read_string() fails, str is left uninitialized\nbut the code falls through to strcmp(str, ...), dereferencing a garbage\npointer. Replace manual read/strcmp with\ndevice_property_match_property_string() and consolidate the SE mode\nenums into a single sequential enum, mapping to hardware register\nvalues via a switch consistent with other bitfields in the driver.\n\nSeveral cleanup patches have been applied to this driver recently so\nthis will need a manual backport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46282",
"url": "https://www.suse.com/security/cve/CVE-2026-46282"
},
{
"category": "external",
"summary": "SUSE Bug 1267919 for CVE-2026-46282",
"url": "https://bugzilla.suse.com/1267919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46282"
},
{
"cve": "CVE-2026-46283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46283"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Use kfree_sensitive() to free auth session in tpm_dev_release()\n\ntpm_dev_release() uses plain kfree() to free chip-\u003eauth, which contains\nsensitive cryptographic material including HMAC session keys, nonces,\nand passphrase data (struct tpm2_auth).\n\nEvery other code path that frees this structure uses kfree_sensitive()\nto zero the memory before releasing it: both tpm2_end_auth_session()\nand tpm_buf_check_hmac_response() do so. The tpm_dev_release() path\nis the only one that does not, leaving key material in freed slab\nmemory until it is eventually overwritten.\n\nUse kfree_sensitive() for consistency with the rest of the driver and\nto ensure session keys are scrubbed during device teardown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46283",
"url": "https://www.suse.com/security/cve/CVE-2026-46283"
},
{
"category": "external",
"summary": "SUSE Bug 1267952 for CVE-2026-46283",
"url": "https://bugzilla.suse.com/1267952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46283"
},
{
"cve": "CVE-2026-46284",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46284"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix early boot crash on parameters without \u0027=\u0027 separator\n\nIf hugepages, hugepagesz, or default_hugepagesz are specified on the\nkernel command line without the \u0027=\u0027 separator, early parameter parsing\npasses NULL to hugetlb_add_param(), which dereferences it in strlen() and\ncan crash the system during early boot.\n\nReject NULL values in hugetlb_add_param() and return -EINVAL instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46284",
"url": "https://www.suse.com/security/cve/CVE-2026-46284"
},
{
"category": "external",
"summary": "SUSE Bug 1267938 for CVE-2026-46284",
"url": "https://bugzilla.suse.com/1267938"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46284"
},
{
"cve": "CVE-2026-46285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46285"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: docg3: fix use-after-free in docg3_release()\n\nIn docg3_release(), the docg3 pointer is obtained from\ncascade-\u003efloors[0]-\u003epriv before the loop that calls\ndoc_release_device() on each floor. doc_release_device() frees the\ndocg3 struct via kfree(docg3) at line 1881. After the loop,\ndocg3-\u003ecascade-\u003ebch dereferences the already-freed pointer.\n\nFix this by accessing cascade-\u003ebch directly, which is equivalent\nsince docg3-\u003ecascade points back to the same cascade struct, and\nis already available as a local variable. This also removes the\nnow-unused docg3 local variable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46285",
"url": "https://www.suse.com/security/cve/CVE-2026-46285"
},
{
"category": "external",
"summary": "SUSE Bug 1267948 for CVE-2026-46285",
"url": "https://bugzilla.suse.com/1267948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46285"
},
{
"cve": "CVE-2026-46286",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46286"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: qcom-lpg: Check for array overflow when selecting the high resolution\n\nWhen selecting the high resolution values from the array, FIELD_GET() is\nused to pull from a 3 bit register, yet the array being indexed has only\n5 values in it. Odds are the hardware is sane, but just to be safe,\nproperly check before just overflowing and reading random data and then\nsetting up chip values based on that.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46286",
"url": "https://www.suse.com/security/cve/CVE-2026-46286"
},
{
"category": "external",
"summary": "SUSE Bug 1267932 for CVE-2026-46286",
"url": "https://bugzilla.suse.com/1267932"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-46286"
},
{
"cve": "CVE-2026-46287",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46287"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: txgbe: fix RTNL assertion warning when remove module\n\nFor the copper NIC with external PHY, the driver called\nphylink_connect_phy() during probe and phylink_disconnect_phy() during\nremove. It caused an RTNL assertion warning in phylink_disconnect_phy()\nupon module remove.\n\nTo fix this, add rtnl_lock() and rtnl_unlock() around the\nphylink_disconnect_phy() in remove function.\n\n ------------[ cut here ]------------\n RTNL: assertion failed at drivers/net/phy/phylink.c (2351)\n WARNING: drivers/net/phy/phylink.c:2351 at\nphylink_disconnect_phy+0xd8/0xf0 [phylink], CPU#0: rmmod/4464\n Modules linked in: ...\n CPU: 0 UID: 0 PID: 4464 Comm: rmmod Kdump: loaded Not tainted 7.0.0-rc4+\n Hardware name: Micro-Star International Co., Ltd. MS-7E16/X670E GAMING\nPLUS WIFI (MS-7E16), BIOS 1.90 12/31/2024\n RIP: 0010:phylink_disconnect_phy+0xe4/0xf0 [phylink]\n Code: 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 31 d2 31 f6 31 ff e9 3a 38 8f e7\n48 8d 3d 48 87 e2 ff ba 2f 09 00 00 48 c7 c6 c1 22 24 c0 \u003c67\u003e 48 0f b9 3a\ne9 34 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90\n RSP: 0018:ffffce7288363ac0 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: ffff89654b2a1a00 RCX: 0000000000000000\n RDX: 000000000000092f RSI: ffffffffc02422c1 RDI: ffffffffc0239020\n RBP: ffffce7288363ae8 R08: 0000000000000000 R09: 0000000000000000\n R10: 0000000000000000 R11: 0000000000000000 R12: ffff8964c4022000\n R13: ffff89654fce3028 R14: ffff89654ebb4000 R15: ffffffffc0226348\n FS: 0000795e80d93780(0000) GS:ffff896c52857000(0000)\nknlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00005b528b592000 CR3: 0000000170d0f000 CR4: 0000000000f50ef0\n PKRU: 55555554\n Call Trace:\n \u003cTASK\u003e\n txgbe_remove_phy+0xbb/0xd0 [txgbe]\n txgbe_remove+0x4c/0xb0 [txgbe]\n pci_device_remove+0x41/0xb0\n device_remove+0x43/0x80\n device_release_driver_internal+0x206/0x270\n driver_detach+0x4a/0xa0\n bus_remove_driver+0x83/0x120\n driver_unregister+0x2f/0x60\n pci_unregister_driver+0x40/0x90\n txgbe_driver_exit+0x10/0x850 [txgbe]\n __do_sys_delete_module.isra.0+0x1c3/0x2f0\n __x64_sys_delete_module+0x12/0x20\n x64_sys_call+0x20c3/0x2390\n do_syscall_64+0x11c/0x1500\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? do_syscall_64+0x15a/0x1500\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? do_fault+0x312/0x580\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __handle_mm_fault+0x9d5/0x1040\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? count_memcg_events+0x101/0x1d0\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? handle_mm_fault+0x1e8/0x2f0\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? do_user_addr_fault+0x2f8/0x820\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? irqentry_exit+0xb2/0x600\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? exc_page_fault+0x92/0x1c0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46287",
"url": "https://www.suse.com/security/cve/CVE-2026-46287"
},
{
"category": "external",
"summary": "SUSE Bug 1267954 for CVE-2026-46287",
"url": "https://bugzilla.suse.com/1267954"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46287"
},
{
"cve": "CVE-2026-46288",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46288"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nof: unittest: fix use-after-free in of_unittest_changeset()\n\nThe variable \u0027parent\u0027 is assigned the value of \u0027nchangeset\u0027 earlier in the\nfunction, meaning both point to the same struct device_node. The call to\nof_node_put(nchangeset) can decrement the reference count to zero and\nfree the node if there are no other holders. After that, the code still\nuses \u0027parent\u0027 to check for the presence of a property and to read a\nstring property, leading to a use-after-free.\n\nFix this by moving the of_node_put() call after the last access to\n\u0027parent\u0027, avoiding the UAF.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46288",
