{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "kernel-devel-7.2.6-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the kernel-devel-7.2.6-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11805",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11805-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80926 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80926/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80927 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80927/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80928 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80928/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80929 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80929/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80930 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80930/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80931 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80931/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80932 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80932/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80933 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80933/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80934 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80934/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80935 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80935/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80936 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80936/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80937 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80937/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80938 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80938/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80939 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80939/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80940 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80940/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80941 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80941/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80942 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80942/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80943 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80943/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80944 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80944/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80945 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80945/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80946 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80946/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80947 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80947/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80948 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80948/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80949 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80949/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80950 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80950/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80951 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80951/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80952 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80952/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80953 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80953/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80954 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80954/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80955 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80955/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80956 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80957 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80957/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80958 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80958/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80959 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80959/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80960 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80960/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80961 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80961/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80962 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80962/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80963 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80963/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80964 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80964/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80965 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80965/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80966 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80966/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80967 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80967/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80968 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80968/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80969 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80969/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80970 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80970/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80974 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80975 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80975/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80976 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80976/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80977 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80978 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80978/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80979 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80979/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80980 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80981 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80981/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80982 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80982/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80983 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80983/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80984 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80984/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80985 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80985/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80986 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80986/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80987 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80988 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80988/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80989 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80989/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80990 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80990/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80991 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80991/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80992 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80992/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80993 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80993/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80994 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80994/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80995 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80995/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80996 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80996/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80997 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80997/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80998 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80998/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-80999 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-80999/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81000 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81000/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81003 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81003/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81005 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81005/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81006 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81006/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81007 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81007/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81008 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81008/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81009 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81009/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81010 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81010/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81011 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81011/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81012 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81012/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81013 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81013/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81014 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81014/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81015 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81015/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81016 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81016/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81017 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81017/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-81018 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-81018/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89436 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89436/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89437 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89437/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89438 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89438/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89439 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89439/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89440 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89440/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89441 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89441/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89442 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89442/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89443 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89443/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89445 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89445/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89446 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89446/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89447 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89447/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89456 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89456/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89457 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89457/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89458 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89458/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89459 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89459/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89460 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89460/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89476 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89476/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89477 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89477/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89482 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89482/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89483 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89483/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89484 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89484/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89500 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89500/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89501 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89501/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89502 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89502/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89503 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89503/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89573 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89573/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89574 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89574/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89575 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89575/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89576 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89576/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89578 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89578/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89579 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89579/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89586 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89586/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89592 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89592/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89593 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89593/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89664 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89664/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89667 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89667/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89668 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89668/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89669 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89669/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89670 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89670/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89671 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89671/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89672 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89672/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89673 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89673/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89674 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89674/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89675 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89675/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89676 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89676/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89677 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89677/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89678 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89678/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89679 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89679/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89680 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89680/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89681 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89681/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89682 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89682/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89683 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89683/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89684 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89684/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89685 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89685/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89686 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89686/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89687 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89687/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89688 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89688/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89689 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89689/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89690 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89691 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89692 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89693 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89693/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89694 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89694/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89695 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89695/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89696 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89696/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-89697 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-89697/"
      }
    ],
    "title": "kernel-devel-7.2.6-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-18T09:18:22Z",
      "generator": {
        "date": "2026-09-17T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11805-1",
      "initial_release_date": "2026-09-17T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-09-17T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-18T09:18:22Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-0:7.2.6-1.1.aarch64",
                "product": {
                  "name": "kernel-devel-0:7.2.6-1.1.aarch64",
                  "product_id": "kernel-devel-0:7.2.6-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@7.2.6-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-0:7.2.6-1.1.aarch64",
                "product": {
                  "name": "kernel-macros-0:7.2.6-1.1.aarch64",
                  "product_id": "kernel-macros-0:7.2.6-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-macros@7.2.6-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-0:7.2.6-1.1.aarch64",
                "product": {
                  "name": "kernel-source-0:7.2.6-1.1.aarch64",
                  "product_id": "kernel-source-0:7.2.6-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source@7.2.6-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-0:7.2.6-1.1.aarch64",
                "product": {
                  "name": "kernel-source-vanilla-0:7.2.6-1.1.aarch64",
                  "product_id": "kernel-source-vanilla-0:7.2.6-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.6-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-0:7.2.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-devel-0:7.2.6-1.1.ppc64le",
                  "product_id": "kernel-devel-0:7.2.6-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@7.2.6-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-0:7.2.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-macros-0:7.2.6-1.1.ppc64le",
                  "product_id": "kernel-macros-0:7.2.6-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-macros@7.2.6-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-0:7.2.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-source-0:7.2.6-1.1.ppc64le",
                  "product_id": "kernel-source-0:7.2.6-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source@7.2.6-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
                "product": {
                  "name": "kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
                  "product_id": "kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.6-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-0:7.2.6-1.1.s390x",
                "product": {
                  "name": "kernel-devel-0:7.2.6-1.1.s390x",
                  "product_id": "kernel-devel-0:7.2.6-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@7.2.6-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-0:7.2.6-1.1.s390x",
                "product": {
                  "name": "kernel-macros-0:7.2.6-1.1.s390x",
                  "product_id": "kernel-macros-0:7.2.6-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-macros@7.2.6-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-0:7.2.6-1.1.s390x",
                "product": {
                  "name": "kernel-source-0:7.2.6-1.1.s390x",
                  "product_id": "kernel-source-0:7.2.6-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source@7.2.6-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-0:7.2.6-1.1.s390x",
                "product": {
                  "name": "kernel-source-vanilla-0:7.2.6-1.1.s390x",
                  "product_id": "kernel-source-vanilla-0:7.2.6-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.6-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-0:7.2.6-1.1.x86_64",
                "product": {
                  "name": "kernel-devel-0:7.2.6-1.1.x86_64",
                  "product_id": "kernel-devel-0:7.2.6-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@7.2.6-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-0:7.2.6-1.1.x86_64",