"url": "https://www.suse.com/security/cve/CVE-2026-46288"
},
{
"category": "external",
"summary": "SUSE Bug 1267941 for CVE-2026-46288",
"url": "https://bugzilla.suse.com/1267941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46288"
},
{
"cve": "CVE-2026-46289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46289"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib/scatterlist: fix length calculations in extract_kvec_to_sg\n\nPatch series \"Fix bugs in extract_iter_to_sg()\", v3.\n\nFix bugs in the kvec and user variants of extract_iter_to_sg. This series\nis growing due to useful remarks made by sashiko.dev.\n\nThe main bugs are:\n- The length for an sglist entry when extracting from\n a kvec can exceed the number of bytes in the page. This\n is obviously not intended.\n- When extracting a user buffer the sglist is temporarily\n used as a scratch buffer for extracted page pointers.\n If the sglist already contains some elements this scratch\n buffer could overlap with existing entries in the sglist.\n\nThe series adds test cases to the kunit_iov_iter test that demonstrate all\nof these bugs. Additionally, there is a memory leak fix for the test\nitself.\n\nThe bugs were orignally introduced into kernel v6.3 where the function\nlived in fs/netfs/iterator.c. It was later moved to lib/scatterlist.c in\nv6.5. Thus the actual fix is only marked for backports to v6.5+.\n\n\nThis patch (of 5):\n\nWhen extracting from a kvec to a scatterlist, do not cross page\nboundaries. The required length was already calculated but not used as\nintended.\n\nAdjust the copied length if the loop runs out of sglist entries without\nextracting everything.\n\nWhile there, return immediately from extract_iter_to_sg if there are no\nsglist entries at all.\n\nA subsequent commit will add kunit test cases that demonstrate that the\npatch is necessary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46289",
"url": "https://www.suse.com/security/cve/CVE-2026-46289"
},
{
"category": "external",
"summary": "SUSE Bug 1267966 for CVE-2026-46289",
"url": "https://bugzilla.suse.com/1267966"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46289"
},
{
"cve": "CVE-2026-46290",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46290"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/efi: Fix graceful fault handling after FPU softirq changes\n\nSince commit d02198550423 (\"x86/fpu: Improve crypto performance by\nmaking kernel-mode FPU reliably usable in softirqs\"), kernel_fpu_begin()\ncalls fpregs_lock() which uses local_bh_disable() instead of the\nprevious preempt_disable(). This sets SOFTIRQ_OFFSET in preempt_count\nduring the entire EFI runtime service call, causing in_interrupt() to\nreturn true in normal task context.\n\nThe graceful page fault handler efi_crash_gracefully_on_page_fault()\nuses in_interrupt() to bail out for faults in real interrupt context.\nWith SOFTIRQ_OFFSET now set, the handler always bails out, leaving EFI\nfirmware page faults unhandled. This escalates to die() which also sees\nin_interrupt() as true and calls panic(\"Fatal exception in interrupt\"),\nresulting in a hard system freeze. On systems with buggy firmware that\ntriggers page faults during EFI runtime calls (e.g., accessing unmapped\nmemory in GetTime()), this causes an unrecoverable hang instead of the\nexpected graceful EFI_ABORTED recovery.\n\nFix by replacing in_interrupt() with !in_task(). This preserves the\noriginal intent of bailing for interrupts or NMI faults, while no longer\nfalsely triggering from the FPU code path\u0027s local_bh_disable().\n\n[ardb: Sashiko spotted that using \u0027in_hardirq() || in_nmi()\u0027 leaves a\n window where a softirq may be taken before fpregs_lock() is\n called, but after efi_rts_work.efi_rts_id has been assigned,\n and any page faults occurring in that window will then be\n misidentified as having been caused by the firmware. Instead,\n use !in_task(), which incorporates in_serving_softirq(). ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46290",
"url": "https://www.suse.com/security/cve/CVE-2026-46290"
},
{
"category": "external",
"summary": "SUSE Bug 1267973 for CVE-2026-46290",
"url": "https://bugzilla.suse.com/1267973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46290"
},
{
"cve": "CVE-2026-46291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46291"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: caam - guard HMAC key hex dumps in hash_digest_key\n\nUse print_hex_dump_devel() for dumping sensitive HMAC key bytes in\nhash_digest_key() to avoid leaking secrets at runtime when\nCONFIG_DYNAMIC_DEBUG is enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46291",
"url": "https://www.suse.com/security/cve/CVE-2026-46291"
},
{
"category": "external",
"summary": "SUSE Bug 1267937 for CVE-2026-46291",
"url": "https://bugzilla.suse.com/1267937"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46291"
},
{
"cve": "CVE-2026-46292",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46292"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: core: Fix detach procedure for virtual devices in genpd\n\nIf a device is attached to a PM domain through genpd_dev_pm_attach_by_id(),\ngenpd calls pm_runtime_enable() for the corresponding virtual device that\nit registers. While this avoids boilerplate code in drivers, there is no\ncorresponding call to pm_runtime_disable() in genpd_dev_pm_detach().\n\nThis means these virtual devices are typically detached from its genpd,\nwhile runtime PM remains enabled for them, which is not how things are\ndesigned to work. In worst cases it may lead to critical errors, like a\nNULL pointer dereference bug in genpd_runtime_suspend(), which was recently\nreported. For another case, we may end up keeping an unnecessary vote for a\nperformance state for the device.\n\nTo fix these problems, let\u0027s add this missing call to pm_runtime_disable()\nin genpd_dev_pm_detach().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46292",
"url": "https://www.suse.com/security/cve/CVE-2026-46292"
},
{
"category": "external",
"summary": "SUSE Bug 1267943 for CVE-2026-46292",
"url": "https://bugzilla.suse.com/1267943"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46292"
},
{
"cve": "CVE-2026-46293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46293"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: microchip: mpfs-ccc: fix out of bounds access during output registration\n\nUBSAN reported an out of bounds access during registration of the last\ntwo outputs. This out of bounds access occurs because space is only\nallocated in the hws array for two PLLs and the four output dividers\nthat each has, but the defined IDs contain two DLLS and their two\noutputs each, which are not supported by the driver. The ID order is\nPLLs -\u003e DLLs -\u003e PLL outputs -\u003e DLL outputs. Decrement the PLL output IDs\nby two while adding them to the array to avoid the problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46293",
"url": "https://www.suse.com/security/cve/CVE-2026-46293"
},
{
"category": "external",
"summary": "SUSE Bug 1267933 for CVE-2026-46293",
"url": "https://bugzilla.suse.com/1267933"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46293"
},
{
"cve": "CVE-2026-46294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46294"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix a buffer overflow in ioctl processing\n\nTony Asleson (using Claude) found a buffer overflow in dm-ioctl in the\nfunction retrieve_status:\n\n1. The code in retrieve_status checks that the output string fits into\n the output buffer and writes the output string there\n2. Then, the code aligns the \"outptr\" variable to the next 8-byte\n boundary:\n\toutptr = align_ptr(outptr);\n3. The alignment doesn\u0027t check overflow, so outptr could point past the\n buffer end\n4. The \"for\" loop is iterated again, it executes:\n\tremaining = len - (outptr - outbuf);\n5. If \"outptr\" points past \"outbuf + len\", the arithmetics wraps around\n and the variable \"remaining\" contains unusually high number\n6. With \"remaining\" being high, the code writes more data past the end of\n the buffer\n\nLuckily, this bug has no security implications because:\n1. Only root can issue device mapper ioctls\n2. The commonly used libraries that communicate with device mapper\n (libdevmapper and devicemapper-rs) use buffer size that is aligned to\n 8 bytes - thus, \"outptr = align_ptr(outptr)\" can\u0027t overshoot the input\n buffer and the bug can\u0027t happen accidentally",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46294",
"url": "https://www.suse.com/security/cve/CVE-2026-46294"
},
{
"category": "external",
"summary": "SUSE Bug 1267939 for CVE-2026-46294",
"url": "https://bugzilla.suse.com/1267939"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46294"
},
{
"cve": "CVE-2026-46295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46295"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty\n\nFall back to apic_find_highest_vector() when PID.ON is set but PIR\nturns out to be empty, to correctly report the highest pending interrupt\nfrom the existing IRR.\n\nIn a nested VM stress test, the following WARNING fires in\nvmx_check_nested_events() when kvm_cpu_has_interrupt() reports a pending\ninterrupt but the subsequent kvm_apic_has_interrupt() (which invokes\nvmx_sync_pir_to_irr() again) returns -1:\n\n WARNING: CPU: 99 PID: 57767 at arch/x86/kvm/vmx/nested.c:4449 vmx_check_nested_events+0x6bf/0x6e0 [kvm_intel]\n Call Trace:\n kvm_check_and_inject_events\n vcpu_enter_guest.constprop.0\n vcpu_run\n kvm_arch_vcpu_ioctl_run\n kvm_vcpu_ioctl\n __x64_sys_ioctl\n do_syscall_64\n entry_SYSCALL_64_after_hwframe\n\nThe root cause is a race between vmx_sync_pir_to_irr() on the target vCPU\nand __vmx_deliver_posted_interrupt() on a sender vCPU. The sender\nperforms two individually-atomic operations that are not a single\ntransaction:\n\n 1. pi_test_and_set_pir(vector) -- sets the PIR bit\n 2. pi_test_and_set_on() -- sets PID.ON\n\nThe following interleaving triggers the bug:\n\n Sender vCPU (IPI): Target vCPU (1st sync_pir_to_irr):\n B1: set PIR[vector]\n A1: pi_clear_on()\n A2: pi_harvest_pir() -\u003e sees B1 bit\n A3: xchg() -\u003e consumes bit, PIR=0\n (1st sync returns correct max_irr)\n B2: set PID.ON = 1\n\n Target vCPU (2nd sync_pir_to_irr):\n C1: pi_test_on() -\u003e TRUE (from B2)\n C2: pi_clear_on() -\u003e ON=0\n C3: pi_harvest_pir() -\u003e PIR empty\n C4: *max_irr = -1, early return\n IRR NOT SCANNED\n\nThe interrupt is not lost (it resides in the IRR from the first sync and\nis recovered on the next vcpu_enter_guest() iteration), but the incorrect\nmax_irr causes a spurious WARNING and a wasted L2 VM-Enter/VM-Exit cycle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46295",
"url": "https://www.suse.com/security/cve/CVE-2026-46295"
},
{
"category": "external",
"summary": "SUSE Bug 1267931 for CVE-2026-46295",
"url": "https://bugzilla.suse.com/1267931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46295"
},
{
"cve": "CVE-2026-46296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46296"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: s3c64xx: fix NULL-deref on driver unbind\n\nA change moving DMA channel allocation from probe() back to\ns3c64xx_spi_prepare_transfer() failed to remove the corresponding\ndeallocation from remove().\n\nDrop the bogus DMA channel release from remove() to avoid triggering a\nNULL-pointer dereference on driver unbind.\n\nThis issue was flagged by Sashiko when reviewing a controller\nderegistration fix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46296",
"url": "https://www.suse.com/security/cve/CVE-2026-46296"
},
{
"category": "external",
"summary": "SUSE Bug 1267927 for CVE-2026-46296",
"url": "https://bugzilla.suse.com/1267927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46296"
},
{
"cve": "CVE-2026-46297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46297"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: libwx: use request_irq for VF misc interrupt\n\nCurrently, request_threaded_irq() is used with a primary handler but a\nNULL threaded handler, while also setting the IRQF_ONESHOT flag. This\nspecific combination triggers a WARNING since the commit aef30c8d569c\n(\"genirq: Warn about using IRQF_ONESHOT without a threaded handler\").\n\nWARNING: kernel/irq/manage.c:1502 at __setup_irq+0x4fa/0x760\n\nFix the issue by switching to request_irq(), which is the appropriate\ninterface or a non-threaded interrupt handler, and removing the\nunnecessary IRQF_ONESHOT flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46297",
"url": "https://www.suse.com/security/cve/CVE-2026-46297"
},
{
"category": "external",
"summary": "SUSE Bug 1267935 for CVE-2026-46297",
"url": "https://bugzilla.suse.com/1267935"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46297"
},
{
"cve": "CVE-2026-46298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46298"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npseries/papr-hvpipe: Fix race with interrupt handler\n\nWhile executing -\u003eioctl handler or -\u003erelease handler, if an interrupt\nfires on the same cpu, then we can enter into a deadlock.\n\nThis patch fixes both these handlers to take spin_lock_irq{save|restore}\nversions of the lock to prevent this deadlock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46298",
"url": "https://www.suse.com/security/cve/CVE-2026-46298"
},
{
"category": "external",
"summary": "SUSE Bug 1267923 for CVE-2026-46298",
"url": "https://bugzilla.suse.com/1267923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46298"
},
{
"cve": "CVE-2026-46299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46299"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: fix held lock freed on hfsplus_fill_super()\n\nhfsplus_fill_super() calls hfs_find_init() to initialize a search\nstructure, which acquires tree-\u003etree_lock. If the subsequent call to\nhfsplus_cat_build_key() fails, the function jumps to the out_put_root\nerror label without releasing the lock. The later cleanup path then\nfrees the tree data structure with the lock still held, triggering a\nheld lock freed warning.\n\nFix this by adding the missing hfs_find_exit(\u0026fd) call before jumping\nto the out_put_root error label. This ensures that tree-\u003etree_lock is\nproperly released on the error path.\n\nThe bug was originally detected on v6.13-rc1 using an experimental\nstatic analysis tool we are developing, and we have verified that the\nissue persists in the latest mainline kernel. The tool is specifically\ndesigned to detect memory management issues. It is currently under active\ndevelopment and not yet publicly available.\n\nWe confirmed the bug by runtime testing under QEMU with x86_64 defconfig,\nlockdep enabled, and CONFIG_HFSPLUS_FS=y. To trigger the error path, we\nused GDB to dynamically shrink the max_unistr_len parameter to 1 before\nhfsplus_asc2uni() is called. This forces hfsplus_asc2uni() to naturally\nreturn -ENAMETOOLONG, which propagates to hfsplus_cat_build_key() and\nexercises the faulty error path. The following warning was observed\nduring mount:\n\n\t=========================\n\tWARNING: held lock freed!\n\t7.0.0-rc3-00016-gb4f0dd314b39 #4 Not tainted\n\t-------------------------\n\tmount/174 is freeing memory ffff888103f92000-ffff888103f92fff, with a lock still held there!\n\tffff888103f920b0 (\u0026tree-\u003etree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x154/0x1e0\n\t2 locks held by mount/174:\n\t#0: ffff888103f960e0 (\u0026type-\u003es_umount_key#42/1){+.+.}-{4:4}, at: alloc_super.constprop.0+0x167/0xa40\n\t#1: ffff888103f920b0 (\u0026tree-\u003etree_lock){+.+.}-{4:4}, at: hfsplus_find_init+0x154/0x1e0\n\n\tstack backtrace:\n\tCPU: 2 UID: 0 PID: 174 Comm: mount Not tainted 7.0.0-rc3-00016-gb4f0dd314b39 #4 PREEMPT(lazy)\n\tHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n\tCall Trace:\n\t\u003cTASK\u003e\n\tdump_stack_lvl+0x82/0xd0\n\tdebug_check_no_locks_freed+0x13a/0x180\n\tkfree+0x16b/0x510\n\t? hfsplus_fill_super+0xcb4/0x18a0\n\thfsplus_fill_super+0xcb4/0x18a0\n\t? __pfx_hfsplus_fill_super+0x10/0x10\n\t? srso_return_thunk+0x5/0x5f\n\t? bdev_open+0x65f/0xc30\n\t? srso_return_thunk+0x5/0x5f\n\t? pointer+0x4ce/0xbf0\n\t? trace_contention_end+0x11c/0x150\n\t? __pfx_pointer+0x10/0x10\n\t? srso_return_thunk+0x5/0x5f\n\t? bdev_open+0x79b/0xc30\n\t? srso_return_thunk+0x5/0x5f\n\t? srso_return_thunk+0x5/0x5f\n\t? vsnprintf+0x6da/0x1270\n\t? srso_return_thunk+0x5/0x5f\n\t? __mutex_unlock_slowpath+0x157/0x740\n\t? __pfx_vsnprintf+0x10/0x10\n\t? srso_return_thunk+0x5/0x5f\n\t? srso_return_thunk+0x5/0x5f\n\t? mark_held_locks+0x49/0x80\n\t? srso_return_thunk+0x5/0x5f\n\t? srso_return_thunk+0x5/0x5f\n\t? irqentry_exit+0x17b/0x5e0\n\t? trace_irq_disable.constprop.0+0x116/0x150\n\t? __pfx_hfsplus_fill_super+0x10/0x10\n\t? __pfx_hfsplus_fill_super+0x10/0x10\n\tget_tree_bdev_flags+0x302/0x580\n\t? __pfx_get_tree_bdev_flags+0x10/0x10\n\t? vfs_parse_fs_qstr+0x129/0x1a0\n\t? __pfx_vfs_parse_fs_qstr+0x3/0x10\n\tvfs_get_tree+0x89/0x320\n\tfc_mount+0x10/0x1d0\n\tpath_mount+0x5c5/0x21c0\n\t? __pfx_path_mount+0x10/0x10\n\t? trace_irq_enable.constprop.0+0x116/0x150\n\t? trace_irq_enable.constprop.0+0x116/0x150\n\t? srso_return_thunk+0x5/0x5f\n\t? srso_return_thunk+0x5/0x5f\n\t? kmem_cache_free+0x307/0x540\n\t? user_path_at+0x51/0x60\n\t? __x64_sys_mount+0x212/0x280\n\t? srso_return_thunk+0x5/0x5f\n\t__x64_sys_mount+0x212/0x280\n\t? __pfx___x64_sys_mount+0x10/0x10\n\t? srso_return_thunk+0x5/0x5f\n\t? trace_irq_enable.constprop.0+0x116/0x150\n\t? srso_return_thunk+0x5/0x5f\n\tdo_syscall_64+0x111/0x680\n\tentry_SYSCALL_64_after_hwframe+0x77/0x7f\n\tRIP: 0033:0x7ffacad55eae\n\tCode: 48 8b 0d 85 1f 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 8\n\tRSP: 002b\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46299",