                "product": {
                  "name": "kernel-macros-0:7.2.6-1.1.x86_64",
                  "product_id": "kernel-macros-0:7.2.6-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-macros@7.2.6-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-0:7.2.6-1.1.x86_64",
                "product": {
                  "name": "kernel-source-0:7.2.6-1.1.x86_64",
                  "product_id": "kernel-source-0:7.2.6-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source@7.2.6-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-0:7.2.6-1.1.x86_64",
                "product": {
                  "name": "kernel-source-vanilla-0:7.2.6-1.1.x86_64",
                  "product_id": "kernel-source-vanilla-0:7.2.6-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:7.2.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.6-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.6-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:7.2.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64"
        },
        "product_reference": "kernel-devel-0:7.2.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:7.2.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le"
        },
        "product_reference": "kernel-devel-0:7.2.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:7.2.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x"
        },
        "product_reference": "kernel-devel-0:7.2.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:7.2.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64"
        },
        "product_reference": "kernel-devel-0:7.2.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-0:7.2.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64"
        },
        "product_reference": "kernel-macros-0:7.2.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-0:7.2.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le"
        },
        "product_reference": "kernel-macros-0:7.2.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-0:7.2.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x"
        },
        "product_reference": "kernel-macros-0:7.2.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-0:7.2.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64"
        },
        "product_reference": "kernel-macros-0:7.2.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:7.2.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64"
        },
        "product_reference": "kernel-source-0:7.2.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:7.2.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le"
        },
        "product_reference": "kernel-source-0:7.2.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:7.2.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x"
        },
        "product_reference": "kernel-source-0:7.2.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:7.2.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64"
        },
        "product_reference": "kernel-source-0:7.2.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-0:7.2.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64"
        },
        "product_reference": "kernel-source-vanilla-0:7.2.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-0:7.2.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le"
        },
        "product_reference": "kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-0:7.2.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x"
        },
        "product_reference": "kernel-source-vanilla-0:7.2.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-0:7.2.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        },
        "product_reference": "kernel-source-vanilla-0:7.2.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-80926",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80926"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix use-after-free in oplock break notification\n\nsmb2_oplock_break_noti() reads opinfo-\u003econn without any lock and\ndereferences it after two allocations which may sleep.  When the\ndurable handle owning the oplock is disconnected, session_fd_check()\nclears opinfo-\u003econn and drops its conn reference under ci-\u003em_lock, and\nthe last ksmbd_conn_put() frees the connection.  A break triggered by\nanother connection that races with the teardown can then resurrect the\nfreed connection: ksmbd_conn_get() is a plain atomic_inc, and the\nqueued break work later dereferences the stale conn via\nksmbd_conn_write(), a use-after-free reachable by any authenticated\nclient holding a durable batch oplock.\n\nThread the caller\u0027s inode into the notification path instead of taking\na new reference on it.  Every caller of oplock_break() already holds a\nlive ksmbd_file (or an explicit ksmbd_inode_lookup_lock() reference,\nin the parent lease break paths) on the inode that owns the break\ntarget\u0027s oplock list, so ci cannot be freed during the call, and its\nlock can be taken without dereferencing opinfo-\u003eo_fp, which a\nconcurrent close may free.  Select and pin the connection under\nci-\u003em_lock, the same lock session_fd_check() and\nksmbd_reopen_durable_fd() use to update opinfo-\u003econn, so a concurrent\ndetach either loses the race to the clear or keeps the connection\nalive until the notification work releases it.  Transfer the reference\nto the work item and release it on allocation failures.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80926",
          "url": "https://www.suse.com/security/cve/CVE-2026-80926"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280180 for CVE-2026-80926",
          "url": "https://bugzilla.suse.com/1280180"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80926"
    },
    {
      "cve": "CVE-2026-80927",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80927"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntimekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()\n\nIf the auxiliary clock is disabled during tk_get_aux_ts64() but is enabled\nbefore tks-\u003eclock_valid is checked, then uninitialized stackdata will be\nused in the calculations and indirectly leaked to userspace.\n\nThe same race window also exists after this change and also for the core\ntimekeeper. But in these cases the only effect would be incorrect\nadjustments and this is userspace\u0027s responsibility to avoid this.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80927",
          "url": "https://www.suse.com/security/cve/CVE-2026-80927"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280134 for CVE-2026-80927",
          "url": "https://bugzilla.suse.com/1280134"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-80927"
    },
    {
      "cve": "CVE-2026-80928",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80928"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmack: fix cred UAF in smack_file_send_sigiotask()\n\nWhen inspecting the credentials of another task, objective credentials\n(-\u003ereal_cred, accessed with __task_cred()) must always be used.\n\nAccessing -\u003ecred on a non-current task is forbidden unless that task is\nbeing created or destroyed; a task is allowed to change its own -\u003ecred\npointer with no synchronization, and changing -\u003ecred should only affect the\ncurrent syscall.\n\nsmack_file_send_sigiotask() was accessing both sets of credentials: First\ntsk-\u003ecred, then __task_cred(tsk).\n\nFix it, always access the objective credentials here.\n\nI have tested that this bug can lead to a KASAN-reported UAF of struct cred\nin smack_file_send_sigiotask(), and that this fix prevents the race.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80928",
          "url": "https://www.suse.com/security/cve/CVE-2026-80928"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280137 for CVE-2026-80928",
          "url": "https://bugzilla.suse.com/1280137"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280138 for CVE-2026-80928",
          "url": "https://bugzilla.suse.com/1280138"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80928"
    },
    {
      "cve": "CVE-2026-80929",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80929"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: move the \"cad_pid\" entry from pid_table[] to kern_reboot_table[]\n\ncad_pid is global, and kill_cad_pid() is only used in the root namespace.\n\nHowever, due to pid_table_root_permissions(), a non-root user can unshare\npid/user namespaces and modify it from the child namespace. This makes no\nsense and is simply wrong.\n\nMove it to kern_reboot_table[] where it logically belongs; this ensures\nthat only GLOBAL_ROOT_UID can read/modify this sysctl.\n\nNote that this patch doesn\u0027t preserve \"#ifdef CONFIG_PROC_SYSCTL\" around\nthe \"cad_pid\"; CONFIG_PROC_SYSCTL selects CONFIG_SYSCTL, so it is always\nset when kern_reboot_table[] is compiled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80929",
          "url": "https://www.suse.com/security/cve/CVE-2026-80929"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280140 for CVE-2026-80929",
          "url": "https://bugzilla.suse.com/1280140"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80929"
    },
    {
      "cve": "CVE-2026-80930",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80930"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_i2c_nuvoton: disable IRQ on wait timeout\n\ni2c_nuvoton_wait_for_stat() enables the IRQ before waiting for the\ninterrupt handler to report a status change. If the wait times out, or is\ninterrupted before the handler runs, the function returns without\nbalancing the enable_irq() call.\n\nDisable the IRQ before leaving the failed wait path. Also preserve an\ninterrupted wait\u0027s original error code instead of converting it to\n-ETIMEDOUT inside the helper.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80930",
          "url": "https://www.suse.com/security/cve/CVE-2026-80930"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280141 for CVE-2026-80930",
          "url": "https://bugzilla.suse.com/1280141"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80930"
    },
    {
      "cve": "CVE-2026-80931",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80931"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nw1: ds28e17: reject an oversize length on an I2C block read\n\nw1_f19_i2c_master_transfer() is the master_xfer for the DS28E17 1-Wire\nto I2C bridge. On an I2C_M_RECV_LEN read, it takes the length from the\ndevice. The downstream slave puts a length byte in buf[0]. The driver\nthen reads that many bytes into buf[1] with w1_f19_i2c_read().\n\nbuf[0] is controlled by the device and can be 0 to 255.\nw1_f19_i2c_read() only rejects a zero count. The caller buffer is\nI2C_SMBUS_BLOCK_MAX + 2, so 34 bytes. A length above 32 makes the read\nrun past it, up to about 222 bytes out of bounds.\n\nThe SMBus core does check buf[0] against I2C_SMBUS_BLOCK_MAX. That\ncheck runs after master_xfer returns. By then the write is already\ndone. i2c-algo-bit rejects an oversize length before it copies, and\nreturns -EPROTO.\n\nReject a length above I2C_SMBUS_BLOCK_MAX at both RECV_LEN sites, the\nsame way i2c-algo-bit does.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80931",
          "url": "https://www.suse.com/security/cve/CVE-2026-80931"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280142 for CVE-2026-80931",
          "url": "https://bugzilla.suse.com/1280142"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80931"
    },
    {
      "cve": "CVE-2026-80932",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80932"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: flush works in dependency order\n\nvirtio_vsock_remove() stops the virtqueues and then flushes each work\nitem before freeing the enclosing virtio_vsock.  The current order does\nnot account for dependencies between those items: tx_work may queue\nsend_pkt_work, and send_pkt_work may queue rx_work.\n\nIn particular, send_pkt_work can set restart_rx and release tx_lock.\nThe remove path can then stop the queues and flush rx_work before\nsend_pkt_work queues it.  Although the later send_pkt_work flush waits\nfor that producer to finish, nothing waits for the newly queued rx_work,\nso kfree(vsock) can race with it.\n\nKASAN reported:\n\n  BUG: KASAN: slab-use-after-free in\n  virtio_transport_rx_work+0x487/0x4b0\n  Read of size 8 at addr ffff888114c2b008 by task kworker/1:1/47\n  Workqueue: virtio_vsock virtio_transport_rx_work\n  Call Trace:\n   virtio_transport_rx_work+0x487/0x4b0\n   process_one_work+0x688/0x1120\n   worker_thread+0x45b/0xd10\n  Allocated by task 1:\n   virtio_vsock_probe+0xef/0x6b0\n  Freed by task 84:\n   kfree+0x131/0x3c0\n   virtio_vsock_remove+0xd1/0x100\n\nFlush the works in producer-to-consumer order.  virtio_vsock_vqs_del()\nhas already disabled the queue callbacks and cleared the run flags, so\nafter tx_work and send_pkt_work are drained, no source remains that can\nqueue rx_work after its flush.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80932",
          "url": "https://www.suse.com/security/cve/CVE-2026-80932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280143 for CVE-2026-80932",
          "url": "https://bugzilla.suse.com/1280143"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80932"
    },
    {
      "cve": "CVE-2026-80933",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80933"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7996: validate default EEPROM firmware size\n\nThe default EEPROM firmware is parsed and copied as a full EEPROM\nwithout checking its length. A truncated file can make the driver\nread beyond the firmware buffer during variant validation or the\nfallback copy.\n\nReject files shorter than MT7996_EEPROM_SIZE before parsing or\ncopying the firmware.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80933",
          "url": "https://www.suse.com/security/cve/CVE-2026-80933"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280144 for CVE-2026-80933",
          "url": "https://bugzilla.suse.com/1280144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-80933"
    },
    {
      "cve": "CVE-2026-80934",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80934"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames\n\nmt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames\n(MT_TXD7_MAC_TXD, set in mt7996_mac_write_txwi_80211()), but are otherwise\nFW-TXP devices. On tx free mt76_connac_txp_skb_unmap() therefore decodes\nthe per-frame txp as a struct mt76_connac_fw_txp. For a MAC-TXP the\nfw_txp.nbuf byte aliases the AddBA TID word (MT_TXP1_TID_ADDBA), which is\nalways zero, so the unmap loop runs zero times and the skb DMA mapping in\nbuf[1] is never unmapped. buf[1].skip_unmap is set unconditionally, so the\ngeneric DMA-ring cleanup skips it as well.\n\nEach AddBA req therefore leaks one TX DMA mapping, roughly one per\n(re)association. With WED enabled these mappings are bounced through the\nWED swiotlb pool, so under continuous client reconnect churn the pool is\nexhausted after ~1-2 days, after which DMA mapping fails for WED, the WiFi\nMCU and other on-SoC consumers.\n\nKeep the deferred (token release) unmap that the design relies on, and add\nan mt7996-specific txp unmap that inspects MT_TXD7_MAC_TXD and unmaps\nbuf[1] from the MAC-TXP layout for those frames, delegating to\nmt76_connac_txp_skb_unmap() otherwise.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80934",
          "url": "https://www.suse.com/security/cve/CVE-2026-80934"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280147 for CVE-2026-80934",
          "url": "https://bugzilla.suse.com/1280147"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80934"
    },
    {
      "cve": "CVE-2026-80935",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80935"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy\n\nmt7996_mcu_get_eeprom() derives the destination of the EFUSE/EXT block\ncopy from the address reported by the MCU response (event-\u003eaddr, a\ndevice-controlled __le32) and clamps only the copy length, never the\ndestination offset into dev-\u003emt76.eeprom.data. A malicious or\nmalfunctioning device can report an arbitrary address and drive an\nout-of-bounds write of up to MT7996_EXT_EEPROM_BLOCK_SIZE bytes past\neeprom.data.\n\nReject a response whose address would place the copy outside eeprom.data\nbefore deriving the destination pointer. Devices that echo the requested\nin-bounds offset are unaffected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80935",
          "url": "https://www.suse.com/security/cve/CVE-2026-80935"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280149 for CVE-2026-80935",
          "url": "https://bugzilla.suse.com/1280149"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80935"
    },
    {
      "cve": "CVE-2026-80936",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80936"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7925: cancel mlo_pm_work on stop\n\nmt7925 queues mlo_pm_work with a 5 second delay during multi-link\npower-save setup and never cancels it on the stop path. If the device is\ntorn down inside that window, the work outlives the teardown and its timer\nfires afterwards, trying to queue onto the workqueue that is already gone:\n\n  workqueue: cannot queue mt7925_mlo_pm_work [mt7925_common] on wq phy0\n  WARNING: kernel/workqueue.c:2283 at __queue_work+0x59/0xa0, CPU#1: swapper/1/0\n   call_timer_fn+0x2a/0x140\n   __run_timers+0x203/0x330\n   run_timer_softirq+0x86/0xf0\n\nmt7921 already has its own stop callback, so add one for mt7925 that\ncancels the work before calling mt792x_stop(). mt7925_ops backs both the\nPCIe and USB drivers, so this covers both.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80936",
          "url": "https://www.suse.com/security/cve/CVE-2026-80936"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280154 for CVE-2026-80936",
          "url": "https://bugzilla.suse.com/1280154"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80936"
    },
    {
      "cve": "CVE-2026-80937",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80937"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy\n\nmt7915_mcu_get_eeprom() copies a fixed EFUSE block into the driver\u0027s\ndev-\u003emt76.eeprom.data buffer at the offset reported by the MCU response\n(res-\u003eaddr, a device-controlled __le32) without checking it against the\nbuffer size. A malicious or malfunctioning device can report an arbitrary\naddress and drive a 16-byte out-of-bounds write past eeprom.data.\n\nReject a response whose address would place the copy outside eeprom.data\nbefore deriving the destination pointer. Devices that echo the requested\nin-bounds offset are unaffected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80937",
          "url": "https://www.suse.com/security/cve/CVE-2026-80937"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280156 for CVE-2026-80937",
          "url": "https://bugzilla.suse.com/1280156"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80937"
    },
    {
      "cve": "CVE-2026-80938",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80938"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex\n\nmt7615_suspend() acquired the mt76 mutex and then called\ncancel_delayed_work_sync() on mac_work.  mt7615_mac_work() acquires the\nsame mutex via mt7615_mutex_acquire() at the top of the worker, so if\nmac_work is already running and blocked on the mutex, the suspend path\ndeadlocks waiting for the work it holds the mutex against.\n\nFlush scan_work and mac_work before taking the mutex, matching the\nsuspend paths in mt7921 and mt7925.  scan_work only takes the mt76\nspinlock, but moving it keeps the sequence consistent.  This also keeps\nmac_work from running over an already suspended HIF, which the previous\nsplit (async cancel under the lock, sync cancel after release) would\nhave allowed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80938",
          "url": "https://www.suse.com/security/cve/CVE-2026-80938"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280157 for CVE-2026-80938",
          "url": "https://bugzilla.suse.com/1280157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80938"
    },
    {
      "cve": "CVE-2026-80939",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80939"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot\n\nSince the hardware rfkill polling was introduced, arm64 platforms can\npanic with an asynchronous SError during warm reboot:\n\n  SError Interrupt on CPU8, code 0x00000000be000011 -- SError\n  Workqueue: events_power_efficient rfkill_poll [rfkill]\n    rtw89_pci_ops_read8+0x94/0x160 [rtw89_pci]\n    rtw89_core_rfkill_poll+0x50/0x1e0 [rtw89_core]\n    rtw89_ops_rfkill_poll+0x40/0x68 [rtw89_core]\n    ieee80211_rfkill_poll+0x3c/0x70 [mac80211]\n    cfg80211_rfkill_poll+0x40/0x2a0 [cfg80211]\n    rfkill_poll+0x30/0x88 [rfkill]\n  Kernel panic - not syncing: Asynchronous SError Interrupt\n\nOn the reboot path the kernel only runs device_shutdown(), which calls\neach driver\u0027s .shutdown callback; .remove is not invoked.  The rtw89 PCI\ndriver had no .shutdown callback, so nothing stopped the rfkill polling\nwork while the platform was tearing the PCIe link down.  Once the link\nis gone, the next MMIO read from the poll handler targets a\nnon-responding device and is reported as a fatal asynchronous SError on\narm64.\n\nAdd rtw89_pci_shutdown(), wired to all rtw89 PCI device drivers, which\nsets a new RTW89_FLAG_SHUTDOWN flag (mirroring the USB\nRTW89_FLAG_UNPLUGGED pattern).  When the flag is set,\nrtw89_ops_rfkill_poll() returns early, so no MMIO read is issued to the\nchip after shutdown begins and the SError no longer occurs.\n\nThis does not call the full .remove path from .shutdown, to keep the\nshutdown handler minimal and avoid running the non-idempotent teardown\ntwice.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80939",
          "url": "https://www.suse.com/security/cve/CVE-2026-80939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280160 for CVE-2026-80939",
          "url": "https://bugzilla.suse.com/1280160"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80939"
    },
    {
      "cve": "CVE-2026-80940",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80940"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: pci: fix resource leak on failed NAPI setup\n\nrtw_pci_probe() allocates PCI resources through\nrtw_pci_setup_resource() before it sets up NAPI. If\nrtw_pci_napi_init() fails, the error path jumps straight to\nerr_pci_declaim and skips rtw_pci_destroy(), leaving the PCI\nresources allocated by rtw_pci_setup_resource() behind.\n\nAdd a dedicated cleanup label for the NAPI setup failure path so probe\ndestroys the PCI resources.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing current\nmainline kernels. The tool is still under development and is not yet\npublicly available. Manual inspection confirms that the bug is still\npresent in v7.1-rc7.\n\nAn x86_64 allyesconfig build showed no new warnings. As we do not have a\nsuitable rtw88 PCI board to test with, no runtime testing was able to be\nperformed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80940",
          "url": "https://www.suse.com/security/cve/CVE-2026-80940"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280161 for CVE-2026-80940",
          "url": "https://bugzilla.suse.com/1280161"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80940"
    },
    {
      "cve": "CVE-2026-80941",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80941"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()\n\nThe skb passed to the rtw_hci_tx_write() is expected to be freed when\nthe function fails, but the error path in rtw_txq_push_skb() does not\nfree the skb before returning. This can lead to a memory leak in\nrtw_txq_push() where a dequeued skb is passed to rtw_txq_push_skb().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80941",
          "url": "https://www.suse.com/security/cve/CVE-2026-80941"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280162 for CVE-2026-80941",
          "url": "https://bugzilla.suse.com/1280162"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80941"
    },
    {
      "cve": "CVE-2026-80942",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80942"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()\n\nThe memory allocated inside rtl92du_init_shared_data() is not freed in\nany of the subsequent error paths in rtl92du_init_sw_vars().\nFix that by adding a call to rtl92du_deinit_shared_data() in the error\npath.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80942",
          "url": "https://www.suse.com/security/cve/CVE-2026-80942"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280182 for CVE-2026-80942",
          "url": "https://bugzilla.suse.com/1280182"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80942"
    },
    {
      "cve": "CVE-2026-80943",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80943"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: rtl8192du: check QoS TID before indexing tids\n\nrtl92du_tx_fill_desc() uses ieee80211_get_tid() to read the QoS TID\nfrom the 802.11 header and then uses it as an index into\nsta_entry-\u003etids[]. ieee80211_get_tid() returns the low 4-bit QoS TID\nvalue, so the result can be in the range 0..15.\n\nrtlwifi only allocates MAX_TID_COUNT entries for sta_entry-\u003etids[], and\nMAX_TID_COUNT is 9. A QoS TID greater than 8 therefore indexes past the\naggregation state array. Keep the default RTL_AGG_STOP state for\nout-of-range TIDs, matching rtl92cu_tx_fill_desc().\n\nThis issue was detected by our static analysis tool and confirmed by\nmanual audit. UBSAN validation for the same bug pattern reports an\narray-index-out-of-bounds access with index 10 for type\n\u0027rtl_tid_data [9]\u0027.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80943",
          "url": "https://www.suse.com/security/cve/CVE-2026-80943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280183 for CVE-2026-80943",
          "url": "https://bugzilla.suse.com/1280183"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80943"
    },
    {
      "cve": "CVE-2026-80944",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80944"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Detach sync cmd buffer on interrupted wait\n\nmwifiex synchronous commands keep the caller-provided data buffer in\ncmd_node-\u003edata_buf. Several callers pass stack-allocated objects there.\n\nIf wait_event_interruptible_timeout() is interrupted, the caller can\nreturn and release that stack object while the firmware command is still\nthe current command. A late firmware response then reaches the normal\nresponse handler, which can copy data through cmd_node-\u003edata_buf into the\nstale stack address.\n\nThis fixes a stack corruption observed during repeated association and\ndisassociation cycles. The panic trace showed the command wait being\ninterrupted immediately before a bad pointer dereference:\n\n  cmd_wait_q terminated: -512\n  Unable to handle kernel paging request at virtual address 002c583837384662\n  Kernel panic - not syncing: stack-protector: Kernel stack is corrupted\n  ...\n  Tainted: [M]=MACHINE_CHECK\n\nThe fault address decodes as little-endian ASCII:\n\n  0x002c583837384662 -\u003e \"bF878X,\\0\"\n\nwhich is a fragment of the VERSION_EXT firmware string exposed as\ndebugfs \"verext\":\n\n  w8997o-V4, RF878X, FP92, 16.92.21.p153.7\n\nThe same runs also showed corrupted control data containing:\n\n  0x2400372e333531 -\u003e \"153.7\\0$\"\n\nwhich is the tail of the same VERSION_EXT string. This points at a late\nVERSION_EXT response writing through a stale stack-backed data_buf after\nthe interrupted wait returned.\n\nAfter cancelling pending commands on an interrupted or timed-out wait,\ndetach the caller-owned data buffer from the still-current command. This\npreserves the existing command cancellation behaviour while preventing a\nlate response from writing through a pointer whose lifetime ended with the\nwaiting caller.\n\nTested on an i.MX8MP board using an 88W8997.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80944",
          "url": "https://www.suse.com/security/cve/CVE-2026-80944"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280215 for CVE-2026-80944",
          "url": "https://bugzilla.suse.com/1280215"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80944"
    },
    {
      "cve": "CVE-2026-80945",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80945"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - unmap dst before software fallback on decompress\n\nOn a hardware analytics error, decompress retries through the software\nfallback, which writes req-\u003edst with the CPU while it is still mapped\nDMA_FROM_DEVICE. With SWIOTLB active the later dma_unmap_sg() copies the\nstale bounce buffer over req-\u003edst, corrupting the result.\n\nUnmap before the fallback runs. The async path unmaps inline; the sync\npath signals the retry with -EAGAIN so iaa_comp_adecompress() runs the\nfallback after unmapping.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80945",
          "url": "https://www.suse.com/security/cve/CVE-2026-80945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280238 for CVE-2026-80945",
          "url": "https://bugzilla.suse.com/1280238"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80945"
    },
    {
      "cve": "CVE-2026-80946",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80946"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: copy request headers via a stack buffer for io-uring\n\nThe fuse-io-uring transport copies req-\u003ein.h out to the ring in\nfuse_uring_copy_to_ring() and req-\u003eout.h back in fuse_uring_commit().\nBoth headers live inside the fuse_request slab object, whose cache\n(fuse_req_cachep) is created without a usercopy whitelist, so copying\nthem directly to/from userspace trips CONFIG_HARDENED_USERCOPY and\npanics:\n\n  usercopy: Kernel memory exposure attempt detected from SLUB object\n  \u0027fuse_request\u0027 (offset 56, size 40)!\n  kernel BUG at mm/usercopy.c:102!\n  Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\n  RIP: 0010:usercopy_abort (mm/usercopy.c:90)\n  Call Trace:\n   __check_heap_object (mm/slub.c:8268)\n   __check_object_size (mm/usercopy.c:197 mm/usercopy.c:258 mm/usercopy.c:223)\n   copy_header_to_ring (fs/fuse/dev_uring.c:618)\n   fuse_uring_prepare_send (fs/fuse/dev_uring.c:776 fs/fuse/dev_uring.c:785)\n   fuse_uring_send_in_task (fs/fuse/dev_uring.c:1306)\n   tctx_task_work_run (io_uring/tw.c:96)\n   task_work_run (kernel/task_work.c:233)\n   io_run_task_work (io_uring/tw.h:84)\n   io_cqring_wait (io_uring/wait.c:278)\n   __do_sys_io_uring_enter (io_uring/io_uring.c:2685)\n   entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n\nBounce both headers through an on-stack copy so the usercopy touches\nstack memory, not the slab object.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80946",
          "url": "https://www.suse.com/security/cve/CVE-2026-80946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280241 for CVE-2026-80946",
          "url": "https://bugzilla.suse.com/1280241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80946"
    },
    {
      "cve": "CVE-2026-80947",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80947"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop\n\nrtl8xxxu arms rx_urb_wq from the RX completion path:\nrtl8xxxu_rx_complete() hands the URB to rtl8xxxu_queue_rx_urb(), which\nqueues it on rx_urb_pending_list and, once the list grows past\nRTL8XXXU_RX_URB_PENDING_WATER, schedules rx_urb_wq.  The worker\nrtl8xxxu_rx_urb_work() drains rx_urb_pending_list, recovers priv through\ncontainer_of, and resubmits each URB through rtl8xxxu_submit_rx_urb(),\nwhich anchors it on rx_anchor and dereferences priv-\u003eudev.\n\nrtl8xxxu_stop() cancels the sibling work items (c2hcmd_work, ra_watchdog,\nupdate_beacon_work) but never cancels rx_urb_wq, so a worker armed during\nthe last burst of RX traffic can run rtl8xxxu_rx_urb_work() after\nrtl8xxxu_disconnect() has called ieee80211_free_hw(), which frees priv,\nproducing a use-after-free.  The window opens under active RX traffic\n(pending count above the watermark) followed by a disconnect.\n\nThere are two teardown races to close:\n\n  * rtl8xxxu_queue_rx_urb() decided whether to enqueue under rx_urb_lock\n    but called schedule_work() after dropping the lock.  A completion\n    that observed shutdown == false and released the lock could then call\n    schedule_work() after rtl8xxxu_stop() had set shutdown and\n    cancel_work_sync() had already returned, arming the worker to run\n    after the teardown.  Move schedule_work() under the same !shutdown\n    branch so the arming decision is atomic with the shutdown check.\n\n  * rtl8xxxu_rx_urb_work() anchors every URB it drained back onto\n    rx_anchor through rtl8xxxu_submit_rx_urb().  A worker still running\n    when usb_kill_anchored_urbs(\u0026priv-\u003erx_anchor) returned would submit a\n    URB that escaped the kill.  In rtl8xxxu_stop(), call\n    cancel_work_sync(\u0026priv-\u003erx_urb_wq) before the kill so the worker is\n    drained first.\n\nAfter priv-\u003eshutdown is set under rx_urb_lock, completions can no longer\nqueue rx_urb_wq. cancel_work_sync() then drains the last queued or running\nworker, and the following usb_kill_anchored_urbs() kills the URBs it may\nhave submitted.\n\nrtl8xxxu_disconnect() is covered because ieee80211_unregister_hw()\nguarantees .stop() runs for a live interface before ieee80211_free_hw()\nfrees priv.  The probe error path needs no cancel: rx_urb_wq is\nINIT_WORK()\u0027d there but cannot have been scheduled, since no URB is\nsubmitted before ieee80211_register_hw() succeeds.\n\nThis bug was found by static analysis.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80947",
          "url": "https://www.suse.com/security/cve/CVE-2026-80947"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280239 for CVE-2026-80947",
          "url": "https://bugzilla.suse.com/1280239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280240 for CVE-2026-80947",
          "url": "https://bugzilla.suse.com/1280240"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80947"
    },
    {
      "cve": "CVE-2026-80948",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80948"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()\n\nIn iwl_op_mode_dvm_start(), jumping to out_free_eeprom currently bypasses\nthe out_free_eeprom_blob label. Consequently, error paths triggered after\nsuccessfully parsing the EEPROM free priv-\u003envm_data but leak\npriv-\u003eeeprom_blob.\n\nFix this memory leak by reordering the error handling labels so\nthat out_free_eeprom falls through to out_free_eeprom_blob.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing\nv6.13-rc1. The tool is still under development and is not yet publicly\navailable. Manual inspection confirms that the bug is still\npresent in v7.1-rc6.\n\nAn x86_64 allyesconfig build showed no new warnings. As we do not have\nsupported Intel DVM wireless hardware and firmware to test with, no\nruntime testing was able to be performed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80948",
          "url": "https://www.suse.com/security/cve/CVE-2026-80948"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280242 for CVE-2026-80948",
          "url": "https://bugzilla.suse.com/1280242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80948"
    },
    {
      "cve": "CVE-2026-80949",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80949"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()\n\nThe memory allocated for buf is not freed in some of the error paths in\nbrcmf_sdio_read_control(). Fix that by adding vfree() calls.\n\n[arend: rework as suggested by Johannes]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80949",
          "url": "https://www.suse.com/security/cve/CVE-2026-80949"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280244 for CVE-2026-80949",
          "url": "https://bugzilla.suse.com/1280244"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80949"
    },
    {
      "cve": "CVE-2026-80950",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80950"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: renesas: Check that the transfer is valid before accessing it\n\nThe Renesas I3C driver uses an asynchronous model to transfer data. It\nprepares a struct renesas_i3c_xfer, enqueues it, and waits for completion.\nThe interrupt handler dequeues the transfer, updates/uses it, and signals\nthe waiting thread.\n\nIf the completion times out, the waiting thread dequeues the transfer and\nfree it. If an interrupt fires after that, the handler may access freed\nmemory, leading to crashes.\n\nCheck that the transfer is still valid before accessing it in the\ninterrupt handler. With it clear any status flags and disable all\nthe interrupts to avoid triggering the same interrupts again.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80950",
          "url": "https://www.suse.com/security/cve/CVE-2026-80950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280245 for CVE-2026-80950",
          "url": "https://bugzilla.suse.com/1280245"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80950"
    },
    {
      "cve": "CVE-2026-80951",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80951"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: svc: bound IBI payload to the requested max_payload_len\n\nsvc_i3c_master_handle_ibi() reads the IBI payload from the RX FIFO into\nthe IBI slot. The loop is bounded by the hardware FIFO size\n(SVC_I3C_FIFO_SIZE), not by the slot size.\n\nslot-\u003edata points into the IBI pool, which i3c_generic_ibi_alloc_pool()\nsizes at max_payload_len per slot. svc_i3c_master_request_ibi() only\nrejects a max_payload_len larger than SVC_I3C_FIFO_SIZE, so a driver can\nrequest a smaller one. mctp-i3c requests 1. Each readsb() then copies the\ncontroller RXCOUNT bytes (up to 31) with no check against the slot size.\nA device that sends more bytes than the slot holds writes past\nslot-\u003edata, an out-of-bounds write into the IBI pool.\n\nBound the loop by dev-\u003eibi-\u003emax_payload_len and clamp each read to the\nspace left in the slot, the same way dw-i3c does. A device can still send\nmore than the requested payload. Flush the leftover bytes from the RX FIFO\nso they do not leak into the next transfer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80951",
          "url": "https://www.suse.com/security/cve/CVE-2026-80951"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280246 for CVE-2026-80951",
          "url": "https://bugzilla.suse.com/1280246"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80951"
    },
    {
      "cve": "CVE-2026-80952",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80952"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: Fix info leak and UAF in device unregister path\n\ni3c_master_unregister_i3c_devs() clears i3cdev-\u003edev-\u003edesc before\ncalling device_unregister().  During device_unregister(),\ndevice_del() emits a KOBJ_REMOVE uevent and unbinds the driver while\nthe device descriptor is still expected to be valid.  As a result,\ni3c_device_uevent() and a racing modalias_show() can observe a NULL\ndesc and fall back to an uninitialized stack struct i3c_device_info,\nleaking kernel stack contents in the generated modalias.  Driver\n.remove() callbacks may also encounter an unexpected NULL desc during\nunbind.\n\nKeep desc valid until device_unregister() has completed.  Since\ndevice_unregister() drops the device reference and may free the device,\ntake an extra reference with get_device() before unregistering.  Clear\ndesc afterwards and release the extra reference with put_device().\nThis preserves the release-time invariant that desc must be NULL while\navoiding both the information leak and a potential use-after-free from\nwriting desc after the device has been released.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80952",
          "url": "https://www.suse.com/security/cve/CVE-2026-80952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280247 for CVE-2026-80952",
          "url": "https://bugzilla.suse.com/1280247"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80952"
    },
    {
      "cve": "CVE-2026-80953",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80953"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: adi: initialize the lock before enabling interrupts\n\nadi_i3c_master_probe() requests the IRQ and unmasks REG_IRQ_PENDING_CMDR\nbefore the controller\u0027s IBI state, transfer queue list and transfer\nqueue lock are initialized.  A pending CMDR interrupt can therefore run\nadi_i3c_master_irq() and take master-\u003exferqueue.lock before the dynamic\nlock has been initialized.\n\nThis issue was found by our static analysis tool and then manually\nreviewed against the current tree.\n\nThe grounded PoC kept the probe ordering and the IRQ path\nadi_i3c_master_probe() -\u003e adi_i3c_master_irq() -\u003e xferqueue.lock, with a\npending CMDR interrupt arriving after REG_IRQ_PENDING_CMDR is unmasked.\nLockdep reported:\n\n  INFO: trying to register non-static key.\n  you didn\u0027t initialize this object before use?\n  lock_acquire+0xbb/0x290\n  _raw_spin_lock_irqsave+0x36/0x60\n  adi_i3c_master_irq+0x32/0x56 [vuln_msv]\n  adi_i3c_master_probe+0x5a/0xf47 [vuln_msv]\n\nInitialize the transfer queue and IBI state before requesting and\nunmasking the IRQ.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80953",
          "url": "https://www.suse.com/security/cve/CVE-2026-80953"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280248 for CVE-2026-80953",
          "url": "https://bugzilla.suse.com/1280248"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80953"
    },
    {
      "cve": "CVE-2026-80954",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80954"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: Fix unlocked dereference of dev-\u003edesc in i3c_device_get_supported_xfer_mode()\n\ni3c_device_get_supported_xfer_mode() uses dev-\u003edesc to obtain the\nmaster controller.  However, dev-\u003edesc must not be dereferenced unless\nbus-\u003elock is held, and this function does not take that lock.\n\nThe function only needs access to the master controller associated with\nthe device\u0027s bus.  Use dev-\u003ebus instead, which is always valid for the\nlifetime of the device and does not require dereferencing dev-\u003edesc.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80954",
          "url": "https://www.suse.com/security/cve/CVE-2026-80954"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280249 for CVE-2026-80954",
          "url": "https://bugzilla.suse.com/1280249"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80954"
    },
    {