"url": "https://www.suse.com/security/cve/CVE-2026-46299"
},
{
"category": "external",
"summary": "SUSE Bug 1267920 for CVE-2026-46299",
"url": "https://bugzilla.suse.com/1267920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46299"
},
{
"cve": "CVE-2026-46301",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46301"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: topcliff-pch: fix use-after-free on unbind\n\nGive the driver a chance to flush its queue before releasing the DMA\nbuffers on driver unbind",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46301",
"url": "https://www.suse.com/security/cve/CVE-2026-46301"
},
{
"category": "external",
"summary": "SUSE Bug 1267983 for CVE-2026-46301",
"url": "https://bugzilla.suse.com/1267983"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46301"
},
{
"cve": "CVE-2026-46302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46302"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: allow multiple opens of /sys/fs/selinux/policy\n\nCurrently there can only be a single open of /sys/fs/selinux/policy at\nany time. This allows any process to block any other process from\nreading the kernel policy. The original motivation seems to have been\na mix of preventing an inconsistent view of the policy size and\npreventing userspace from allocating kernel memory without bound, but\nthis is arguably equally bad. Eliminate the policy_opened flag and\nshrink the critical section that the policy mutex is held. While we\nare making changes here, drop a couple of extraneous BUG_ONs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46302",
"url": "https://www.suse.com/security/cve/CVE-2026-46302"
},
{
"category": "external",
"summary": "SUSE Bug 1267947 for CVE-2026-46302",
"url": "https://bugzilla.suse.com/1267947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46302"
},
{
"cve": "CVE-2026-46303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46303"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nisofs: validate Rock Ridge CE continuation extent against volume size\n\nrock_continue() reads rs-\u003econt_extent verbatim from the Rock Ridge CE\nrecord and passes it to sb_bread() without checking that the block\nnumber is within the mounted ISO 9660 volume. commit e595447e177b\n(\"[PATCH] rock.c: handle corrupted directories\") added cont_offset\nand cont_size rejection for the CE continuation but did not validate\nthe extent block number itself. commit f54e18f1b831 (\"isofs: Fix\ninfinite looping over CE entries\") later capped the CE chain length\nat RR_MAX_CE_ENTRIES = 32 but again left the block number unchecked.\n\nWith a crafted ISO mounted via udisks2 (desktop optical auto-mount)\nor via CAP_SYS_ADMIN mount, rs-\u003econt_extent can therefore point at\nan out-of-range block or at blocks belonging to an adjacent\nfilesystem on the same block device. sb_bread() on an out-of-range\nblock returns NULL cleanly via the block layer EIO path, so there\nis no memory-safety violation. For in-range reads of adjacent-\nfilesystem data, the CE buffer is parsed as Rock Ridge records and\nonly the text of SL sub-records reaches userspace through\nreadlink(), which makes the info-leak channel narrow and difficult\nto exploit; still, rejecting the malformed CE outright matches the\nrejection shape already present in the same function for\ncont_offset and cont_size.\n\nAdd an ISOFS_SB(sb)-\u003es_nzones bounds check to rock_continue() next\nto the existing offset/size rejection, printing the same\ncorrupted-directory-entry notice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46303",
"url": "https://www.suse.com/security/cve/CVE-2026-46303"
},
{
"category": "external",
"summary": "SUSE Bug 1267984 for CVE-2026-46303",
"url": "https://bugzilla.suse.com/1267984"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-46303"
},
{
"cve": "CVE-2026-46304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46304"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free\n\nnvmet_tcp_release_queue_work() runs on nvmet-wq and can drop the\nfinal controller reference through nvmet_cq_put(). If that triggers\nnvmet_ctrl_free(), the teardown path flushes ctrl-\u003easync_event_work on\nthe same nvmet-wq.\n\nCall chain:\n\n nvmet_tcp_schedule_release_queue()\n kref_put(\u0026queue-\u003ekref, nvmet_tcp_release_queue)\n nvmet_tcp_release_queue()\n queue_work(nvmet_wq, \u0026queue-\u003erelease_work) \u003c--- nvmet_wq\n process_one_work()\n nvmet_tcp_release_queue_work()\n nvmet_cq_put(\u0026queue-\u003envme_cq)\n nvmet_cq_destroy()\n nvmet_ctrl_put(cq-\u003ectrl)\n nvmet_ctrl_free()\n flush_work(\u0026ctrl-\u003easync_event_work) \u003c--- nvmet_wq\n\n Previously Scheduled by :-\n\t\t nvmet_add_async_event\n\t\t queue_work(nvmet_wq, \u0026ctrl-\u003easync_event_work);\n\nThis trips lockdep with a possible recursive locking warning.\n\n[ 5223.015876] run blktests nvme/003 at 2026-04-07 20:53:55\n[ 5223.061801] loop0: detected capacity change from 0 to 2097152\n[ 5223.072206] nvmet: adding nsid 1 to subsystem blktests-subsystem-1\n[ 5223.088368] nvmet_tcp: enabling port 0 (127.0.0.1:4420)\n[ 5223.126086] nvmet: Created discovery controller 1 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:0f01fb42-9f7f-4856-b0b3-51e60b8de349.\n[ 5223.128453] nvme nvme1: new ctrl: NQN \"nqn.2014-08.org.nvmexpress.discovery\", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:0f01fb42-9f7f-4856-b0b3-51e60b8de349\n[ 5233.199447] nvme nvme1: Removing ctrl: NQN \"nqn.2014-08.org.nvmexpress.discovery\"\n\n[ 5233.227718] ============================================\n[ 5233.231283] WARNING: possible recursive locking detected\n[ 5233.234696] 7.0.0-rc3nvme+ #20 Tainted: G O N\n[ 5233.238434] --------------------------------------------\n[ 5233.241852] kworker/u192:6/2413 is trying to acquire lock:\n[ 5233.245429] ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90\n[ 5233.251438]\n but task is already holding lock:\n[ 5233.255254] ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x5cc/0x6e0\n[ 5233.261125]\n other info that might help us debug this:\n[ 5233.265333] Possible unsafe locking scenario:\n\n[ 5233.269217] CPU0\n[ 5233.270795] ----\n[ 5233.272436] lock((wq_completion)nvmet-wq);\n[ 5233.275241] lock((wq_completion)nvmet-wq);\n[ 5233.278020]\n *** DEADLOCK ***\n\n[ 5233.281793] May be due to missing lock nesting notation\n\n[ 5233.286195] 3 locks held by kworker/u192:6/2413:\n[ 5233.289192] #0: ffff888111632548 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x5cc/0x6e0\n[ 5233.294569] #1: ffffc9000e2a7e40 ((work_completion)(\u0026queue-\u003erelease_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x6e0\n[ 5233.300128] #2: ffffffff82d7dc40 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530\n[ 5233.304290]\n stack backtrace:\n[ 5233.306520] CPU: 4 UID: 0 PID: 2413 Comm: kworker/u192:6 Tainted: G O N 7.0.0-rc3nvme+ #20 PREEMPT(full)\n[ 5233.306524] Tainted: [O]=OOT_MODULE, [N]=TEST\n[ 5233.306525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\n[ 5233.306527] Workqueue: nvmet-wq nvmet_tcp_release_queue_work [nvmet_tcp]\n[ 5233.306532] Call Trace:\n[ 5233.306534] \u003cTASK\u003e\n[ 5233.306536] dump_stack_lvl+0x73/0xb0\n[ 5233.306552] print_deadlock_bug+0x225/0x2f0\n[ 5233.306556] __lock_acquire+0x13f0/0x2290\n[ 5233.306563] lock_acquire+0xd0/0x300\n[ 5233.306565] ? touch_wq_lockdep_map+0x26/0x90\n[ 5233.306571] ? __flush_work+0x20b/0x530\n[ 5233.306573] ? touch_wq_lockdep_map+0x26/0x90\n[ 5233.306577] touch_wq_lockdep_map+0x3b/0x90\n[ 5233.306580] ? touch_wq_lockdep_map+0x26/0x90\n[ 52\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46304",