      "cve": "CVE-2026-80955",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80955"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: fix use-after-free and invalid seg operations in kset_replay()\n\nIn kset_replay, when key-\u003eseg_gen is stale (key-\u003eseg_gen \u003c\nkey-\u003ecache_pos.cache_seg-\u003egen), cache_key_put(key) is called but then\nkey-\u003ecache_pos.cache_seg is accessed as the argument to cache_seg_get().\nThis is a use-after-free on the freed key memory. Although mempool\nrecycled memory is not immediately reclaimed or overwritten in practice,\nthis is still a potential UAF bug.\n\nAdditionally, for expired invalid keys, setting the cache-\u003eseg_map bit\nand calling cache_seg_get() is unreasonable since the corresponding\nsegment data is no longer valid.\n\nFix both issues by moving cache_seg_get() and __set_bit() after the\ngen check, so they only execute for valid keys, and using continue to\nskip invalid keys.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80955",
          "url": "https://www.suse.com/security/cve/CVE-2026-80955"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280284 for CVE-2026-80955",
          "url": "https://bugzilla.suse.com/1280284"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80955"
    },
    {
      "cve": "CVE-2026-80956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: only hand out initialized cache segments\n\nget_cache_segment() scans the segment map up to cache-\u003en_segs, the\nphysical device segment count, but cache_segs_init() only initializes\nthe first cache_info-\u003en_segs segments. A crafted image with\ncache_info-\u003en_segs smaller than the device count leaves the remaining\npcache_cache_segment structs zeroed (segment.data == NULL), and the\nallocator can hand one to cache_kset_close(), which writes through the\nreturned segment\u0027s data pointer with no NULL check.\n\nBound the allocator\u0027s search to cache_info-\u003en_segs so only initialized\nsegments are ever returned. A conforming cache sets n_segs equal to the\ndevice segment count, so this rejects nothing legitimate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80956",
          "url": "https://www.suse.com/security/cve/CVE-2026-80956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280288 for CVE-2026-80956",
          "url": "https://bugzilla.suse.com/1280288"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80956"
    },
    {
      "cve": "CVE-2026-80957",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80957"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: detect a cycle in the last-kset chain during replay\n\ncache_replay() follows the on-media last-kset chain by next_cache_seg_id\nwith no cond_resched(). A forged chain that points back into a segment it\nhas already visited makes the replay loop follow it forever.\n\nCap the last-kset hops at cache-\u003en_segs; a valid chain visits each segment\nat most once.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80957",
          "url": "https://www.suse.com/security/cve/CVE-2026-80957"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280290 for CVE-2026-80957",
          "url": "https://bugzilla.suse.com/1280290"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80957"
    },
    {
      "cve": "CVE-2026-80958",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80958"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: clamp the tail kset read to the segment data region\n\nThe tail-kset read in cache_replay(), the writeback worker and the GC\nworker bounds its length by PCACHE_SEG_SIZE - seg_off, the raw segment\nsize rather than the data region. A tail near the segment end reads past\nthe segment data into the following control area.\n\nClamp the read to cache_seg_remain(), the data region.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80958",
          "url": "https://www.suse.com/security/cve/CVE-2026-80958"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280254 for CVE-2026-80958",
          "url": "https://bugzilla.suse.com/1280254"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80958"
    },
    {
      "cve": "CVE-2026-80959",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80959"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: bound the persisted tail-position offset\n\ncache_pos_decode() takes the persisted key_tail and dirty_tail seg_off from\nthe cache device and addresses within the segment with it. A seg_off at or\npast the segment data_size, controllable by whoever supplies the device\n(CAP_SYS_ADMIN), reads past the segment data.\n\nReject a decoded seg_off that is not below the segment data_size.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80959",
          "url": "https://www.suse.com/security/cve/CVE-2026-80959"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280291 for CVE-2026-80959",
          "url": "https://bugzilla.suse.com/1280291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80959"
    },
    {
      "cve": "CVE-2026-80960",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80960"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: validate on-media seg_num against the cache device size\n\nseg_num is read from the crc32c-only superblock, so whoever supplies the\ncache device on a table load (CAP_SYS_ADMIN) controls it. It sizes\ncache-\u003esegments[] and is the value every later on-media segment id is\nbounded against, yet it is never checked against the device. Because\ncache_dev-\u003emapping is the direct map of the pmem, CACHE_DEV_SEGMENT() for\na segment id past the device resolves to ordinary kernel memory beyond\nthe mapping; a new-cache init reaching such an id has cache_seg_init() -\u003e\ncache_dev_zero_range() memset() 12 KiB over that memory -- an\nout-of-bounds write into the kernel heap at table load. A zero seg_num\nmakes the segment allocations ZERO_SIZE_PTR.\n\nReject a seg_num that is zero, larger than the device can hold, or larger\nthan PCACHE_CACHE_SEGS_MAX before it is used.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80960",
          "url": "https://www.suse.com/security/cve/CVE-2026-80960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280256 for CVE-2026-80960",
          "url": "https://bugzilla.suse.com/1280256"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80960"
    },
    {
      "cve": "CVE-2026-80961",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80961"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: validate kset key_num and intra-segment bounds\n\nTwo more fields decoded from the cache device go unbounded. The kset\nkey_num drives cache_kset_crc() and the replay loop in cache_replay(),\nthe writeback worker and the GC worker, but only the magic and a\nfixed-seed CRC are checked first, so a non-last kset whose key_num exceeds\nthe PCACHE_KSET_KEYS_MAX buffer reads past its end before the CRC compare.\nA key\u0027s intra-segment offset and length in cache_key_decode() are taken\nverbatim, so a key running past its segment is replayed into the cache\ntree and the data CRC check and every later read hit then copy adjacent\npersistent memory into the caller\u0027s bio -- an out-of-bounds read that\nleaks to user space. Both fields are controlled by whoever supplies the\ncache device (CAP_SYS_ADMIN); the CRC seed is public.\n\nAdd kset_onmedia_valid() to bound key_num before any kset read, and\nreject a key whose offset plus length, computed in 64 bits, exceeds the\nsegment data_size. Valid metadata is unaffected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80961",
          "url": "https://www.suse.com/security/cve/CVE-2026-80961"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280255 for CVE-2026-80961",
          "url": "https://bugzilla.suse.com/1280255"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80961"
    },
    {
      "cve": "CVE-2026-80962",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80962"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: validate geometry fields from on-disk cache_info\n\ncache_segs_init() iterates cache_info-\u003en_segs times indexing\ncache-\u003esegments[], which is sized to the cache device geometry, and\nget_seg_id() takes each segment id from the on-media cache_info and the\nper-segment next_seg link. Both come from cache device metadata that is\nonly CRC-protected with a fixed public seed, so whoever supplies the\ncache device on a table load (CAP_SYS_ADMIN) controls them: an oversized\nn_segs or an out-of-range id drives an out-of-bounds access of\ncache-\u003esegments[] and a wild CACHE_DEV_SEGMENT() pointer into the device\nmapping -- an out-of-bounds read and write from on-disk data.\n\nReject an n_segs that exceeds the device segment count and a segment id\nthat is out of range before either is used. Valid metadata is unaffected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80962",
          "url": "https://www.suse.com/security/cve/CVE-2026-80962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280267 for CVE-2026-80962",
          "url": "https://bugzilla.suse.com/1280267"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80962"
    },
    {
      "cve": "CVE-2026-80963",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80963"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-stats: fix a crash if allocation of per-cpu data fails\n\nIf \"dm_kvzalloc(percpu_alloc_size, cpu_to_node(cpu))\" fails, the code\njumps to the \"out\" label and calls dm_stat_free. dm_stat_free does\n\"for_each_possible_cpu(cpu) { dm_kvfree(s-\u003estat_percpu[cpu][0].histogram,\ns-\u003ehistogram_alloc_size);\", which crashes with NULL pointer dereference\nif s-\u003estat_percpu[cpu] is NULL.\n\nThis commit fixes the bug by testing s-\u003estat_percpu[cpu] for NULL before\nusing it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80963",
          "url": "https://www.suse.com/security/cve/CVE-2026-80963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280295 for CVE-2026-80963",
          "url": "https://bugzilla.suse.com/1280295"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80963"
    },
    {
      "cve": "CVE-2026-80964",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80964"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: virmidi: Check card index validity at probe\n\nvirmidi driver blindly trusts that the given devptr-\u003eid value is\nwithin the proper card index range at probe.  It\u0027s OK for the devices\nthe driver itself creates at the module probe time, but if the device\nis bound manually via sysfs interface, this could be -1 as \"none\", and\nthis leads to OOB access for index[] and other parameters.\n\nAdd a sanity check for the card index and warn/correct it if it\u0027s a\nvalue out of the range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80964",
          "url": "https://www.suse.com/security/cve/CVE-2026-80964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280158 for CVE-2026-80964",
          "url": "https://bugzilla.suse.com/1280158"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80964"
    },
    {
      "cve": "CVE-2026-80965",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80965"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: serial-u16550: Check card index validity at probe\n\nserial-u16550 driver blindly trusts that the given devptr-\u003eid value is\nwithin the proper card index range at probe.  It\u0027s OK for the devices\nthe driver itself creates at the module probe time, but if the device\nis bound manually via sysfs interface, this could be -1 as \"none\", and\nthis leads to OOB access for index[] and other parameters.\n\nAdd a sanity check for the card index and warn/correct it if it\u0027s a\nvalue out of the range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80965",
          "url": "https://www.suse.com/security/cve/CVE-2026-80965"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280172 for CVE-2026-80965",
          "url": "https://bugzilla.suse.com/1280172"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80965"
    },
    {
      "cve": "CVE-2026-80966",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80966"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: portman2x4: Check card index validity at probe\n\nAlthough portman2x4 driver has a check of the given devptr-\u003eid value,\nit doesn\u0027t check for a negative id, which is often given as \"none\" or\nsuch value when bound via sysfs.  This may lead to OOB access for\nindex[] and other parameters.\n\nAdd a sanity check for the card index and warn/correct it if it\u0027s a\nvalue out of the range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80966",
          "url": "https://www.suse.com/security/cve/CVE-2026-80966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280185 for CVE-2026-80966",
          "url": "https://bugzilla.suse.com/1280185"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80966"
    },
    {
      "cve": "CVE-2026-80967",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80967"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcxhr: initialize mutexes before requesting threaded IRQ\n\npcxhr_probe() requests pcxhr_threaded_irq() before initializing\nmgr-\u003elock, even though the threaded handler takes that mutex.\n\nInitialize the manager locks before request_threaded_irq() so an\nearly interrupt cannot run against uninitialized mutex state during\nprobe.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80967",
          "url": "https://www.suse.com/security/cve/CVE-2026-80967"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280234 for CVE-2026-80967",
          "url": "https://bugzilla.suse.com/1280234"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80967"
    },
    {
      "cve": "CVE-2026-80968",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80968"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: mts64: Check card index validity at probe\n\nAlthough mts64 driver has a check of the given devptr-\u003eid value, it\ndoesn\u0027t check for a negative id, which is often given as \"none\" or\nsuch value when bound via sysfs.  This may lead to OOB access for\nindex[] and other parameters.\n\nAdd a sanity check for the card index and warn/correct it if it\u0027s a\nvalue out of the range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80968",
          "url": "https://www.suse.com/security/cve/CVE-2026-80968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280276 for CVE-2026-80968",
          "url": "https://bugzilla.suse.com/1280276"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80968"
    },
    {
      "cve": "CVE-2026-80969",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80969"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: mpu401: Check card index validity at probe\n\nmpu401 driver blindly trusts that the given devptr-\u003eid value is within\nthe proper card index range at probe.  It\u0027s OK for the devices the\ndriver itself creates at the module probe time, but if the device is\nbound manually via sysfs interface, this could be -1 as \"none\", and\nthis leads to OOB access for index[] and other parameters.\n\nAdd a sanity check for the card index and warn/correct it if it\u0027s a\nvalue out of the range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80969",
          "url": "https://www.suse.com/security/cve/CVE-2026-80969"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280301 for CVE-2026-80969",
          "url": "https://bugzilla.suse.com/1280301"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80969"
    },
    {
      "cve": "CVE-2026-80970",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80970"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: FCP: do not copy out an uninitialised init response\n\nfcp_ioctl_init() allocates its response buffer with kmalloc() and copies\nthe whole buffer back to userspace:\n\n\tbuf_size = init.step0_resp_size + init.step2_resp_size;\n\n\tvoid *resp __free(kfree) =\n\t\tkmalloc(buf_size, GFP_KERNEL);\n\t...\n\tif (copy_to_user(arg-\u003eresp, resp, buf_size))\n\t\treturn -EFAULT;\n\nNothing clears the buffer, and the only writer of its leading\nstep0_resp_size bytes is the step-0 control transfer:\n\n\terr = snd_usb_ctl_msg(dev, usb_rcvctrlpipe(dev, 0),\n\t\tFCP_USB_REQ_STEP0,\n\t\tUSB_RECIP_INTERFACE | USB_TYPE_CLASS | USB_DIR_IN,\n\t\t0, private-\u003ebInterfaceNumber,\n\t\tstep0_resp, private-\u003estep0_resp_size);\n\tif (err \u003c 0)\n\t\treturn err;\n\nusb_fill_control_urb() does not set URB_SHORT_NOT_OK, so a short or\nzero-length data stage completes with status 0 and snd_usb_ctl_msg()\nreturns a small actual_length.  The only check is err \u003c 0, so a short\ntransfer is accepted as success.\n\nsnd_usb_ctl_msg() copies the full size back unconditionally:\n\n\tbuf = kmemdup(data, size, GFP_KERNEL);\n\t...\n\tmemcpy(data, buf, size);\n\nBytes the device never wrote are therefore restored into resp unchanged\nand copied to userspace.  step0_resp_size and step2_resp_size are each\nvalidated only to 1..255, so the caller also picks the slab cache, from\nkmalloc-8 up to kmalloc-512.\n\nOn 7.2.0-rc5 (arm64), device answering step 0 with a zero-length data\nstage, s0 = s2 = 255:\n\n  # init_on_alloc off, no spray\n  step0 window [0,255): nonzero=94/255\n  000: 00 80 60 06 00 00 ff ff 18 00 00 00 57 01 ea 01\n  010: 08 78 22 13 00 00 ff ff a8 c4 5f 80 00 80 ff ff\n\n  # same kernel, kmalloc-512 pre-seeded with an 8-byte tag\n  step0 window [0,255): nonzero=219/255  tagbytes=232\n\n  # identical run, init_on_alloc=1\n  step0 window [0,255): nonzero=0/255  tagbytes=0\n\n  # all three runs\n  step2 window [255,510): device words matched=62/62\n\na8 c4 5f 80 00 80 ff ff is the little-endian kernel text address\nffff8000805fc4a8.  The step-2 window is unaffected, so the disclosure is\nexactly the step-0 region.\n\nZero the buffer, and require the step-0 transfer to deliver the full\nstep0_resp_size bytes so a short data stage is reported as an error.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80970",
          "url": "https://www.suse.com/security/cve/CVE-2026-80970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280340 for CVE-2026-80970",
          "url": "https://bugzilla.suse.com/1280340"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80970"
    },
    {
      "cve": "CVE-2026-80974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: sm501: Fix potential memory leaks during remove\n\nThe memory allocated for struct sm501_devdata in sm501_pci_probe() and\nsm501_plat_probe() is not freed by the corresponding remove functions\nsm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to\nkfree().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80974",
          "url": "https://www.suse.com/security/cve/CVE-2026-80974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280260 for CVE-2026-80974",
          "url": "https://bugzilla.suse.com/1280260"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80974"
    },
    {
      "cve": "CVE-2026-80975",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80975"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: qnap-mcu: keep the reply buffer alive past a command timeout\n\nqnap_mcu_exec() publishes an on-stack buffer to the receive path:\n\n\tunsigned char rx[QNAP_MCU_RX_BUFFER_SIZE];\n\t...\n\treply-\u003edata = rx;\n\treply-\u003elength = length;\n\nand qnap_mcu_receive_buf() writes into it from the serdev receive path,\nwhich runs out of flush_to_ldisc() and is not serialized against\nqnap_mcu_exec() at all. bus_lock cannot cover it, because qnap_mcu_exec()\nholds that mutex across wait_for_completion_timeout().\n\nOn a timeout qnap_mcu_exec() returns with reply-\u003edata still pointing at\nits own frame. A reply that arrives late, or an unsolicited message from\nthe MCU, is then written into a stack frame that has been left, corrupting\nwhatever runs next on that stack. The same applies when qnap_mcu_write()\nfails, since that path returns without touching the reply state either.\n\nMove the receive buffer into struct qnap_mcu. It is 37 bytes and the\nstructure is devm_kzalloc()ed, so it lives as long as the driver, and a\nlate write lands in memory that is still valid and is reinitialized by the\nnext command. bus_lock keeps commands from sharing it.\n\nThis deliberately does not clear reply-\u003edata or reply-\u003elength on the\ntimeout path. Doing so races with qnap_mcu_receive_buf(), which reads both\nafter its\n\n\tif (!reply-\u003elength)\n\t\treturn size;\n\ncheck: clearing reply-\u003edata gives a NULL dereference, and clearing\nreply-\u003elength alone removes the reply-\u003ereceived == reply-\u003elength exit\ncondition, so the copy loop runs until the uart chunk is consumed and\noverruns the buffer. Leaving both set keeps the write bounded by\nreply-\u003elength, which qnap_mcu_exec() has already checked against\nsizeof(mcu-\u003erx).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80975",
          "url": "https://www.suse.com/security/cve/CVE-2026-80975"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280270 for CVE-2026-80975",
          "url": "https://bugzilla.suse.com/1280270"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80975"
    },
    {
      "cve": "CVE-2026-80976",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80976"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nseg6: reset IP6CB after IPv6 decapsulation\n\ndecap_and_validate() pulls the outer SRv6 headers and makes the inner\npacket the skb network header. The IPv6 control block still contains\nvalues collected while parsing the outer packet, including nhoff and\nextension-header flags.\n\nEnd.DX6 and End.DT6 route the inner IPv6 packet directly to the IPv6\ninput path. An unprivileged user can reach End.DT6 from a user and net\nnamespace by installing a local SID and injecting an outer packet with\nHop-by-Hop and Destination Options headers followed by an SRH and a\nminimal inner IPv6 packet.\n\nThe outer extension headers leave a large nhoff in IP6CB. After\ndecapsulation, ip6_protocol_deliver_rcu() uses that stale offset on the\ninner packet and reads beyond the skb head. KASAN reports:\n\n  BUG: KASAN: slab-out-of-bounds in ip6_protocol_deliver_rcu\n  ip6_protocol_deliver_rcu+0x1118/0x1450\n  ip6_input_finish+0x11b/0x240\n  seg6_local_input_core+0xed/0x2e0\n  lwtunnel_input+0x1e9/0x4e0\n  ipv6_rthdr_rcv+0x525f/0x6c50\n  ip6_protocol_deliver_rcu+0xcb7/0x1450\n\nBefore clearing IP6CB for an inner IPv6 packet, save its incoming\ninterface index and L3 slave state. Restore both after the clear and set\nnhoff to the inner IPv6 base-header nexthdr field.\n\nUse IP6CB(skb)-\u003eiif rather than skb-\u003eskb_iif because VRF processing can\nreplace skb_iif with the L3 master while IP6CB keeps the receiving\ninterface. Preserve IP6SKB_L3SLAVE for the same reason.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80976",