"url": "https://www.suse.com/security/cve/CVE-2026-46304"
},
{
"category": "external",
"summary": "SUSE Bug 1267985 for CVE-2026-46304",
"url": "https://bugzilla.suse.com/1267985"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46304"
},
{
"cve": "CVE-2026-46305",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46305"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc\n\nThe return value of kzalloc_flex() is used without\nensuring that the allocation succeeded, and the\npointer is dereferenced unconditionally.\n\nGuard the access to the allocated structure to\navoid a potential NULL pointer dereference if the\nallocation fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46305",
"url": "https://www.suse.com/security/cve/CVE-2026-46305"
},
{
"category": "external",
"summary": "SUSE Bug 1267930 for CVE-2026-46305",
"url": "https://bugzilla.suse.com/1267930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46305"
},
{
"cve": "CVE-2026-46306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46306"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nflow_dissector: do not dissect PPPoE PFC frames\n\nRFC 2516 Section 7 states that Protocol Field Compression (PFC) is NOT\nRECOMMENDED for PPPoE. In practice, pppd does not support negotiating\nPFC for PPPoE sessions, and the flow dissector driver has assumed an\nuncompressed frame until the blamed commit.\n\nDuring the review process of that commit [1], support for PFC is\nsuggested. However, having a compressed (1-byte) protocol field means\nthe subsequent PPP payload is shifted by one byte, causing 4-byte\nmisalignment for the network header and an unaligned access exception\non some architectures.\n\nThe exception can be reproduced by sending a PPPoE PFC frame to an\nethernet interface of a MIPS board, with RPS enabled, even if no PPPoE\nsession is active on that interface:\n\n$ 0 : 00000000 80c40000 00000000 85144817\n$ 4 : 00000008 00000100 80a75758 81dc9bb8\n$ 8 : 00000010 8087ae2c 0000003d 00000000\n$12 : 000000e0 00000039 00000000 00000000\n$16 : 85043240 80a75758 81dc9bb8 00006488\n$20 : 0000002f 00000007 85144810 80a70000\n$24 : 81d1bda0 00000000\n$28 : 81dc8000 81dc9aa8 00000000 805ead08\nHi : 00009d51\nLo : 2163358a\nepc : 805e91f0 __skb_flow_dissect+0x1b0/0x1b50\nra : 805ead08 __skb_get_hash_net+0x74/0x12c\nStatus: 11000403 KERNEL EXL IE\nCause : 40800010 (ExcCode 04)\nBadVA : 85144817\nPrId : 0001992f (MIPS 1004Kc)\nCall Trace:\n[\u003c805e91f0\u003e] __skb_flow_dissect+0x1b0/0x1b50\n[\u003c805ead08\u003e] __skb_get_hash_net+0x74/0x12c\n[\u003c805ef330\u003e] get_rps_cpu+0x1b8/0x3fc\n[\u003c805fca70\u003e] netif_receive_skb_list_internal+0x324/0x364\n[\u003c805fd120\u003e] napi_complete_done+0x68/0x2a4\n[\u003c8058de5c\u003e] mtk_napi_rx+0x228/0xfec\n[\u003c805fd398\u003e] __napi_poll+0x3c/0x1c4\n[\u003c805fd754\u003e] napi_threaded_poll_loop+0x234/0x29c\n[\u003c805fd848\u003e] napi_threaded_poll+0x8c/0xb0\n[\u003c80053544\u003e] kthread+0x104/0x12c\n[\u003c80002bd8\u003e] ret_from_kernel_thread+0x14/0x1c\n\nCode: 02d51821 1060045b 00000000 \u003c8c640000\u003e 3084000f 2c820005 144001a2 00042080 8e220000\n\nTo reduce the attack surface and maintain performance, do not process\nPPPoE PFC frames.\n\n[1] https://lore.kernel.org/r/20220630231016.GA392@debian.home",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46306",
"url": "https://www.suse.com/security/cve/CVE-2026-46306"
},
{
"category": "external",
"summary": "SUSE Bug 1267986 for CVE-2026-46306",
"url": "https://bugzilla.suse.com/1267986"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46306"
},
{
"cve": "CVE-2026-46307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46307"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath5k: do not access array OOB\n\nVincent reports:\n\u003e The ath5k driver seems to do an array-index-out-of-bounds access as\n\u003e shown by the UBSAN kernel message:\n\u003e UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath5k/base.c:1741:20\n\u003e index 4 is out of range for type \u0027ieee80211_tx_rate [4]\u0027\n\u003e ...\n\u003e Call Trace:\n\u003e \u003cTASK\u003e\n\u003e dump_stack_lvl+0x5d/0x80\n\u003e ubsan_epilogue+0x5/0x2b\n\u003e __ubsan_handle_out_of_bounds.cold+0x46/0x4b\n\u003e ath5k_tasklet_tx+0x4e0/0x560 [ath5k]\n\u003e tasklet_action_common+0xb5/0x1c0\n\nIt is real. \u0027ts-\u003ets_final_idx\u0027 can be 3 on 5212, so:\n info-\u003estatus.rates[ts-\u003ets_final_idx + 1].idx = -1;\nwith the array defined as:\n struct ieee80211_tx_rate rates[IEEE80211_TX_MAX_RATES];\nwhile the size is:\n #define IEEE80211_TX_MAX_RATES 4\nis indeed bogus.\n\nSet this \u0027idx = -1\u0027 sentinel only if the array index is less than the\narray size. As mac80211 will not look at rates beyond the size\n(IEEE80211_TX_MAX_RATES).\n\nNote: The effect of the OOB write is negligible. It just overwrites the\nnext member of info-\u003estatus, i.e. ack_signal.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46307",
"url": "https://www.suse.com/security/cve/CVE-2026-46307"
},
{
"category": "external",
"summary": "SUSE Bug 1267987 for CVE-2026-46307",
"url": "https://bugzilla.suse.com/1267987"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46307"
},
{
"cve": "CVE-2026-46308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46308"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()\n\nIn scpsys_get_bus_protection_legacy(), of_find_node_with_property()\nreturns a device node with its reference count incremented. The function\nthen calls of_node_put(node) before checking whether\nsyscon_regmap_lookup_by_phandle() returns an error. If an error occurs,\ndev_err_probe() dereferences the node pointer to print diagnostic\ninformation, but the node memory may have already been freed due to the\nearlier of_node_put(), leading to a use-after-free vulnerability.\n\nFix this by moving the of_node_put() call after the error check, ensuring\nthe node is still valid when accessed in the error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46308",
"url": "https://www.suse.com/security/cve/CVE-2026-46308"
},
{
"category": "external",
"summary": "SUSE Bug 1267988 for CVE-2026-46308",
"url": "https://bugzilla.suse.com/1267988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46308"
},
{
"cve": "CVE-2026-46309",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46309"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise\n\nAdd validation in xe_vm_madvise_ioctl() to reject PAT indices with\nXE_COH_NONE coherency mode when applied to CPU cached memory.\n\nUsing coh_none with CPU cached buffers is a security issue. When the\nkernel clears pages before reallocation, the clear operation stays in\nCPU cache (dirty). GPU with coh_none can bypass CPU caches and read\nstale sensitive data directly from DRAM, potentially leaking data from\npreviously freed pages of other processes.\n\nThis aligns with the existing validation in vm_bind path\n(xe_vm_bind_ioctl_validate_bo).\n\nv2(Matthew brost)\n- Add fixes\n- Move one debug print to better place\n\nv3(Matthew Auld)\n- Should be drm/xe/uapi\n- More Cc\n\nv4(Shuicheng Lin)\n- Fix kmem leak issues by the way\n\nv5\n- Remove kmem leak because it has been merged by another patch\n\nv6\n- Remove the fix which is not related to current fix\n\nv7\n- No change\n\nv8\n- Rebase\n\nv9\n- Limit the restrictions to iGPU\n\nv10\n- No change\n\n(cherry picked from commit 016ccdb674b8c899940b3944952c96a6a490d10a)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46309",
"url": "https://www.suse.com/security/cve/CVE-2026-46309"
},
{
"category": "external",
"summary": "SUSE Bug 1267989 for CVE-2026-46309",
"url": "https://bugzilla.suse.com/1267989"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46309"
},
{
"cve": "CVE-2026-46310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46310"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: renesas: vsp1: Fix NULL pointer deref on module unload\n\nWhen unloading the module on gen 4, we hit a NULL pointer dereference.\nThis is caused by the cleanup code calling vsp1_drm_cleanup() where it\nshould be calling vsp1_vspx_cleanup().\n\nFix this by checking the IP version and calling the drm or vspx function\naccordingly, the same way as the init code does.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46310",
"url": "https://www.suse.com/security/cve/CVE-2026-46310"
},
{
"category": "external",
"summary": "SUSE Bug 1267934 for CVE-2026-46310",
"url": "https://bugzilla.suse.com/1267934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46310"
},
{