          "url": "https://www.suse.com/security/cve/CVE-2026-80976"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280298 for CVE-2026-80976",
          "url": "https://bugzilla.suse.com/1280298"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80976"
    },
    {
      "cve": "CVE-2026-80977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()\n\nskb_tx_error() completes the zerocopy uarg and clears\nSKBFL_ALL_ZEROCOPY, and skb_zcopy_downgrade_managed() clears\nSKBFL_MANAGED_FRAG_REFS. Both live in skb_shinfo(), which every clone\nshares, while the caller only owns the reference it is about to drop.\nThrough a clone it tells the producer its pages are free and drops\nSKBFL_SHARED_FRAG for an skb that is still in flight.\n\nOpen vSwitch reaches this with a non-last OVS_ACTION_ATTR_RECIRC:\nclone_execute() sends a skb_clone() into ovs_dp_process_packet() while\ndo_execute_actions() keeps forwarding the original, and skb_clone()\ndoes not privatise the frags here -- skb_orphan_frags() returns early\non SKBFL_DONT_ORPHAN. A flow miss on the clone then strips the marker\nfrom the packet still being forwarded, and a later local ESP delivery\ndecrypts in place over frags it does not own privately.\n\nSkip it for a cloned skb. Nothing is lost: skb_release_data() clears\nthe zerocopy state once the last reference to the shared data goes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80977",
          "url": "https://www.suse.com/security/cve/CVE-2026-80977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280259 for CVE-2026-80977",
          "url": "https://bugzilla.suse.com/1280259"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280462 for CVE-2026-80977",
          "url": "https://bugzilla.suse.com/1280462"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80977"
    },
    {
      "cve": "CVE-2026-80978",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80978"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cap advertised IP tunnel headroom\n\nIP tunnel devices derive their advertised needed_headroom from lower\noutput devices. A stack of user-created devices can make the derived\nvalue larger than the 16-bit skb header offsets can represent. Once IP\noutput reserves it, skb head expansion can wrap those offsets.\n\nThe runtime transmit path already caps a growing needed_headroom at 512.\nApply the same cap when tunnel configuration publishes needed_headroom\nderived from a lower output device.\n\nCapping the advertised value is safe: IP tunnel transmit still expands\nthe skb when a packet needs more headroom. A nonsensical stacked\nconfiguration can therefore incur an extra reallocation, but it cannot\npublish an unbounded reservation to upper layers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80978",
          "url": "https://www.suse.com/security/cve/CVE-2026-80978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280253 for CVE-2026-80978",
          "url": "https://bugzilla.suse.com/1280253"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80978"
    },
    {
      "cve": "CVE-2026-80979",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80979"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: unregister the connection before draining the rx tasklet\n\nsmc_conn_free() calls smc_ism_unset_conn() only while the link group is\nstill on its device list, and never sets conn-\u003ekilled.\nsmc_lgr_terminate_sched() unlinks the group immediately and defers killing\nits connections to a work item, so a connection freed in that window keeps\nits smcd-\u003econn[] slot with both gates in smcd_handle_irq() open, and the\ndevice can re-arm the receive tasklet after tasklet_kill() has returned. On\nthe DMB-nocopy path the ghost send buffer is freed right after that drain,\nso the re-armed tasklet dereferences it.\n\nUnregister unconditionally and drain before the detach at both teardown\nsites, mirroring rmb_desc, which smc_buf_unuse() releases after the drain.\nClear conn-\u003esndbuf_desc before freeing it as well, so a reader that samples\nthe pointer cannot get one that is already freed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80979",
          "url": "https://www.suse.com/security/cve/CVE-2026-80979"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280299 for CVE-2026-80979",
          "url": "https://bugzilla.suse.com/1280299"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280300 for CVE-2026-80979",
          "url": "https://bugzilla.suse.com/1280300"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80979"
    },
    {
      "cve": "CVE-2026-80980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: stop killed, freed and out_of_sync sharing a byte\n\nThe three connection state flags are single-bit bitfields, so they occupy\none byte of struct smc_connection and every store to one is a\nread-modify-write of the other two:\n\n    u8  killed : 1;\n    u8  freed : 1;\n    u8  out_of_sync : 1;\n\nThey are not written under a common lock. smc_cdc_msg_validate() sets\nout_of_sync from the receive tasklet, while smc_conn_kill() sets killed\nfrom process context under lock_sock(), and the receive path does not defer\nto the backlog when the socket is owned -- smc_cdc_msg_recv() takes only\nbh_lock_sock().\n\nGive each flag its own byte so a store no longer touches its neighbours.\nAll readers test them as booleans and are unchanged. struct smc_connection\ngrows by two bytes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80980",
          "url": "https://www.suse.com/security/cve/CVE-2026-80980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280303 for CVE-2026-80980",
          "url": "https://bugzilla.suse.com/1280303"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80980"
    },
    {
      "cve": "CVE-2026-80981",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80981"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()\n\nsmc_llc_srv_add_link() keeps add_llc pointing into the queue entry:\n\n  add_llc = \u0026qentry-\u003emsg.add_link;\t\t\tsmc_llc.c:1482\n  ...\n  smc_llc_save_add_link_info(link_new, add_llc);\tsmc_llc.c:1494\n  smc_llc_flow_qentry_del(\u0026lgr-\u003ellc_flow_lcl);\t\tsmc_llc.c:1495\n  ...\n  u8 *llc_msg = smc_link_shared_v2_rxbuf(link) ?\n\t(u8 *)lgr-\u003ewr_rx_buf_v2 : (u8 *)add_llc;\tsmc_llc.c:1504\n  smc_llc_save_add_link_rkeys(link, link_new, llc_msg);\tsmc_llc.c:1506\n\nsmc_llc_flow_qentry_del() kfree()s the entry, so on a link without a shared\nv2 receive buffer the pointer handed to smc_llc_save_add_link_rkeys() is\nalready freed. Before the Fixes: commit that branch always used\nlgr-\u003ewr_rx_buf_v2 and add_llc was not used after the free.\n\nReproduced on an unpatched tree over rxe, with KASAN, kasan_multi_shot\nand a link forced to max_recv_sge == 1: the entry is freed and read by\nthe same call, and the freeing frame is smc_llc_srv_add_link() itself.\n\n  [    2.523161] BUG: KASAN: slab-use-after-free in smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.523499] Read of size 2 at addr ffff8880052194de by task kworker/0:1/11\n  [    2.523789]\n  [    2.523862] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted 7.2.0-rc5-p0-g2c9dd296545d #35 PREEMPT(lazy)\n  [    2.523865] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n  [    2.523866] Workqueue: smc_hs_wq smc_listen_work\n  [    2.523869] Call Trace:\n  [    2.523870]  \u003cTASK\u003e\n  [    2.523871]  dump_stack_lvl+0x53/0x70\n  [    2.523872]  print_report+0xd0/0x630\n  [    2.523874]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n  [    2.523876]  ? smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.523878]  kasan_report+0xce/0x100\n  [    2.523879]  ? smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.523881]  smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.523883]  ? smcr_buf_reg_lgr+0x2a4/0x660\n  [    2.523885]  smc_llc_srv_add_link+0xaa2/0x1e50\n  [    2.523888]  ? _printk+0xba/0xf0\n  [    2.523897]  ? __pfx_smc_llc_srv_add_link+0x10/0x10\n  [    2.523899]  ? down_write+0xb0/0x130\n  [    2.523903]  ? __pfx_down_write+0x10/0x10\n  [    2.523905]  smc_listen_work+0x489e/0x4d00\n  [    2.523907]  ? kmem_cache_free+0x1c6/0x3a0\n  [    2.523911]  ? __pfx_smc_listen_work+0x10/0x10\n  [    2.523913]  ? release_sock+0x148/0x1d0\n  [    2.523915]  ? smc_tcp_listen_work+0xb4f/0xfc0\n  [    2.523917]  ? _raw_spin_lock_irq+0x80/0xe0\n  [    2.523918]  ? __pfx__raw_spin_lock_irq+0x10/0x10\n  [    2.523920]  process_one_work+0x633/0x1030\n  [    2.523922]  ? assign_work+0x11d/0x370\n  [    2.523924]  worker_thread+0x45b/0xd10\n  [    2.523926]  ? __pfx_worker_thread+0x10/0x10\n  [    2.523928]  ? __pfx_worker_thread+0x10/0x10\n  [    2.523929]  kthread+0x2c6/0x3b0\n  [    2.523931]  ? recalc_sigpending+0x15c/0x1e0\n  [    2.523934]  ? __pfx_kthread+0x10/0x10\n  [    2.523935]  ret_from_fork+0x36e/0x5a0\n  [    2.523937]  ? __pfx_ret_from_fork+0x10/0x10\n  [    2.523938]  ? __switch_to+0x572/0xdd0\n  [    2.523943]  ? __pfx_kthread+0x10/0x10\n  [    2.523944]  ret_from_fork_asm+0x1a/0x30\n  [    2.523947]  \u003c/TASK\u003e\n  [    2.523948]\n  [    2.531253] Allocated by task 48:\n  [    2.531399]  kasan_save_stack+0x33/0x60\n  [    2.531570]  kasan_save_track+0x14/0x30\n  [    2.531737]  __kasan_kmalloc+0x8f/0xa0\n  [    2.531905]  __kmalloc_cache_noprof+0x158/0x370\n  [    2.532100]  smc_llc_enqueue+0x72/0x560\n  [    2.532268]  smc_wr_rx_tasklet_fn+0x474/0xa80\n  [    2.532491]  tasklet_action_common+0x20f/0x8a0\n  [    2.532714]  handle_softirqs+0x18e/0x590\n  [    2.532886]  do_softirq+0x3b/0x60\n  [    2.533036]  __local_bh_enable_ip+0x61/0x70\n  [    2.533221]  __alloc_skb+0x732/0x890\n  [    2.533384]  rxe_init_packet+0x16b/0x4f0\n  [    2.533567]  prepare_ack_packet+0xb8/0x830\n  [    2.533760]  rxe_receiver+0x495/0x96e0\n  [    2.533933]  do_work+0x144/0x470\n  [    2\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80981",
          "url": "https://www.suse.com/security/cve/CVE-2026-80981"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280268 for CVE-2026-80981",
          "url": "https://bugzilla.suse.com/1280268"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80981"
    },
    {
      "cve": "CVE-2026-80982",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80982"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix use-after-free in smc_rx_pipe_buf_release()\n\nsmc_rx_splice() hands RMB pages to a pipe and takes a socket reference\nper entry so the smc_sock stays alive until the reader finishes. The\nconnection does not: a concurrent close runs smc_conn_free(), which\nreleases the receive buffer back to the link group pool.\n\nsmc_rx_pipe_buf_release() tests sk_state before taking the socket lock.\nThe state can change between the test and the lock, and\nsmc_rx_update_cons() then dereferences conn-\u003ermb_desc and walks\nconn-\u003elgr, which smc_conn_free() has already released. On the\nis_reg_err path smcr_buf_unuse() frees the descriptor outright, so\nthis is a use-after-free.\n\nTake the socket lock first and test conn-\u003efreed instead.\nsmc_conn_free() sets that flag before releasing anything, and every\ncaller holds the socket lock. The two paths exclude each other: either\nthe pipe release runs first with everything valid, or it sees the flag\nand skips the update.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80982",
          "url": "https://www.suse.com/security/cve/CVE-2026-80982"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280271 for CVE-2026-80982",
          "url": "https://bugzilla.suse.com/1280271"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80982"
    },
    {
      "cve": "CVE-2026-80983",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80983"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix socket refcount leak in smc_switch_conns()\n\nsmc_switch_conns() takes a reference on the SMC socket before dropping\nlgr-\u003econns_lock, so the connection stays alive while the CDC slot is\nfetched:\n\n        sock_hold(\u0026smc-\u003esk);\n        read_unlock_bh(\u0026lgr-\u003econns_lock);\n        /* pre-fetch buffer outside of send_lock, might sleep */\n        rc = smc_cdc_get_free_slot(conn, to_lnk, \u0026wr_buf, NULL, \u0026pend);\n        if (rc)\n                goto err_out;\n\nThe err_out label only drops the wr_tx link reference, so this early exit\nreturns without the matching sock_put(). The second error exit is not\naffected, because sock_put() has already run by then.\n\nA leaked sk_refcnt means the smc_sock is never destroyed. Its send and\nreceive buffers stay allocated, and for a user socket the reference held\non the network namespace is never released, so the netns can no longer be\ntorn down.\n\nsmc_cdc_get_free_slot() fails when the target link goes down or when the\nconnection has been killed while the switch is in progress. Both are\nreachable during the link failover this function implements, so the leak\nis triggered by the same hardware events that make smc_switch_conns() run\nin the first place.\n\nRestructure so there is a single sock_put() covering both outcomes,\ninstead of adding a second one to the error path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80983",
          "url": "https://www.suse.com/security/cve/CVE-2026-80983"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280296 for CVE-2026-80983",
          "url": "https://bugzilla.suse.com/1280296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80983"
    },
    {
      "cve": "CVE-2026-80984",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80984"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: do not dereference an unset send buffer on the SMC-D teardown path\n\nsmc_close_stream_wait() calls smc_tx_prepared_sends() from inside its\nsk_wait_event() condition, and sk_wait_event() evaluates that condition\nonce with the socket lock released. smcd_buf_detach() clears\nconn-\u003esndbuf_desc from smc_conn_kill() under lock_sock(), so a link group\nterminating while a socket waits there leaves the helper dereferencing\nNULL, faulting out of close(). SIOCOUTQ reads the field by hand, and\nsmc_close_cancel_work() drops the lock across two cancel_*_sync() calls.\n\nSample the pointer once in the helper, report nothing prepared while it is\nunset, and bound the ioctl the same way. The receive tasklet dereferences\nthe field directly in smc_cdc_msg_recv_action(), not through this helper;\n1/2 is what keeps it from running that late.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80984",
          "url": "https://www.suse.com/security/cve/CVE-2026-80984"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280309 for CVE-2026-80984",
          "url": "https://bugzilla.suse.com/1280309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80984"
    },
    {
      "cve": "CVE-2026-80985",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80985"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: carry oversized SMC-Rv2 LLC messages in the queue entry\n\nsmc_llc_rmt_delete_rkey() and smc_llc_save_add_link_rkeys() read the part\nof a v2 message that does not fit into the 44-byte union smc_llc_msg, and\nboth bound themselves by the size of the buffer it landed in, not by what\narrived. On a link with a shared v2 receive buffer a 44-byte\nDELETE_RKEY_V2 declaring 255 rkeys reaches rkey[9..254] in whatever an\nearlier message left in lgr-\u003ewr_rx_buf_v2, and passes each of them to\nsmc_rtoken_delete(). One of those 255 matched a registered rtoken and\ndeleted it. An ADD_LINK on such a link installs up to 255 rtokens from\nthe same bytes.\n\nCopy the tail into the queue entry, so its length is the length of the\nmessage that arrived, and declare the rkeys that fit inline as a member of\nthe union instead of reaching them through a cast. The same\nDELETE_RKEY_V2 now processes the 9 rkeys it carries. The copy is limited\nto the longest tail the two functions can read, so the peer does not pick\nthe size of the entry.\n\nThe bound the previous patch placed on links without a shared v2 receive\nbuffer is no longer needed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80985",
          "url": "https://www.suse.com/security/cve/CVE-2026-80985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280317 for CVE-2026-80985",
          "url": "https://bugzilla.suse.com/1280317"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80985"
    },
    {
      "cve": "CVE-2026-80986",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80986"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: bound the peer rkey counts in SMC-Rv2 LLC messages\n\nOn a link whose device has max_recv_sge == 1 there is no shared v2 receive\nbuffer, and smc_llc_save_add_link_rkeys() takes the v2 extension from 44\nbytes past the start of the queue entry\u0027s inline message:\n\n  ext = (struct smc_llc_msg_add_link_v2_ext *)(llc_msg + SMC_WR_TX_SIZE);\n\nThe entry is a 72-byte allocation and the extension starts at offset 68, so\next-\u003enum_rkeys at offset 94 is already past it. This happens on every\nSMC-Rv2 link addition, whatever the peer sends:\n\n  [    2.490065] BUG: KASAN: slab-out-of-bounds in smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.490431] Read of size 2 at addr ffff8880056406de by task smctest/106\n  [    2.490709]\n  [    2.490792] CPU: 0 UID: 0 PID: 106 Comm: smctest Not tainted 7.2.0-rc5-p1-g77a5d9d9c99f #32 PREEMPT(lazy)\n  [    2.490795] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n  [    2.490798] Call Trace:\n  [    2.490803]  \u003cTASK\u003e\n  [    2.490805]  dump_stack_lvl+0x53/0x70\n  [    2.490810]  print_report+0xd0/0x630\n  [    2.490828]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n  [    2.490832]  ? smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.490834]  kasan_report+0xce/0x100\n  [    2.490836]  ? smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.490837]  smc_llc_save_add_link_rkeys+0x333/0x350\n  [    2.490839]  ? smcr_buf_map_lgr+0x1bf/0x2b0\n  [    2.490844]  smc_llc_cli_add_link+0xca7/0x1e80\n  [    2.490848]  ? smc_llc_wait+0x355/0x810\n  [    2.490850]  ? __pfx_smc_llc_wait+0x10/0x10\n  [    2.490851]  ? __pfx_smc_llc_cli_add_link+0x10/0x10\n  [    2.490853]  ? __pfx_autoremove_wake_function+0x10/0x10\n  [    2.490863]  __smc_connect+0x3f5c/0x4980\n  [    2.490873]  ? __pfx_kernel_connect+0x10/0x10\n  [    2.490888]  ? __pfx___smc_connect+0x10/0x10\n  [    2.490891]  ? release_sock+0x148/0x1d0\n  [    2.490894]  smc_connect+0x42c/0x580\n  [    2.490896]  __sys_connect+0xfc/0x130\n  [    2.490898]  ? __pfx___sys_connect+0x10/0x10\n  [    2.490900]  ? handle_mm_fault+0x1a1/0x430\n  [    2.490908]  __x64_sys_connect+0x6d/0xb0\n  [    2.490909]  ? fpregs_assert_state_consistent+0x56/0xe0\n  [    2.490917]  do_syscall_64+0xf9/0x540\n  [    2.490921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f\n  [    2.490924] RIP: 0033:0x421bb4\n  [    2.490927] Code: ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 80 3d ad 34 09 00 00 74 13 b8 2a 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 4c c3 0f 1f 00 55 48 89 e5 48 83 ec 10 89 55\n  [    2.490929] RSP: 002b:00007ffd473b01a8 EFLAGS: 00000202 ORIG_RAX: 000000000000002a\n  [    2.490935] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000421bb4\n  [    2.490936] RDX: 0000000000000010 RSI: 00007ffd473b01d0 RDI: 0000000000000003\n  [    2.490937] RBP: 0000000000003930 R08: 0000000000000004 R09: 0000000000000000\n  [    2.490938] R10: 00007ffd473b0f98 R11: 0000000000000202 R12: 0000000000000006\n  [    2.490939] R13: 00007ffd473b0f87 R14: 0000000000000003 R15: 00007ffd473b0f90\n  [    2.490940]  \u003c/TASK\u003e\n  [    2.490941]\n  [    2.499545] Allocated by task 44:\n  [    2.499693]  kasan_save_stack+0x33/0x60\n  [    2.499860]  kasan_save_track+0x14/0x30\n  [    2.500026]  __kasan_kmalloc+0x8f/0xa0\n  [    2.500190]  __kmalloc_cache_noprof+0x158/0x370\n  [    2.500393]  smc_llc_enqueue+0x72/0x560\n  [    2.500559]  smc_wr_rx_tasklet_fn+0x474/0xa80\n  [    2.500747]  tasklet_action_common+0x20f/0x8a0\n  [    2.500945]  handle_softirqs+0x18e/0x590\n  [    2.501115]  do_softirq+0x3b/0x60\n  [    2.501266]  __local_bh_enable_ip+0x61/0x70\n  [    2.501446]  __alloc_skb+0x732/0x890\n  [    2.501604]  rxe_init_packet+0x16b/0x4f0\n  [    2.501783]  prepare_ack_packet+0xb8/0x830\n  [    2.501962]  rxe_receiver+0x495/0x96e0\n  [    2.502125]  do_work+0x144/0x470\n  [    2.502269]  process_one_work+0x633/0x1030\n  [    2.502450]  worker_thread+0x45b/0xd10\n  [    2.50261\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80986",
          "url": "https://www.suse.com/security/cve/CVE-2026-80986"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280262 for CVE-2026-80986",
          "url": "https://bugzilla.suse.com/1280262"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80986"
    },
    {
      "cve": "CVE-2026-80987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNTB: ntb_transport: Reject oversized TX buffers\n\nntb_process_tx() handles an oversized buffer by calling tx_handler()\nwith a NULL data pointer and returning success. ntb_netdev therefore\nneither frees the skb in its completion callback nor takes its enqueue\nerror path, leaking it.\n\nReject oversized buffers in ntb_transport_tx_enqueue() before acquiring\na queue entry and return -EMSGSIZE. The caller retains ownership of the\nbuffer, and the preceding netdev patch frees the skb when enqueue\nreturns this permanent error.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80987",