"cve": "CVE-2026-46311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46311"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/userq: fix access to stale wptr mapping\n\nUse drm_exec to take both locks i.e vm root bo and\nwptr_obj bo to access the mapping data properly.\n\nThis fixes the security issue of unmap the wptr_obj while\na queue creation is in progress and passing other\nbo at same address.\n\n(cherry picked from commit 1fc6c8ab45dbee096469c08c13f6099d57a52d6c)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46311",
"url": "https://www.suse.com/security/cve/CVE-2026-46311"
},
{
"category": "external",
"summary": "SUSE Bug 1267949 for CVE-2026-46311",
"url": "https://bugzilla.suse.com/1267949"
},
{
"category": "external",
"summary": "SUSE Bug 1271432 for CVE-2026-46311",
"url": "https://bugzilla.suse.com/1271432"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46311"
},
{
"cve": "CVE-2026-46312",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46312"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: videobuf2: Set vma_flags in vb2_dma_sg_mmap\n\nvb2_dma_contig sets VMA flags VM_DONTEXPAND and VM_DONTDUMP and I do not\nsee a reason why vb2_dma_sg should behave differently. This avoids\nhitting `WARN_ON(!(vma-\u003evm_flags \u0026 VM_DONTEXPAND));` in\ndrm_gem_mmap_obj() during mmap() of an imported dma-buf from the out of\ntree Apple ISP camera capture driver which uses vb2_dma_sg_memops.\n\ngst-launch-1.0 v4l2src ! gtk4paintablesink\n\n[ 38.201528] ------------[ cut here ]------------\n[ 38.202135] WARNING: CPU: 7 PID: 2362 at drivers/gpu/drm/drm_gem.c:1144 drm_gem_mmap_obj+0x1f8/0x210\n[ 38.203278] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer\nsnd_seq snd_seq_device uinput nf_conntrack_netbios_ns\nnf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib\nnft_reject_inet nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat\nnf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables qrtr bnep\nnls_ascii i2c_dev loop fuse dm_multipath nfnetlink brcmfmac_wcc\nhid_magicmouse hci_bcm4377 brcmfmac brcmutil bluetooth ecdh_generic\ncfg80211 ecc btrfs xor xor_neon rfkill hid_apple raid6_pq joydev\naop_als apple_nvmem_spmi industrialio snd_soc_aop apple_z2\nsnd_soc_cs42l84 tps6598x snd_soc_tas2764 macsmc_reboot spi_nor\nmacsmc_hwmon rtc_macsmc gpio_macsmc macsmc_power regmap_spmi\nmacsmc_input dockchannel_hid panel_summit appledrm nvme_apple dwc3\nsnd_soc_macaudio drm_client_lib nvme_core phy_apple_atc hwmon\napple_sart apple_dockchannel macsmc apple_rtkit_helper\nspmi_apple_controller aop apple_wdt mfd_core nvmem_apple_efuses\npinctrl_apple_gpio apple_isp apple_dcp videobuf2_dma_sg mux_core\nspi_apple\n[ 38.203300] videobuf2_memops i2c_pasemi_platform snd_soc_apple_mca videobuf2_v4l2 videodev clk_apple_nco videobuf2_common snd_pcm_dmaengine adpdrm asahi apple_admac adpdrm_mipi drm_dma_helper pwm_apple i2c_pasemi_core drm_display_helper mc cec apple_dart ofpart apple_soc_cpufreq leds_pwm phram\n[ 38.217677] CPU: 7 UID: 1000 PID: 2362 Comm: gst-launch-1.0 Tainted: G W 6.17.6+ #asahi-dev PREEMPT(full)\n[ 38.219040] Tainted: [W]=WARN\n[ 38.219398] Hardware name: Apple MacBook Pro (13-inch, M2, 2022) (DT)\n[ 38.220213] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)\n[ 38.221088] pc : drm_gem_mmap_obj+0x1f8/0x210\n[ 38.221643] lr : drm_gem_mmap_obj+0x78/0x210\n[ 38.222178] sp : ffffc0008dc678e0\n[ 38.222579] x29: ffffc0008dc678e0 x28: 0000000000042a97 x27: ffff8000b701b480\n[ 38.223465] x26: 00000000000000fb x25: ffffc0008dc67d20 x24: ffffc0008dc67968\n[ 38.224402] x23: ffff8000e3ca5600 x22: ffff8000265b7800 x21: ffff80003000c0c0\n[ 38.225279] x20: 0000000000000000 x19: ffff8000b68c5200 x18: ffffc0008dc67968\n[ 38.226151] x17: 0000000000000000 x16: 0000000000000000 x15: ffffc000810a30a8\n[ 38.227042] x14: 00007fff637effff x13: 00005555de91ffff x12: 00007fff63293fff\n[ 38.227942] x11: 0000000000000000 x10: ffff8000184ecf08 x9 : ffffc0007a1900c8\n[ 38.228824] x8 : ffffc0008dc67968 x7 : 0000000000000012 x6 : ffffc0015cf1c000\n[ 38.229703] x5 : ffffc0008dc676a0 x4 : ffffc00081a27dc0 x3 : 0000000000000038\n[ 38.230607] x2 : 0000000000000003 x1 : 0000000000000003 x0 : 00000000100000fb\n[ 38.231488] Call trace:\n[ 38.231806] drm_gem_mmap_obj+0x1f8/0x210 (P)\n[ 38.232342] drm_gem_mmap+0x140/0x260\n[ 38.232813] __mmap_region+0x488/0x9a0\n[ 38.233277] mmap_region+0xd0/0x148\n[ 38.233703] do_mmap+0x350/0x5c0\n[ 38.234148] vm_mmap_pgoff+0x14c/0x200\n[ 38.234612] ksys_mmap_pgoff+0x150/0x208\n[ 38.235107] __arm64_sys_mmap+0x34/0x50\n[ 38.235611] invoke_syscall+0x50/0x120\n[ 38.236075] el0_svc_common.constprop.0+0x48/0xf0\n[ 38.236680] do_el0_svc+0x24/0x38\n[ 38.237113] el0_svc+0x38/0x168\n[ 38.237507] el0t_64_sync_handler+0xa0/0xe8\n[ 38.238034] el0t_64_sync+0x198/0x1a0\n[ 38.238491] ---[ end trace 0000000000000000 ]---\n\nThere were discussions in [1] at the end of 2023 that mmap() on imported\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46312",
"url": "https://www.suse.com/security/cve/CVE-2026-46312"
},
{
"category": "external",
"summary": "SUSE Bug 1267990 for CVE-2026-46312",
"url": "https://bugzilla.suse.com/1267990"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46312"
},
{
"cve": "CVE-2026-46313",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46313"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: intel/ipu6: fix error pointer dereference\n\nIn a error path isp-\u003epsys is confirmed to be an error pointer not NULL so\nthis condition is true and the error pointer is dereferenced. So isp-psys\nshould be set to NULL before going to out_ipu6_bus_del_devices.\n\nDetected by Smatch:\ndrivers/media/pci/intel/ipu6/ipu6.c:690 ipu6_pci_probe() error:\n\u0027isp-\u003epsys\u0027 dereferencing possible ERR_PTR()\n\n[Sakari Ailus: Fix commit message.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46313",
"url": "https://www.suse.com/security/cve/CVE-2026-46313"
},
{
"category": "external",
"summary": "SUSE Bug 1267991 for CVE-2026-46313",
"url": "https://bugzilla.suse.com/1267991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46313"
},
{
"cve": "CVE-2026-46314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46314"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Reject empty multisync extension to prevent infinite loop\n\nv3d_get_extensions() walks a userspace-provided singly-linked list of\nioctl extensions without any bound on the chain length. A local user\ncan craft a self-referential extension (ext-\u003enext == \u0026ext) with zero\nin_sync_count and out_sync_count, which bypasses the existing duplicate-\nextension guard:\n\n if (se-\u003ein_sync_count || se-\u003eout_sync_count)\n return -EINVAL;\n\nThe guard never fires because v3d_get_multisync_post_deps() returns\nimmediately when count is zero, leaving both fields at zero on every\niteration. The result is an infinite loop in kernel context, blocking\nthe calling thread and pegging a CPU core indefinitely.\n\nFix this by rejecting a multisync extension where both in_sync_count\nand out_sync_count are zero in v3d_get_multisync_submit_deps(). An\nempty multisync carries no synchronization information and serves no\nuseful purpose, so returning -EINVAL for such an extension is the\ncorrect defense against this attack vector.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46314",
"url": "https://www.suse.com/security/cve/CVE-2026-46314"
},
{
"category": "external",
"summary": "SUSE Bug 1267992 for CVE-2026-46314",
"url": "https://bugzilla.suse.com/1267992"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46314"
},
{
"cve": "CVE-2026-46315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46315"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: clear waitid info before copying it to userspace\n\nIORING_OP_WAITID stores its result fields in struct io_waitid::info and\nlater copies them to userspace siginfo. The prep path initializes the\nrequest arguments, but it does not initialize info itself.\n\nIf the wait operation completes without reporting a child event, the common\nwait code can return without writing wo_info. In that case io_waitid_finish()\nstill copies iw-\u003einfo to userspace, exposing stale bytes from the reused\nio_kiocb command storage.\n\nClear the result storage during prep so the io_uring path matches the\nregular waitid syscall, which uses a zero-initialized struct waitid_info.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46315",
"url": "https://www.suse.com/security/cve/CVE-2026-46315"
},
{
"category": "external",
"summary": "SUSE Bug 1267953 for CVE-2026-46315",