          "url": "https://www.suse.com/security/cve/CVE-2026-80987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280264 for CVE-2026-80987",
          "url": "https://bugzilla.suse.com/1280264"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80987"
    },
    {
      "cve": "CVE-2026-80988",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80988"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNTB: ntb_transport: Fail TX enqueue when the QP link is down\n\nCommit f195a1a6fe41 (\"ntb: Drop packets when qp link is down\") meant to\nmake ntb_transport_tx_enqueue() drop packets submitted while the QP link\nis down, but it only returns 0 without consuming the packet. Zero means\nsuccess by this function\u0027s contract, so ntb_netdev reports NETDEV_TX_OK\nand forgets the skb: nothing queued it, nothing frees it, and it leaks,\none skb for every transmit racing a link-down.\n\nReturn -ENOLINK instead, restoring the contract that a non-zero return\nleaves the buffer owned by the caller. With the preceding patch,\nntb_netdev frees the skb on non-retryable enqueue failures and returns\nNETDEV_TX_OK, so a packet racing with link-down is dropped without leaking\nor entering a busy retry loop.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80988",
          "url": "https://www.suse.com/security/cve/CVE-2026-80988"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280266 for CVE-2026-80988",
          "url": "https://bugzilla.suse.com/1280266"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80988"
    },
    {
      "cve": "CVE-2026-80989",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80989"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: thunderbolt: Mark the connection down when bringing it up fails\n\nEvery failure path in tbnet_connected_work() undoes its own work and\nreturns without clearing login_sent, so the connection still looks\nestablished. The next tbnet_tear_down() therefore takes its main branch\nand repeats a teardown that already happened: it stops rings that are\nalready stopped, which is a dev_WARN() and fatal under panic_on_warn,\nand it releases net-\u003eremote_transmit_path even on the HopID mismatch\npath, where this connection never owned that id, silently freeing one\nthat someone else is still using.\n\nClear login_sent on those paths. That is enough for tbnet_tear_down() to\nleave the unwound state alone, and login_received has to stay set: it\nrecords that the peer has logged in and carries the transmit path it gave\nus, which nothing on this side can make the peer send again. Two things\nchange beyond keeping the teardown out of the way: the logout request in\nthat block is no longer sent, and the peer\u0027s next login request now\nre-queues our login work rather than connected_work, giving the\nconnection a fresh login instead of a retry on stale state.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80989",
          "url": "https://www.suse.com/security/cve/CVE-2026-80989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280305 for CVE-2026-80989",
          "url": "https://bugzilla.suse.com/1280305"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80989"
    },
    {
      "cve": "CVE-2026-80990",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80990"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: thunderbolt: Release the Rx HopID that was handed out on mismatch\n\ntb_xdomain_alloc_in_hopid() passes the wanted HopID to ida_alloc_range()\nas the lower bound, so a taken id is not an error there: the allocator\nreturns the next free one above it. tbnet_connected_work() asks for the\npeer\u0027s transmit path, treats any other id as a failure and returns\nwithout releasing what it got, so that allocation stays live for the rest\nof the XDomain connection with nothing left holding a reference to it.\n\nRelease the id when it is not the one we asked for, the same way the\nerror unwind at the end of the function releases the expected one.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80990",
          "url": "https://www.suse.com/security/cve/CVE-2026-80990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280273 for CVE-2026-80990",
          "url": "https://bugzilla.suse.com/1280273"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80990"
    },
    {
      "cve": "CVE-2026-80991",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80991"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ravb: serialize PTP clock teardown\n\nravb_ptp_interrupt() can race with ravb_ptp_stop() and pass the clock to\nptp_clock_event() while ptp_clock_unregister() is freeing it. This can\nlead to a use-after-free.\n\nUse READ_ONCE() and WRITE_ONCE() for lockless access to the clock pointer.\nAtomically detach it with xchg() before disabling PTP interrupts, then\nsynchronize all IRQs which can invoke ravb_ptp_interrupt() before\nunregistering the detached clock.\n\nA handler which read the old pointer completes before the clock is\nunregistered, while later handlers read NULL and skip the event.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80991",
          "url": "https://www.suse.com/security/cve/CVE-2026-80991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280197 for CVE-2026-80991",
          "url": "https://bugzilla.suse.com/1280197"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280200 for CVE-2026-80991",
          "url": "https://bugzilla.suse.com/1280200"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80991"
    },
    {
      "cve": "CVE-2026-80992",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80992"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ravb: avoid dereferencing an invalid PTP clock\n\nThe PTP clock is unavailable before the first open, so querying its\nindex can dereference a NULL pointer. Registration failures can also\nleave an error pointer in priv-\u003eptp.clock.\n\nCache the PHC index separately and report -1 while no clock is\nregistered. Normalize registration errors to NULL and preserve the\nstatic timestamping capabilities.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80992",
          "url": "https://www.suse.com/security/cve/CVE-2026-80992"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280201 for CVE-2026-80992",
          "url": "https://bugzilla.suse.com/1280201"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80992"
    },
    {
      "cve": "CVE-2026-80993",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80993"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phylink: correctly validate returned PCS in phylink_inband_caps\n\nIn phylink_inband_caps(), the PCS returned by mac_select_pcs is only\nchecked if NULL but mac_select_pcs can also return an error pointer.\n\nThis can cause a kernel panic as phylink_pcs_inband_caps() only checks\nif passed PCS is not NULL and directly dereference ops from the phylink_pcs\nstruct.\n\nUse the IS_ERR_OR_NULL macro to address both case where the returned\nPCS can be NULL or an error pointer and prevent a kernel panic.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80993",
          "url": "https://www.suse.com/security/cve/CVE-2026-80993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280202 for CVE-2026-80993",
          "url": "https://bugzilla.suse.com/1280202"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80993"
    },
    {
      "cve": "CVE-2026-80994",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80994"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix flow mask use-after-free on flow deletion\n\nThe commit in the Fixes tag below made so flow-\u003emask free is scheduled\nvia RCU right after it is removed from the flow table.  The pointer\nstays in the flow structure and it can be accessible while in the same\nRCU critical section.  This is done to avoid requiring ovs_mutex for\nthe ovs_flow_free().\n\nHowever, while removing the flow during processing of CMD_DEL, we do\nnot take RCU read lock before the removal, and ovs_flow_cmd_fill_info()\nuses the flow-\u003emask pointer afterwards.  The RCU read lock is taken,\nbut it\u0027s already late at that point.  The comment on that line\nacknowledges that the lock is cosmetic and doesn\u0027t serve a real purpose.\n\nThis leads to use-after-free if the RCU grace period passes between\nremoval and the filling.  It is a short race window, but it is there\nand can lead to a real crash in case memory allocation for the info\ntakes a bit longer:\n\n BUG: KASAN: slab-use-after-free in __ovs_nla_put_key\n             net/openvswitch/flow_netlink.c:1996\n BUG: KASAN: slab-use-after-free in ovs_nla_put_key+0x2463/0x2e30\n             net/openvswitch/flow_netlink.c:2250\n Read of size 4 at addr ffff88801ee89970 by task ovs_flow_del_ec/9487\n\n Call Trace:\n  \u003cTASK\u003e\n  __ovs_nla_put_key net/openvswitch/flow_netlink.c:1996\n  ovs_nla_put_key+0x2463/0x2e30 net/openvswitch/flow_netlink.c:2250\n  ovs_flow_cmd_fill_info+0x420/0x9c0 net/openvswitch/datapath.c:930\n  ovs_flow_cmd_del+0x53a/0x970 net/openvswitch/datapath.c:1467\n  ...\n  netlink_rcv_skb+0x156/0x420 net/netlink/af_netlink.c:2556\n  \u003c/TASK\u003e\n\n Allocated by task 9487:\n  mask_alloc net/openvswitch/flow_table.c:967\n  flow_mask_insert net/openvswitch/flow_table.c:1012\n  ovs_flow_tbl_insert+0xea2/0x1a90 net/openvswitch/flow_table.c:1084\n  ovs_flow_cmd_new+0x7e3/0xd90 net/openvswitch/datapath.c:1086\n  ...\n  netlink_rcv_skb+0x156/0x420 net/netlink/af_netlink.c:2556\n\n Freed by task 9485:\n  rcu_free_sheaf+0x1e/0x100 mm/slub.c:5978\n  rcu_do_batch kernel/rcu/tree.c:2645\n  rcu_core+0x59c/0x10c0 kernel/rcu/tree.c:2897\n  handle_softirqs+0x1e4/0x9a0 kernel/softirq.c:622\n  ...\n  instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062\n\novs_flow_tbl_remove() must be called after the ovs_flow_cmd_fill_info()\nto avoid this race.  This also helps with cleaning up the forced cast\nand the cosmetic RCU read lock.  Before the commit in the Fixes tag the\norder did not matter as long as the flow object itself was not freed.\n\nA wider RCU critical section could be another option, but we have a\nGFP_KERNEL allocation in the way.\n\nReported by Trend Micro\u0027s Zero Day Initiative as ZDI-CAN-32042.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80994",
          "url": "https://www.suse.com/security/cve/CVE-2026-80994"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280292 for CVE-2026-80994",
          "url": "https://bugzilla.suse.com/1280292"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80994"
    },
    {
      "cve": "CVE-2026-80995",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80995"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mctp: hold a reference to the route device in mctp_route_lookup()\n\nmctp_route_lookup() uses rt-\u003edev without holding a reference on it.\nmctp_route_lookup_single() returns the route under RCU only, so the\nroute\u0027s device can be torn down concurrently: mctp_dev_put() drops the\nlast reference and synchronously kfree()s mdev-\u003eaddrs.  mctp_dev_saddr()\nthen reads rt-\u003edev-\u003eaddrs[0], giving a use-after-free reachable by an\nunprivileged local AF_MCTP user on the receive/forwarding path (no\nCAP_NET_RAW required):\n\n  BUG: KASAN: slab-use-after-free in mctp_route_lookup\n  Read of size 1 at addr ... by task mctp_uaf/...\n   mctp_route_lookup\n   mctp_pkttype_receive\n  Freed by task ...:\n   kfree\n   mctp_dev_put\n   mctp_dev_notify\n\nIn the same window mctp_dst_from_route() -\u003e mctp_dev_hold() also\nincrements a refcount that has already reached zero\n(\"refcount_t: addition on 0 ... mctp_dev_hold\").\n\nThis reintroduces the use-after-free class of CVE-2023-3439: the source\naddress lookup was moved ahead of the point where the destination takes\nits device reference.\n\nTake a reference with refcount_inc_not_zero() before touching rt-\u003edev,\nskip a device that is already dead, and drop the reference once the\ndestination has taken its own.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80995",
          "url": "https://www.suse.com/security/cve/CVE-2026-80995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280282 for CVE-2026-80995",
          "url": "https://bugzilla.suse.com/1280282"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-80995"
    },
    {
      "cve": "CVE-2026-80996",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80996"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: l2tp: do not propagate multicast notification errors\n\nThe tunnel create, tunnel modify, session create, and session modify\nnetlink handlers send multicast notifications through helpers that can fail\nwhile allocating or encoding a message, or while multicasting it.\n\nFor tunnel and session create/modify, a notification is sent after the live\noperation has completed. Returning a best-effort notification error as the\ncommand result can therefore report failure for an operation that already\ncommitted and can cause callers to retry and accumulate live objects.\n\nKeep sending notifications for listener visibility, but do not propagate\ntheir best-effort status as the command result. This also keeps the tunnel\nmodify command consistent with the other notification-only paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80996",
          "url": "https://www.suse.com/security/cve/CVE-2026-80996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280280 for CVE-2026-80996",
          "url": "https://bugzilla.suse.com/1280280"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80996"
    },
    {
      "cve": "CVE-2026-80997",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80997"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipa: fix stalled modem TX queue after runtime resume\n\nipa_start_xmit() unconditionally stops the TX queue before calling\npm_runtime_get(), relying on the wake scheduled by runtime resume\n(ipa_modem_wake_queue_work()) to restart it once power is ACTIVE.\nBut that work is queued from within the runtime resume callback,\nbefore the device\u0027s power state reaches RPM_ACTIVE, so it can run\nwhile the device is still RPM_RESUMING.  The wake is then consumed\ntoo early: the transmit it restarts stops the queue again,\npm_runtime_get() returns -EINPROGRESS without arranging any future\nwake (deferred_resume exists only for RPM_SUSPENDING), and after the\nresume completes nothing is left to wake the queue.  Transmit stalls\npermanently: packets pile up in the qdisc behind the stopped queue,\nthe device runtime-suspends, and since the netdev registers no\nndo_tx_timeout the watchdog never fires.  Observed on SM7635\n(Fairphone 6) as the cellular data path going permanently deaf\nwithin hours, RX included, since nothing resumes the suspended\nendpoints.\n\nClose the window by making the wake work wait for the resume to\ncomplete (pm_runtime_get_sync()) before waking the queue.  Every\nqueue stop is then guaranteed a later wake that happens while power\nis ACTIVE; a transmit racing a new suspend/resume cycle re-schedules\nthe work.  If the device could not be resumed, wake the queue anyway\nso pending packets are dropped by the transmit path rather than\nstranded.\n\nThe STARTED power flag used to narrow this window: a wake running\nbefore the transmit path\u0027s stop suppressed that stop, but only once,\nas the flag was cleared by the first stop it absorbed.  Removing the\nflag made a single transmit during an in-flight resume sufficient to\nstrand the queue, which is the form observed.\n\nWith an accelerated reproducer (autosuspend delay shortened to 5 ms,\n~20 packets/s of TX), an unpatched kernel stalled three times in\n230 s / 4380 packets; with this patch the same test ran 3601 s /\n70298 packets without a stall.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80997",
          "url": "https://www.suse.com/security/cve/CVE-2026-80997"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280278 for CVE-2026-80997",
          "url": "https://bugzilla.suse.com/1280278"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80997"
    },
    {
      "cve": "CVE-2026-80998",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80998"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bnxt: ring the doorbell when SW USO exits early\n\nWhen a burst of packets is handed down to the driver, the driver defers\nthe doorbell to the end by setting txr-\u003ekick_pending = 1. The normal TX\npath handles this, but the SW USO path can miss it if it returns\nearly.\n\nIf bnxt_sw_udp_gso_xmit runs but returns early with NETDEV_TX_BUSY and\ntxr-\u003ekick_pending was previously set to 1, then the TX queue can\nstall because the driver wrote some BDs but never wrote the doorbell.\nThe device won\u0027t know to do the TX which would generate the completion\nthat would wake the queue back up.\n\nSimplify bnxt_sw_udp_gso_xmit to set txr-\u003ekick_pending in its success\ncase and check the flag on return. The added check after\nbnxt_sw_udp_gso_xmit returns ensures that any pending doorbells are\nwritten handling both successful USO and any early returns, which\nprevents the TX queue stall mentioned above.\n\nThis TX queue stall was observed on a production system with a netdev TX\nwatchdog informing about the queue stall.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80998",
          "url": "https://www.suse.com/security/cve/CVE-2026-80998"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280274 for CVE-2026-80998",
          "url": "https://bugzilla.suse.com/1280274"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80998"
    },
    {
      "cve": "CVE-2026-80999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-80999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO\n\nrtl83xx_reset_assert() and rtl83xx_reset_deassert() are only called from\nthe probe path, which may sleep and is not timing-critical.  When the\nreset GPIO is provided by a sleeping controller such as an I2C I/O\nexpander, gpiod_set_value() warns:\n\n  WARNING: drivers/gpio/gpiolib.c:4030 at gpiod_set_value+0x44/0x80, CPU#1: kworker/u16:4/61\n  Hardware name: B\u0026O MAP CA33 Rev f (UNKNOWN) (DT)\n  Workqueue: events_unbound deferred_probe_work_func\n  pc : gpiod_set_value+0x44/0x80\n  lr : rtl83xx_probe+0x1d8/0x3a0\n  Call trace:\n   gpiod_set_value+0x44/0x80 (P)\n   rtl83xx_probe+0x1d8/0x3a0\n   realtek_mdio_probe+0x24/0xa0\n   mdio_probe+0x38/0x78\n   really_probe+0xc4/0x3e0\n   __driver_probe_device+0x15c/0x1b8\n   driver_probe_device+0xb4/0x120\n   __device_attach_driver+0xb8/0x1a0\n   bus_for_each_drv+0x88/0xf0\n   __device_attach+0xa0/0x1d8\n   device_initial_probe+0x54/0x68\n   bus_probe_device+0x38/0xa0\n   deferred_probe_work_func+0xb8/0x120\n   process_one_work+0x184/0x4e8\n   worker_thread+0x188/0x308\n   kthread+0x130/0x150\n   ret_from_fork+0x10/0x20\n\nSwitch both helpers to gpiod_set_value_cansleep() so such a reset GPIO can\nbe used without triggering the warning.\n\nThe reset GPIO has been driven with the non-sleeping gpiod_set_value()\nsince the driver was added in v4.19.  The call has since been refactored\nacross several files - from realtek-smi.c / realtek-mdio.c into the common\nrtl83xx.c module and then into the rtl83xx_reset_assert() and\nrtl83xx_reset_deassert() helpers (both in v6.9).  This patch therefore\napplies as-is only to kernels that carry those helpers (v6.9+); older\nstable kernels need the same gpiod_set_value_cansleep() conversion at the\ncorresponding open-coded call sites.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-80999",
          "url": "https://www.suse.com/security/cve/CVE-2026-80999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280269 for CVE-2026-80999",
          "url": "https://bugzilla.suse.com/1280269"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-80999"
    },
    {
      "cve": "CVE-2026-81000",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81000"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: bound receive headroom\n\ntun_get_user() uses tun-\u003ealign both as skb headroom and when choosing how\nmuch packet data to keep linear. OVS can propagate an oversized headroom\nrequest from another port to TUN or TAP.\n\nWhen align is larger than the usable space in a one-page skb head,\nSKB_MAX_HEAD(align) underflows and the result becomes negative when stored\nin good_linear. That value later wraps when assigned to the size_t linear\nvariable, and tun_alloc_skb() can place skb-\u003edata outside the allocated\nhead.\n\nBound the headroom stored by TUN to the one-page skb-head budget and the\nlargest non-sentinel 16-bit skb header offset. Leave one linear byte for\nraw TUN and a complete Ethernet header for TAP, including NET_IP_ALIGN.\n\nAlso pull the raw-TUN protocol byte and the TAP Ethernet header before\naccessing them, so these checks remain safe for nonlinear skbs supplied by\nother allocation paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81000",
          "url": "https://www.suse.com/security/cve/CVE-2026-81000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280263 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1280263"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280265 for CVE-2026-81000",
          "url": "https://bugzilla.suse.com/1280265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-81000"
    },
    {