"url": "https://bugzilla.suse.com/1267953"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46315"
},
{
"cve": "CVE-2026-46316",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46316"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry\n\nvgic_its_invalidate_cache() walks the per-ITS translation cache with\nxa_for_each() and drops the cache\u0027s reference on each entry with\nvgic_put_irq(). It puts the iterated pointer, though, rather than the\nvalue returned by xa_erase().\n\nThe function is called from contexts that do not exclude one another: the\nITS command handlers hold its_lock, the GITS_CTLR write path holds\ncmd_lock, and the path that clears EnableLPIs in a redistributor\u0027s\nGICR_CTLR holds neither. Two or more of them can drain the same cache\nconcurrently, and if each one observes the same entry, erases it and then\nputs it, the single reference the cache holds on that entry is dropped\nmore than once. The entry can then be freed while an ITE still maps it.\n\nxa_erase() is atomic and returns the previous entry, so put only the entry\nthat this context actually removed. The cache reference is then dropped\nexactly once per entry even when the invalidations run concurrently, and\nthe behavior is unchanged when only one context runs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46316",
"url": "https://www.suse.com/security/cve/CVE-2026-46316"
},
{
"category": "external",
"summary": "SUSE Bug 1267875 for CVE-2026-46316",
"url": "https://bugzilla.suse.com/1267875"
},
{
"category": "external",
"summary": "SUSE Bug 1268039 for CVE-2026-46316",
"url": "https://bugzilla.suse.com/1268039"
},
{
"category": "external",
"summary": "SUSE Bug 1270059 for CVE-2026-46316",
"url": "https://bugzilla.suse.com/1270059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46316"
},
{
"cve": "CVE-2026-46317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46317"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Reassign nested_mmus array behind mmu_lock\n\nkvm-\u003earch.nested_mmus[] is walked under kvm-\u003emmu_lock, including from the\nMMU notifier path (kvm_unmap_gfn_range() -\u003e kvm_nested_s2_unmap()), which\ncan run at any time. kvm_vcpu_init_nested() reallocates the array and frees\nthe old buffer while holding only kvm-\u003earch.config_lock, so such a walker\ncan reference the freed array.\n\nAllocate the new array outside of mmu_lock, as the allocation can sleep.\nUnder the lock, copy the existing entries, fix up the back pointers and\nreassign the array. Free the old buffer after dropping the lock, as\nkvfree() can sleep as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46317",
"url": "https://www.suse.com/security/cve/CVE-2026-46317"
},
{
"category": "external",
"summary": "SUSE Bug 1268018 for CVE-2026-46317",
"url": "https://bugzilla.suse.com/1268018"
},
{
"category": "external",
"summary": "SUSE Bug 1268040 for CVE-2026-46317",
"url": "https://bugzilla.suse.com/1268040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46317"
},
{
"cve": "CVE-2026-46318",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46318"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mm/hugetlbfs: update hugetlbfs to use mmap_prepare\"\n\nThis reverts commit ea52cb24cd3f (\"mm/hugetlbfs: update hugetlbfs to use\nmmap_prepare\") with conflict resolution to account for changes in commit\nea52cb24cd3f (\"mm/hugetlbfs: update hugetlbfs to use mmap_prepare\").\n\nThe patch incorrectly handled hugetlb VMA lock allocation at the\nmmap_prepare stage, where a failed allocation occurring after mmap_prepare\nis called might result in the lock leaking.\n\nThere is no risk of a merge causing a similar issues, as\nVMA_DONTEXPAND_BIT is set for hugetlb mappings.\n\nAs a first step in addressing this issue, simply revert the change so we\ncan rework how we do this having corrected the underlying issues.\n\nWe maintain the VMA flags changes as best we can, accounting for the fact\nthat we were working with a VMA descriptor previously and propagating\nlike-for-like changes for this.\n\nNote that we invoke vma_set_flags() and do not call vma_start_write() as\nvm_flags_set() does. This is OK as it\u0027s being done in an .mmap hook where\nthe VMA is not yet linked into the tree so nobody else can be accessing\nit.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46318",
"url": "https://www.suse.com/security/cve/CVE-2026-46318"
},
{
"category": "external",
"summary": "SUSE Bug 1268021 for CVE-2026-46318",
"url": "https://bugzilla.suse.com/1268021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46318"
},
{
"cve": "CVE-2026-46319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46319"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ct: Only release RCU read lock after ct_ft\n\nWhen looking up a flow table in act_ct in tcf_ct_flow_table_get(),\nrhashtable_lookup_fast() internally opens and closes an RCU read critical\nsection before returning ct_ft.\nThe tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero()\nis invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft\nobject. This vulnerability can lead to privilege escalation.\n\nAnalysis from zdi-disclosures@trendmicro.com:\nWhen initializing act_ct, tcf_ct_init() is called, which internally triggers\ntcf_ct_flow_table_get().\n\nstatic int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)\n\n{\n struct zones_ht_key key = { .net = net, .zone = params-\u003ezone };\n struct tcf_ct_flow_table *ct_ft;\n int err = -ENOMEM;\n\n mutex_lock(\u0026zones_mutex);\n ct_ft = rhashtable_lookup_fast(\u0026zones_ht, \u0026key, zones_params); // [1]\n if (ct_ft \u0026\u0026 refcount_inc_not_zero(\u0026ct_ft-\u003eref)) // [2]\n goto out_unlock;\n ...\n}\n\nstatic __always_inline void *rhashtable_lookup_fast(\n struct rhashtable *ht, const void *key,\n const struct rhashtable_params params)\n{\n void *obj;\n\n rcu_read_lock();\n obj = rhashtable_lookup(ht, key, params);\n rcu_read_unlock();\n\n return obj;\n}\n\nAt [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft\nfrom zones_ht . The lookup is performed within an RCU read critical section\nthrough rcu_read_lock() / rcu_read_unlock(), which prevents the object from\nbeing freed. However, at the point of function return, rcu_read_unlock() has\nalready been called, and there is nothing preventing ct_ft from being freed\nbefore reaching refcount_inc_not_zero(\u0026ct_ft-\u003eref) at [2]. This interval becomes\nthe race window, during which ct_ft can be freed.\n\nFree Process:\n\ntcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu()\ntcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().\n\nstatic void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft)\n{\n if (refcount_dec_and_test(\u0026ct_ft-\u003eref)) {\n rhashtable_remove_fast(\u0026zones_ht, \u0026ct_ft-\u003enode, zones_params);\n INIT_RCU_WORK(\u0026ct_ft-\u003erwork, tcf_ct_flow_table_cleanup_work); // [3]\n queue_rcu_work(act_ct_wq, \u0026ct_ft-\u003erwork);\n }\n}\n\nAt [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work\n\nstatic void tcf_ct_flow_table_cleanup_work(struct work_struct *work)\n\n{\n struct tcf_ct_flow_table *ct_ft;\n struct flow_block *block;\n\n ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,\n rwork);\n nf_flow_table_free(\u0026ct_ft-\u003enf_ft);\n block = \u0026ct_ft-\u003enf_ft.flow_block;\n down_write(\u0026ct_ft-\u003enf_ft.flow_block_lock);\n WARN_ON(!list_empty(\u0026block-\u003ecb_list));\n up_write(\u0026ct_ft-\u003enf_ft.flow_block_lock);\n kfree(ct_ft); // [4]\n\n module_put(THIS_MODULE);\n}\n\ntcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes\nbetween [1] and [2], UAF occurs.\n\nThis race condition has a very short race window, making it generally\ndifficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was\ninserted after[1]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46319",
"url": "https://www.suse.com/security/cve/CVE-2026-46319"
},
{
"category": "external",
"summary": "SUSE Bug 1268022 for CVE-2026-46319",
"url": "https://bugzilla.suse.com/1268022"
},
{
"category": "external",
"summary": "SUSE Bug 1268281 for CVE-2026-46319",
"url": "https://bugzilla.suse.com/1268281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46319"
},
{
"cve": "CVE-2026-46320",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46320"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntap: free page on error paths in tap_get_user_xdp()\n\ntap_get_user_xdp() rejects a frame shorter than ETH_HLEN with -EINVAL,\nand returns -ENOMEM when build_skb() fails. Both paths jump to the err\nlabel without freeing the page that vhost_net_build_xdp() allocated for\nthe frame. tap_sendmsg() discards the per-buffer return value and always\nreturns 0, so vhost_tx_batch() takes the success path and never frees\nthe page; each rejected frame in a batch leaks one page-frag chunk.\n\nFree the page on both error paths, before the skb is built. This is the\ntap counterpart of the same leak in tun_xdp_one().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46320",
"url": "https://www.suse.com/security/cve/CVE-2026-46320"
},
{
"category": "external",
"summary": "SUSE Bug 1267993 for CVE-2026-46320",
"url": "https://bugzilla.suse.com/1267993"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-46320"
},
{
"cve": "CVE-2026-46321",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46321"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on short-frame rejection in tun_xdp_one()\n\ntun_xdp_one() returns -EINVAL on a frame shorter than ETH_HLEN without\nfreeing the page that vhost_net_build_xdp() allocated for it.\ntun_sendmsg() discards that -EINVAL and still returns total_len, so\nvhost_tx_batch() takes the success path and never frees the page; each\nshort frame in a batch leaks one page-frag chunk.\n\nA local process that can open /dev/net/tun and /dev/vhost-net can hit\nthis path: it attaches a tun/tap device as the vhost-net backend and\nfeeds TX descriptors whose length minus the virtio-net header is below\nETH_HLEN. Each kick leaks the page-frag chunks for that batch, and a\ntight submission loop exhausts host memory and triggers an OOM panic.\nFree the page before returning -EINVAL, matching the XDP-program error\npath in the same function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46321",
"url": "https://www.suse.com/security/cve/CVE-2026-46321"
},
{
"category": "external",
"summary": "SUSE Bug 1268024 for CVE-2026-46321",
"url": "https://bugzilla.suse.com/1268024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46321"
},
{
"cve": "CVE-2026-46322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46322"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on build_skb failure in tun_xdp_one()\n\nWhen build_skb() fails in tun_xdp_one(), the function sets ret to\n-ENOMEM and jumps to the out label, which returns without freeing the\npage that vhost_net_build_xdp() allocated for the frame. As with the\nshort-frame rejection path, tun_sendmsg() discards the per-buffer error\nand still returns total_len, so vhost_tx_batch() takes the success path\nand never frees the page. Each build_skb() failure in a batch leaks one\npage-frag chunk.\n\nFree the page before taking the error path, matching the put_page() the\nother error exits of tun_xdp_one() already perform.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46322",
"url": "https://www.suse.com/security/cve/CVE-2026-46322"
},
{
"category": "external",
"summary": "SUSE Bug 1267994 for CVE-2026-46322",
"url": "https://bugzilla.suse.com/1267994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-46322"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46324",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46324"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: use list_del_rcu for netlink hooks\n\nnft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need\nto use list_del_rcu(), this list can be walked by concurrent dumpers.\n\nAdd a new helper and use it consistently.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46324",
"url": "https://www.suse.com/security/cve/CVE-2026-46324"
},
{
"category": "external",
"summary": "SUSE Bug 1267995 for CVE-2026-46324",
"url": "https://bugzilla.suse.com/1267995"
},
{
"category": "external",
"summary": "SUSE Bug 1268865 for CVE-2026-46324",
"url": "https://bugzilla.suse.com/1268865"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46324"
},
{
"cve": "CVE-2026-46332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngreybus: gb-beagleplay: bound bootloader receive buffering\n\ncc1352_bootloader_rx() appends each serdev chunk into the fixed\nrx_buffer before parsing bootloader packets. The helper can keep\nleftover bytes between callbacks and may receive multiple packets in one\ncallback, so a single count value is not constrained by one packet\nlength.\n\nCheck that the incoming chunk fits in the remaining receive buffer space\nbefore memcpy(). If it does not, drop the staged data and consume the\nbytes instead of overflowing rx_buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46332",
"url": "https://www.suse.com/security/cve/CVE-2026-46332"
},
{
"category": "external",
"summary": "SUSE Bug 1268136 for CVE-2026-46332",
"url": "https://bugzilla.suse.com/1268136"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46332"
},
{
"cve": "CVE-2026-52904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: fix nvkm_device leak on aperture removal failure\n\nWhen aperture_remove_conflicting_pci_devices() fails during probe, the\nerror path returns directly without unwinding the nvkm_device that was\njust allocated by nvkm_device_pci_new(). This leaks both the device\nwrapper and the pci_enable_device() reference taken inside it.\n\nJump to the existing fail_nvkm label so nvkm_device_del() runs and\nbalances both. The leak was introduced when the intermediate\nnvkm_device_del() between detection and aperture removal was dropped\nin favor of creating the pci device once.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52904",
"url": "https://www.suse.com/security/cve/CVE-2026-52904"
},
{
"category": "external",
"summary": "SUSE Bug 1268051 for CVE-2026-52904",
"url": "https://bugzilla.suse.com/1268051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-52904"
},
{
"cve": "CVE-2026-52905",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52905"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/core: disallow non-power of two min_region_sz on damon_start()\n\nCommit d8f867fa0825 (\"mm/damon: add damon_ctx-\u003emin_sz_region\") introduced\na bug that allows unaligned DAMON region address ranges. Commit\nc80f46ac228b (\"mm/damon/core: disallow non-power of two min_region_sz\")\nfixed it, but only for damon_commit_ctx() use case. Still, DAMON sysfs\ninterface can emit non-power of two min_region_sz via damon_start(). Fix\nthe path by adding the is_power_of_2() check on damon_start().\n\nThe issue was discovered by sashiko [1].",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52905",
"url": "https://www.suse.com/security/cve/CVE-2026-52905"
},
{
"category": "external",
"summary": "SUSE Bug 1268052 for CVE-2026-52905",
"url": "https://bugzilla.suse.com/1268052"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-52905"
},
{
"cve": "CVE-2026-52906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p: fix access mode flags being ORed instead of replaced\n\nSince commit 1f3e4142c0eb (\"9p: convert to the new mount API\"),\nv9fs_apply_options() applies parsed mount flags with |= onto flags\nalready set by v9fs_session_init(). For 9P2000.L, session_init sets\nV9FS_ACCESS_CLIENT as the default, so when the user mounts with\n\"access=user\", both bits end up set. Access mode checks compare\nagainst exact values, so having both bits set matches neither mode.\n\nThis causes v9fs_fid_lookup() to fall through to the default switch\ncase, using INVALID_UID (nobody/65534) instead of current_fsuid()\nfor all fid lookups. Root is then unable to chown or perform other\nprivileged operations.\n\nFix by clearing the access mask before applying the user\u0027s choice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52906",
"url": "https://www.suse.com/security/cve/CVE-2026-52906"
},
{
"category": "external",
"summary": "SUSE Bug 1268053 for CVE-2026-52906",
"url": "https://bugzilla.suse.com/1268053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-52906"
},
{
"cve": "CVE-2026-52907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rockchip: rkcif: fix off by one bugs\n\nChange these comparisons from \u003e vs \u003e= to avoid accessing one element\nbeyond the end of the arrays.\nWhile at it, use ARRAY_SIZE instead of the _MAX enum values.\n\n[fix cosmetic issues]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52907",
"url": "https://www.suse.com/security/cve/CVE-2026-52907"
},
{
"category": "external",
"summary": "SUSE Bug 1268054 for CVE-2026-52907",
"url": "https://bugzilla.suse.com/1268054"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.0.12-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.0.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-52907"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…