      "cve": "CVE-2026-81003",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81003"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/iucv: filter frames in afiucv_hs_rcv() by ingress device\n\nafiucv_hs_rcv() selects a socket from iucv_sk_list by matching four 8-byte\nname fields in the transport header alone. No check is made against the\nnet_device the frame arrived on.\n\nThis can cause a frame arriving on any netdev to be delivered to an AF_IUCV\nsocket. Three problems follow.\n\nFirst, a frame arriving over HiperSockets can be delivered to a socket\nbound to the classic z/VM IUCV transport, which has iucv-\u003ehs_dev == NULL.\niucv_sock_bind() takes the classic path whenever the requested userid\nmatches iucv_userid, even on a guest that also has a HiperSockets device\ncarrying the same identifier. The child socket created by\nafiucv_hs_callback_syn() for such a match inherits hs_dev = NULL and\ntransport = AF_IUCV_TRANS_HIPER, so the first send() on it returns -ENODEV.\nThe socket delivered to accept() is unusable.\n\nSecond, a frame arriving on one netdev can be delivered to a socket bound\nto a different IQD device. Which can lead to\n- Accept-queue exhaustion (DoS)\n- Attacker-controlled peer identity in the child socket\n- Data injection into existing sockets\n- Fabric noise on the IQD fabric, where bogus replies are sent\n- killing established connections\n\nThird, all AF_IUCV sockets live in init_net, as iucv_sock_alloc() calls\nsk_alloc(\u0026init_net, ...). But even frames arriving on netdev devices in a\nnamespace can be delivered to an IUCV socket. So a process in an\nunprivileged user and network namespace holding only the CAP_NET_RAW\ncapability valid within that namespace can send a raw ETH_P_AF_IUCV frame\non its own lo device and have it matched against init_net sockets.\n\nFix all three by skipping any socket whose hs_dev does not match the\ningress device. A classic z/VM IUCV socket has hs_dev == NULL; the ingress\ndev is never NULL, so classic sockets are skipped automatically. An unbound\nHIPER socket also has hs_dev == NULL and is skipped. A bound HIPER socket\nis only reachable from the exact IQD device it was bound to. Because hs_dev\nis always a device in init_net (iucv_sock_bind() scans\nfor_each_netdev_rcu(\u0026init_net, ...) exclusively), a frame whose ingress\ndevice belongs to another namespace never matches any socket.\n\nNote that AF_IUCV over HiperSockets provides no per-connection\nauthentication: no sequence numbers, no TLS, no nonce. The four name fields\nidentifying a connection are exchanged in plaintext on the shared\nHiperSockets segment (VCHID). Any host on the same HiperSockets segment\ncould spoof any frame type against an existing connection. That is a\nprotocol-level property unchanged by this patch. The fix reduces the attack\nsurface to peers present on the same HiperSockets segment.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81003",
          "url": "https://www.suse.com/security/cve/CVE-2026-81003"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280302 for CVE-2026-81003",
          "url": "https://bugzilla.suse.com/1280302"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280304 for CVE-2026-81003",
          "url": "https://bugzilla.suse.com/1280304"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-81003"
    },
    {
      "cve": "CVE-2026-81005",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81005"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: si: Fix NULL pointer dereference after failed registration\n\ntry_smi_init() allocates new_smi-\u003esi_sm and later calls\nipmi_register_smi_mod(), which maps to ipmi_add_smi().\n\nDuring ipmi_add_smi(), the upper IPMI message handler obtains the\ninitial BMC device information through __bmc_get_device_id(). This can\nfail if the BMC does not return a successful response to the Get Device\nID command.\n\nWhen the BMC returns a nonzero completion code, the device-id helper\nretries the command and eventually returns -EIO if the device ID still\ncannot be fetched.\n\nOn this failure path, ipmi_add_smi() logs \"Unable to get the device id\"\nand goes to out_err_started, where it invokes the lower driver\u0027s\nshutdown callback. try_smi_init() then logs the returned registration\nfailure:\n\n ipmi_si IPI0001:00: IPMI message handler: Unable to get the device id: -5\n ipmi_si IPI0001:00: Unable to register device: error -5\n\nFor ipmi_si, the shutdown callback is shutdown_smi(), which cleans up\nthe SI state machine data, frees smi_info-\u003esi_sm, and sets\nsmi_info-\u003esi_sm and smi_info-\u003eintf to NULL.\n\nHowever, intf-\u003ein_shutdown is not set on this failed-registration\nrollback path. Therefore, the asynchronous redo_bmc_reg work item can\nstill retry BMC device-id probing after the lower driver has already\ncleared its SI state machine data. In the observed case, that retry path\nreached start_next_msg(), which passed the NULL smi_info-\u003esi_sm pointer\nto the selected KCS state machine handler:\n\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000000\nWorkqueue: events redo_bmc_reg [ipmi_msghandler]\nRIP: start_kcs_transaction+0x2c/0x190 [ipmi_si]\nCall Trace:\n start_next_msg+0x50/0x80 [ipmi_si]\n check_start_timer_thread.part.9+0x3b/0x50 [ipmi_si]\n sender+0x69/0x80 [ipmi_si]\n i_ipmi_request+0x2ac/0x9d0 [ipmi_msghandler]\n __get_device_id.isra.29+0xaa/0x180 [ipmi_msghandler]\n __bmc_get_device_id+0xef/0x950 [ipmi_msghandler]\n redo_bmc_reg+0x52/0x60 [ipmi_msghandler]\n process_one_work+0x1a7/0x360\n\nSet intf-\u003ein_shutdown on the out_err_started path before invoking the\nlower driver\u0027s shutdown callback. This prevents later redo_bmc_reg\nretries from using an interface whose lower driver state has been\ncleaned up, and applies the same shutdown state to other IPMI interfaces\nas well.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81005",
          "url": "https://www.suse.com/security/cve/CVE-2026-81005"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280230 for CVE-2026-81005",
          "url": "https://bugzilla.suse.com/1280230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81005"
    },
    {
      "cve": "CVE-2026-81006",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81006"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: Remove all sysfs files on registration failure\n\nipmi_add_smi() creates the nr_users and nr_msgs files before trying to\ncreate the maintenance_mode file. If that last creation fails, the error\npath removes only nr_users before dropping the final reference to the\ninterface.\n\nRemove nr_msgs as well so no sysfs attribute embedded in the freed\ninterface remains registered.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81006",
          "url": "https://www.suse.com/security/cve/CVE-2026-81006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280222 for CVE-2026-81006",
          "url": "https://bugzilla.suse.com/1280222"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-81006"
    },
    {
      "cve": "CVE-2026-81007",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81007"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: ipmb: validate write message length\n\nipmb_write() read message fields before validating the length byte.\n\nA zero or short write can read uninitialized stack bytes.\n\nA length smaller than the SMBus header underflows the block write length.\n\nRequire a non-empty buffer and the minimum IPMB request length.\n\nAlso require the length byte plus payload before parsing the message.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81007",
          "url": "https://www.suse.com/security/cve/CVE-2026-81007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280221 for CVE-2026-81007",
          "url": "https://bugzilla.suse.com/1280221"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81007"
    },
    {
      "cve": "CVE-2026-81008",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81008"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninterconnect: Fix use after free in icc_get() and of_icc_get_by_index()\n\nIn of_icc_get_by_index() and icc_get(), if the dynamic allocation for\npath-\u003ename fails via kasprintf(), the error handling path directly\ncalls kfree(path) to free the path object and returns an error.\n\nHowever, prior to this point, path_find() calls path_init(), which\nalready links the path\u0027s requests into the req_list of the respective\ninterconnect nodes via hlist_add_head(). Directly invoking kfree(path)\nleaves dangling pointers in the hlist. A subsequent call to icc_get()\nor icc_set_bw() will traverse or modify these corrupted lists, triggering\na slab use afterfree.\n\nKASAN report showing the vulnerability when reproducing via debugfs:\n\n  BUG: KASAN: slab-use-after-free in path_find+0x6f8/0xcfc\n  Write of size 8 at addr fff000000d43f748 by task sh/1\n  ...\n  Call trace:\n   kasan_report+0xac/0xfc\n   path_find+0x6f8/0xcfc\n   icc_get+0x148/0x380\n   icc_get_set+0xf8/0x2d0\n  ...\n  Freed by task 1:\n   kfree+0x1a0/0x4a4\n   icc_get+0x2cc/0x380\n   icc_get_set+0xf8/0x2d0\n\nFix this by replacing kfree(path) with the proper teardown function,\nicc_put(path), which safely removes the requests from the req_list using\nhlist_del() and drops the provider usage references before freeing the\nmemory.\n\nAdditionally, in icc_get(), ensure that the icc_lock mutex is released\nprior to calling icc_put(path) to avoid a deadlock, as icc_put()\ninternally acquires the same lock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81008",
          "url": "https://www.suse.com/security/cve/CVE-2026-81008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280306 for CVE-2026-81008",
          "url": "https://bugzilla.suse.com/1280306"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81008"
    },
    {
      "cve": "CVE-2026-81009",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81009"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/query: cap user size passed to copy_struct_to_user\n\nio_handle_query_entry() clamps hdr.size for the inbound copy_from_user()\nbut keeps the original user value as usize. copy_struct_to_user() uses\nthat usize and, when it is larger than the kernel result, clear_user()s\nthe trailing bytes.\n\nAs hdr.size is a __u32, a query can request nearly 4 GiB of zeroing,\nincluding on the error path where res_size stays 0. The interface is\nreachable without a ring via IORING_REGISTER_QUERY.\n\nReject sizes larger than PAGE_SIZE, as recommended for copy_struct_*\ninterfaces.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81009",
          "url": "https://www.suse.com/security/cve/CVE-2026-81009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280313 for CVE-2026-81009",
          "url": "https://bugzilla.suse.com/1280313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81009"
    },
    {
      "cve": "CVE-2026-81010",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81010"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: honor task_work cancellation\n\nio_waitid_cb() may run through the fallback task_work path when\ntask_work_add() can no longer queue work to the originating task. The\nfallback runs from a kworker and io_uring marks such task work as\ncanceled through tw.cancel.\n\nio_waitid_cb() currently ignores tw.cancel and calls __do_wait().\nwaitid is task-context dependent: __do_wait() performs child lookup\nrelative to current, and the retry path also uses\ncurrent-\u003esignal-\u003ewait_chldexit. If the callback runs from the fallback\nkworker, current is therefore not the task that submitted the request.\n\nHonor tw.cancel before entering __do_wait(). Complete the request with\n-ECANCELED and skip the siginfo copy, since canceled task work may run\nwithout the submitting task\u0027s userspace execution context.\n\nKeep the existing siginfo handling for normal waitid completion and\nexplicit cancellation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81010",
          "url": "https://www.suse.com/security/cve/CVE-2026-81010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280328 for CVE-2026-81010",
          "url": "https://bugzilla.suse.com/1280328"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81010"
    },
    {
      "cve": "CVE-2026-81011",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81011"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: pass validated element count to package parsers\n\nThe per-type package parsers are handed the wrong element count.\n\nhp_init_bios_package_attribute() validates obj-\u003epackage.count and then\ncalls one of the five hp_populate_*_package_data() wrappers (string,\ninteger, enumeration, ordered list, password). Each wrapper forwards a\ncount to its hp_populate_*_elements_from_package() parser, but instead\nof forwarding the validated obj-\u003epackage.count it derives the count\nfrom elements[0]. elements[0] is the NAME field and is always an\nACPI_TYPE_STRING, so reading -\u003epackage.count from it in fact reads\n-\u003estring.length through the union acpi_object. The parsers thus bound\nthemselves against the length of the name string rather than against\nthe real number of elements in the package.\n\nThis is safe today because hp_init_bios_package_attribute() refuses any\npackage that has fewer than the type\u0027s element count, so a parser only\never runs on a full package and never reads past it regardless of the\nbogus bound.\n\nAn upcoming change relaxes that check to accept shorter packages. Once\na parser can receive fewer elements than its per-type count, a bound\ntaken from the name length no longer reflects the array size, and the\n\"elem \u003c count\" loop conditions and \"elem + n \u003e= count\" sub-loop guards\nread past the end of elements[] - an out-of-bounds heap read.\n\nForward the validated obj-\u003epackage.count to every *_package_data()\nwrapper so the parsers bound themselves against the real package size.\nThis does not change behaviour for the packages that enumerate\ncorrectly today and is a prerequisite for accepting shorter packages\nsafely.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81011",
          "url": "https://www.suse.com/security/cve/CVE-2026-81011"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280332 for CVE-2026-81011",
          "url": "https://bugzilla.suse.com/1280332"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81011"
    },
    {
      "cve": "CVE-2026-81012",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81012"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()\n\nhp_get_string_from_buffer() clamps the converted string length against\nthe destination buffer size with \"size \u003e dst_size\", so when the\nconverted length is exactly equal to dst_size, conv_dst_size is left\nat dst_size and the unconditional NUL terminator write\n\n\tdst[conv_dst_size] = 0;\n\nlands one byte past the destination buffer. This is the same shape of\nbug as the previously fixed off-by-one in hp_convert_hexstr_to_str():\nthe buffer is sized correctly for the content, but the terminator\nwrite is never checked against that size.\n\nFix by changing the comparison to \"\u003e=\" so conv_dst_size is always left\nwith room for the terminator.\n\nAll fixed-size destinations that reach this function (path[512],\ncurrent_value[512], current_password/current_value[64], and the\nper-entry buffers in encodings[][512] and prerequisites[][512]) are\naffected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81012",
          "url": "https://www.suse.com/security/cve/CVE-2026-81012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280312 for CVE-2026-81012",
          "url": "https://bugzilla.suse.com/1280312"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81012"
    },
    {
      "cve": "CVE-2026-81013",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81013"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: fix heap OOB read on empty password write\n\nvalidate_password_input() computes length = strlen(buf) and then\nchecks buf[length - 1] to strip a trailing newline, without checking\nthat length is nonzero first. Writing an empty string (a bare \u0027\\n\u0027)\nto current_password or new_password gives length == 0, and\nbuf[length - 1] reads buf[-1], one byte before the heap allocation\nholding the copied input.\n\nKASAN confirms this directly:\n\n  BUG: KASAN: slab-out-of-bounds in store_password_instance.constprop.0+0x223/0x2a0 [hp_bioscfg]\n  Read of size 1 at addr ffff88811bd8da9f by task sh/13740\n  ...\n  store_password_instance.constprop.0+0x223/0x2a0 [hp_bioscfg]\n  current_password_store+0x14/0x20 [hp_bioscfg]\n  ...\n  The buggy address is located 23 bytes to the right of\n  allocated 8-byte region [ffff88811bd8da80, ffff88811bd8da88)\n\nReproduced identically via new_password_store. Execution continues\npast the bad read (the garbage byte only affects whether \"length\" is\ndecremented by one), so the write completes and returns success; this\nis a pure information read past the buffer, not a crash, but it is\nstill an out-of-bounds access KASAN correctly flags.\n\nFix by only checking buf[length - 1] when length is nonzero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81013",
          "url": "https://www.suse.com/security/cve/CVE-2026-81013"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280331 for CVE-2026-81013",
          "url": "https://bugzilla.suse.com/1280331"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81013"
    },
    {
      "cve": "CVE-2026-81014",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81014"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()\n\nsk_store() and kek_store() strip a trailing newline from the sysfs\nwrite before allocating the key buffer:\n\n\tlength = count;\n\tif (buf[length - 1] == \u0027\\n\u0027)\n\t\tlength--;\n\tbioscfg_drv.spm_data.signing_key = kmemdup(buf, length, GFP_KERNEL);\n\nbut then pass the original \"count\" (not \"length\") as the copy size to\nhp_wmi_perform_query(), which memcpy()s that many bytes out of the\n\"length\"-sized allocation, reading one byte past it whenever the write\nends in a newline, the normal case for a shell \"echo\" into sysfs.\n\nKASAN confirms this directly:\n\n  BUG: KASAN: slab-out-of-bounds in hp_wmi_perform_query+0x1e9/0x460 [hp_bioscfg]\n  Read of size 28 at addr ffff88813c8e2b80 by task python3/16022\n  ...\n  sk_store+0xa7/0x240 [hp_bioscfg]\n  kernfs_fop_write_iter+0x3e1/0x5d0\n  ...\n  The buggy address is located 0 bytes inside of\n  allocated 27-byte region [ffff88813c8e2b80, ffff88813c8e2b9b)\n\nReproduced identically for kek_store, and at multiple write sizes\n(28, 57, 201 bytes), each time reading exactly one byte past a\nkmemdup() allocation one byte smaller than the write.\n\nFix by passing \"length\" instead of \"count\" to hp_wmi_perform_query()\nin both functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81014",
          "url": "https://www.suse.com/security/cve/CVE-2026-81014"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280330 for CVE-2026-81014",
          "url": "https://bugzilla.suse.com/1280330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81014"
    },
    {
      "cve": "CVE-2026-81015",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81015"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails\n\namd_pmc_probe() registers the LPS0 s2idle handler with\nacpi_register_lps0_dev() and creates the driver\u0027s debugfs directory before\ncalling amd_stb_s2d_init(), which is the last step in probe that can fail.\n\nWhen amd_stb_s2d_init() fails (for example the S2D telemetry region cannot\nbe ioremapped on a long-running system, or the SMU rejects the S2D setup)\nthe error path only calls pci_dev_put() and returns.  This leaves\namd_pmc_s2idle_dev_ops on the global lps0_s2idle_devops_head list and leaks\nthe debugfs directory, while the devm-managed resources backing the handler\nare torn down.\n\nReloading the module then walks the corrupted list in\nacpi_register_lps0_dev() and hits:\n\n  list_add corruption. next-\u003eprev should be prev, but was NULL.\n  kernel BUG at lib/list_debug.c:29!\n   acpi_register_lps0_dev+0x44/0x80\n   amd_pmc_probe+0x224/0x380 [amd_pmc]\n   platform_probe+0x67/0x90\n\nEven without a reload, the stale registration means the next s2idle\ntransition calls into torn-down driver state.\n\nUnwind the debugfs directory and the LPS0 registration on the\namd_stb_s2d_init() error path.  acpi_unregister_lps0_dev() is safe to call\nunconditionally here: it is guarded on the same conditions as\nacpi_register_lps0_dev(), which is exactly what amd_pmc_remove() already\nrelies on.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81015",
          "url": "https://www.suse.com/security/cve/CVE-2026-81015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280307 for CVE-2026-81015",
          "url": "https://bugzilla.suse.com/1280307"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81015"
    },
    {
      "cve": "CVE-2026-81016",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81016"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Propagate SMU errors and validate S2D address\n\namd_stb_s2d_init() discards the return value of several S2D SMU commands.\nWhen the SMU refuses a command (e.g. \"SMU cmd failed. err: 0xff\") the\nfailure is only noticed indirectly - if at all - and reported as -EIO,\nmasking the real error.\n\nMore seriously, the S2D_PHYS_ADDR_LOW/HIGH return values are ignored, so\non failure phys_addr_low/hi are left uninitialised and the assembled\naddress is passed straight to devm_ioremap().  When the SMU leaves them at\nzero this maps physical address 0 and trips the ioremap-on-RAM warning:\n\n  amd_pmc AMDI000B:00: SMU cmd failed. err: 0xff\n  ioremap on RAM at 0x0000000000000000 - 0x0000000000ffffff\n  WARNING: CPU: 13 PID: 4592 at arch/x86/mm/ioremap.c:...\n\nCheck the return value of each SMU command and propagate it, and reject a\nzero physical address before calling devm_ioremap().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81016",
          "url": "https://www.suse.com/security/cve/CVE-2026-81016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280329 for CVE-2026-81016",
          "url": "https://bugzilla.suse.com/1280329"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81016"
    },
    {
      "cve": "CVE-2026-81017",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81017"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/chrome: sensorhub: Bound the EC-reported sensor number\n\nEach EC FIFO event carries an 8-bit sensor number (in-\u003esensor_num).\ncros_ec_sensorhub_ring_handler() validates the FIFO event count, the\nper-read count and the ring bound, but not the sensor number, which\ncros_ec_sensor_ring_process_event() then uses unchecked to index\nsensorhub-\u003ebatch_state[] - allocated with only sensorhub-\u003esensor_num\nentries. A sensor number of sensor_num or larger is an out-of-bounds\nread and write of batch_state[].\n\nValidate the sensor number in the ring handler, where each event is read\nfrom the EC, and drop a malformed event before it is used.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81017",
          "url": "https://www.suse.com/security/cve/CVE-2026-81017"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280311 for CVE-2026-81017",
          "url": "https://bugzilla.suse.com/1280311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-81017"
    },
    {
      "cve": "CVE-2026-81018",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-81018"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: think-lmi: Free system certificate signatures\n\nMulti-certificate support also allows the system authentication object\nto store -\u003esignature and -\u003esave_signature, which leak when the driver is\nremoved. Free the signatures to avoid leaking memory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-81018",
          "url": "https://www.suse.com/security/cve/CVE-2026-81018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280308 for CVE-2026-81018",
          "url": "https://bugzilla.suse.com/1280308"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-81018"
    },
    {
      "cve": "CVE-2026-89436",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89436"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: panasonic-laptop: Fix sentinel write past pcc-\u003esinf[]\n\nacpi_pcc_retrieve_biosdata() rejects SINF packages only when\npcc-\u003enum_sifr is strictly less than hkey-\u003epackage.count, then\nunconditionally writes a trailing sentinel at\npcc-\u003esinf[hkey-\u003epackage.count]. But pcc-\u003esinf[] is allocated with\nexactly pcc-\u003enum_sifr elements (valid indices 0..num_sifr-1), so that\nwrite needs num_sifr strictly greater than package.count to stay in\nbounds -- num_sifr == package.count passes the existing check but\nstill overflows by one element.\n\nThis is exactly the case probe()\u0027s existing num_sifr++ workaround\n(\"Some DSDT-s have an off-by-one bug where the SINF package count is\none higher than the SQTY reported value\") is written to accommodate:\nwhen a DSDT\u0027s SINF package count equals SQTY+1, the workaround makes\nnum_sifr equal to package.count, which is precisely the boundary that\noverflows here. Found via UBSan (array-index-out-of-bounds) on\nhardware where HKEY.SQTY returns 37 and HKEY.SINF()\u0027s package has 38\nelements: num_sifr becomes 38 after the += 1 workaround, the loop\ncorrectly fills indices 0..37, and the sentinel write then targets\nindex 38, one past the end -- a silent 4-byte heap overflow on kernels\nwithout CONFIG_UBSAN.\n\nTightening the rejection check to num_sifr \u003c= package.count would\navoid the overflow but breaks probe() entirely on exactly this\nhardware, since num_sifr == package.count is the case the off-by-one\nworkaround exists to support. Nothing else in the driver reads this\nsentinel value back, so simply skip the write when there is no room\nfor it instead.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89436",
          "url": "https://www.suse.com/security/cve/CVE-2026-89436"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280310 for CVE-2026-89436",
          "url": "https://bugzilla.suse.com/1280310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89436"
    },
    {
      "cve": "CVE-2026-89437",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89437"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: int1092: Fix potential memory leak in sar_probe()\n\nThe memory allocated for device_mode_info in parse_package() called by\nsar_get_data() is not freed in some of the error paths in sar_probe().\nFix that by converting to use device managed allocations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89437",
          "url": "https://www.suse.com/security/cve/CVE-2026-89437"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280314 for CVE-2026-89437",
          "url": "https://bugzilla.suse.com/1280314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89437"
    },
    {
      "cve": "CVE-2026-89438",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89438"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: ISST: Validate logical CPU id and clos id\n\nValidate max CLOS ID and logical CPU ID for core power feature.\nReject any clos level or logical CPU number greater than the\nsupported maximum. These are used to calculate MMIO offset.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89438",
          "url": "https://www.suse.com/security/cve/CVE-2026-89438"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280315 for CVE-2026-89438",
          "url": "https://bugzilla.suse.com/1280315"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89438"
    },
    {
      "cve": "CVE-2026-89439",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89439"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: ISST: Add a NULL check for sst_inst[]\n\nTo be consistent with other places, add a NULL check for failed socket\nloading by checking isst_common.sst_inst[].",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89439",
          "url": "https://www.suse.com/security/cve/CVE-2026-89439"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280346 for CVE-2026-89439",
          "url": "https://bugzilla.suse.com/1280346"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89439"
    },
    {
      "cve": "CVE-2026-89440",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89440"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: via-sdmmc: stop card-detect handling on probe failure\n\nrequest_irq() registers the SD card-detect interrupt and the probe enables\nit before mmc_add_host() runs. If mmc_add_host() fails, the error path only\nunmaps the registers and returns: the interrupt stays registered, so the\nhandler keeps running against the host once it is freed. via_sdc_isr()\ndereferences sdhost and its MMIO base and schedules carddet_work, which\nvia_sdc_card_detect() also runs against freed memory through its\ncontainer_of() dereference.\n\nAdd a probe-error path that disables and frees the interrupt and cancels\ncarddet_work before unmapping. carddet_work can re-enable the device\ninterrupt via via_reset_pcictrl(), which restores PCIINTCTRL, so mask it\nagain after cancelling the work.\n\nThis issue was found by an in-house static analysis tool and confirmed by\nmanual code review.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89440",
          "url": "https://www.suse.com/security/cve/CVE-2026-89440"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280345 for CVE-2026-89440",
          "url": "https://bugzilla.suse.com/1280345"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89440"
    },
    {
      "cve": "CVE-2026-89441",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89441"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: via-sdmmc: cancel card-detect work on remove\n\nDisabling the device interrupt and freeing the IRQ prevents new card-detect\nwork from being queued, but carddet_work already queued by the handler can\nstill run after via_sd_remove() returns. via_sdc_card_detect() recovers the\nhost through container_of() and dereferences its MMIO base; once remove()\nreturns the host can be freed, so that work would touch freed memory.\n\nCancel carddet_work after freeing the IRQ and before cancelling\nfinish_bh_work, which the card-detect handler can also queue. carddet_work\ncan re-enable the interrupt through via_reset_pcictrl(); mask it again\nafterwards.\n\nThis issue was found by an in-house static analysis tool and confirmed by\nmanual code review.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89441",
          "url": "https://www.suse.com/security/cve/CVE-2026-89441"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280344 for CVE-2026-89441",
          "url": "https://bugzilla.suse.com/1280344"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89441"
    },
    {
      "cve": "CVE-2026-89442",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89442"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: ISST: Validate socket ID in clos_assoc ioctl\n\nisst_if_clos_assoc() validates the user-supplied socket_id with\n\u0027socket_id \u003e topology_max_packages()\u0027, but isst_common.sst_inst[] is\nallocated with topology_max_packages() entries, so the valid index range\nis [0, topology_max_packages()).  The \u0027\u003e\u0027 comparison lets\nsocket_id == topology_max_packages() pass and index one entry past the\narray.\n\nIn addition, isst_common.sst_inst[socket_id] is NULL for an in-range\npackage that has no bound TPMI SST instance, and the pointer is used\nwithout a NULL check.  Both the out-of-bounds entry and the NULL pointer\nare then dereferenced by map_partition_power_domain_id() and the\nfollowing power_domain_info access.\n\nReject socket_id \u003e= topology_max_packages() and a NULL sst_inst, matching\nthe checks already performed by get_instance().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89442",
          "url": "https://www.suse.com/security/cve/CVE-2026-89442"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280316 for CVE-2026-89442",
          "url": "https://bugzilla.suse.com/1280316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89442"
    },
    {
      "cve": "CVE-2026-89443",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89443"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: ISST: Validate level in perf mask ioctls\n\nisst_if_get_perf_level_mask() and isst_if_get_base_freq_mask() use the\nuser-provided level as an index into perf_levels[] via\n_read_pp_level_info() and _read_bf_level_info(), but neither helper\nvalidates it first.\n\nThe adjacent level-info helpers reject levels above max_level before\nreading the same per-level register block. Add the same bounds checks to\nthe mask helpers, and reject disabled SST-PP levels in\nisst_if_get_perf_level_mask() to match isst_if_get_perf_level_info().\n\nThis prevents out-of-bounds reads from the per-level offset table on\ninvalid ioctl input.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89443",
          "url": "https://www.suse.com/security/cve/CVE-2026-89443"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280319 for CVE-2026-89443",
          "url": "https://bugzilla.suse.com/1280319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89443"
    },
    {
      "cve": "CVE-2026-89445",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89445"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Fix UAF in selftest IOPF reporting\n\nIOMMUFD selftest TRIGGER_IOPF borrows an attach handle from\ngroup-\u003epasid_array without synchronizing against PASID detach,\nthen a concurrent iommu_report_device_fault() can dereference\nthat borrowed handle\u0027s domain pointer after the detach erases\nthe handle and frees the backing struct iommufd_attach_handle.\nTRIGGER_IOPF then dereferences the freed handle, causing a UAF.\n\nFix by adding a iopf_rwsem in mock_dev to follow the expected design\nof a real driver. Hold its read side across the whole\niommu_report_device_fault() call, and its write side around every\npath that attaches, detaches, or replaces a device domain.\nThis can block new reports and drains in-flight reports before an old\nattach handle or the IOPF fault parameter can be removed.\nAlso take the write side while registering a mock device, since\nit can invoke the mock driver\u0027s default-domain attach callback.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89445",
          "url": "https://www.suse.com/security/cve/CVE-2026-89445"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280320 for CVE-2026-89445",
          "url": "https://bugzilla.suse.com/1280320"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89445"
    },
    {
      "cve": "CVE-2026-89446",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89446"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Release current IOAS on xa_store() failure\n\niommufd_take_all_iova_rwsem() takes an object reference and the\niova_rwsem write lock before storing the IOAS in the temporary ioas_list\nxarray.\n\nIf xa_store() fails, the current IOAS has not been inserted into\nioas_list yet. iommufd_release_all_iova_rwsem() only unwinds IOAS\nobjects already present in that xarray, so it cannot release the current\nIOAS.\n\nRelease the current IOAS rwsem and object reference before unwinding the\npreviously stored entries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89446",
          "url": "https://www.suse.com/security/cve/CVE-2026-89446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280321 for CVE-2026-89446",
          "url": "https://bugzilla.suse.com/1280321"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89446"
    },
    {
      "cve": "CVE-2026-89447",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89447"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Avoid locking internal accesses during unmap\n\niommufd_access_notify_unmap() skips internal accesses because they do\nnot have an external unmap callback to invoke.\n\nHowever, the current test calls iommufd_lock_obj() before checking\nwhether the access is internal. If iommufd_lock_obj() succeeds, the loop\nthen sees the internal access and continues, bypassing the matching\niommufd_put_object() used by the normal unmap path. This leaks the\nobject reference taken by iommufd_lock_obj().\n\nCheck for internal accesses first so skipped entries are never locked.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89447",
          "url": "https://www.suse.com/security/cve/CVE-2026-89447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280322 for CVE-2026-89447",
          "url": "https://bugzilla.suse.com/1280322"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89447"
    },
    {
      "cve": "CVE-2026-89456",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89456"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Propagate partial completion length across ERP recovery\n\ndasd_default_erp_postaction() copies the timing and device state from\nthe finished ERP request back to the original request but drops\nproc_bytes. A request that was partially completed, an ESE read of a\nnot-yet-allocated track returns fewer bytes than requested, and then\nrecovered through the ERP chain loses its partial-completion length.\n__dasd_cleanup_cqr() then sees proc_bytes == 0 and completes the whole\nrequest instead of requeueing the remainder, silently returning zeroed\ndata for the part that was never read.\n\nCarry proc_bytes over to the original request like the other\nper-request state.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89456",
          "url": "https://www.suse.com/security/cve/CVE-2026-89456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280326 for CVE-2026-89456",
          "url": "https://bugzilla.suse.com/1280326"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89456"
    },
    {
      "cve": "CVE-2026-89457",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89457"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Guard sysfs discipline callbacks against unallocated private data\n\nSeveral sysfs show/store handlers call a discipline callback that\ndereferences device-\u003eprivate, either directly or through the\nDASD_DEFINE_ATTR() macro. During dasd_generic_set_online() the discipline\nis assigned before check_device() allocates device-\u003eprivate, so an\nunprivileged read of one of these world-readable attributes in that window\ndereferences a NULL pointer and panics.\n\nGuard the dereference inside each callback that actually touches\ndevice-\u003eprivate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89457",
          "url": "https://www.suse.com/security/cve/CVE-2026-89457"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280325 for CVE-2026-89457",
          "url": "https://bugzilla.suse.com/1280325"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89457"
    },
    {
      "cve": "CVE-2026-89458",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89458"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: Do not complete a failed ESE read as successful\n\ndasd_int_handler() completes an NRF read of an unallocated ESE track by\ncalling ese_read() and unconditionally marking the request\nDASD_CQR_SUCCESS. dasd_eckd_ese_read() can return an error before it has\nzeroed the destination buffer: a failed sense-data parse or a current\ntrack outside the requested range both return early, leaving the\ndestination pages untouched. The request is still completed successfully,\nso the block layer is handed stale / uninitialized memory instead of\nzeros.\n\nCheck the ese_read() return value and fail the request through the normal\nerror path instead of forcing DASD_CQR_SUCCESS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89458",
          "url": "https://www.suse.com/security/cve/CVE-2026-89458"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280318 for CVE-2026-89458",
          "url": "https://bugzilla.suse.com/1280318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89458"
    },
    {
      "cve": "CVE-2026-89459",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89459"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/percpu: Fix MVIY_PERCPU() with older binutils\n\nCommit a737737cdb9c (\"s390/percpu: Infrastructure for more efficient\nthis_cpu operations\") introduced MVIY_PERCPU(), which stringifies\narguments that are already C string literals. This generates an\nassembler macro invocation with whitespace-separated quoted arguments:\n\n  GEN_MVIY \"459712\" \"%r3\"\n\nGNU as versions prior to binutils 2.39 drop the separating whitespace\nbetween quoted macro arguments during input scrubbing. They\nconsequently parse the invocation as a single argument and emit\nrepeated warnings:\n\n  Warning: missing closing `\"\u0027\n\nThe .ifc in GEN_MVIY never matches and GNU as exits successfully\nwithout emitting the mviy instruction. As a result, the interrupted\nper-CPU sequence is not marked in lowcore and the exception return\npath cannot repair the per-CPU address register after migration.\n\nAll MVIY_PERCPU() callers pass C string literals. Use them directly\nand separate the assembler macro arguments with an explicit comma. The\nresulting invocation is:\n\n  GEN_MVIY 459712, %r3\n\nThis form is unambiguous for GNU as and LLVM\u0027s integrated assembler.\nThis behavior was fixed in GNU as from binutils 2.39, but Linux\nsupports binutils 2.30.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89459",
          "url": "https://www.suse.com/security/cve/CVE-2026-89459"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280324 for CVE-2026-89459",
          "url": "https://bugzilla.suse.com/1280324"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89459"
    },
    {
      "cve": "CVE-2026-89460",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89460"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks\n\nThe command \u0027perf stat -e cycles -- \u003ccommand\u003e\u0027 crashes the kernel\nwhen CPUs are hotplug added during that run.\n\nRoot cause is the allocation of struct cpu_cf_events at first\nevent initialization. The allocation is dynamic and the first\nevent that has task context creates such a structure for\neach online CPU. This is not sufficient. CPUs may be offline\nduring event creation and can be set online during the\nperf run time. For example commands\n\n # echo 0 \u003e /sys/devices/system/cpu/cpu1/online\n # perf stat -e cycles -i -- stress-ng -t10s --matrix X\n # sleep 1\n # echo 1 \u003e /sys/devices/system/cpu/cpu1/online\n\ncreate an event for CPUs 0,2-X. Since the events are created with\ntask-context, the scheduler will eventually schedule the program\non CPU1. This CPU has not created and initialized any per\nCPU event infrastructure as that CPU was not online at the time\nof the perf invocation. Thus when the scheduler runs stress-ng\non CPU1, the function cpumf_pmu_add() refers to a NULL pointer:\n\n struct cpu_cf_events *cpuhw = this_cpu_cfhw();\n\nThis function call is invoked after the task stress-ng has been\nmade runnable on CPU1. And this_cpu_cfhw() returns NULL.\n\nThe result is a panic:\nUnable to handle kernel pointer dereference in virtual kernel address space\nFailing address: 0000000000000000 TEID: 0000000000000483\n....\nKrnl PSW : 0404d00180000000 000003ef8291fd0c (cpumf_pmu_add+0x3c/0x80)\n....\nCall Trace:\n [\u003c000003ef8291fd0c\u003e] cpumf_pmu_add+0x3c/0x80\n [\u003c000003ef82bb5e3e\u003e] event_sched_in+0xae/0x190\n [\u003c000003ef82bb60d6\u003e] merge_sched_in+0x1b6/0x390\n [\u003c000003ef82bb65b8\u003e] visit_groups_merge.constprop.0.isra.0+0x308/0x5b0\n [\u003c000003ef82bb689a\u003e] pmu_groups_sched_in+0x3a/0x50\n [\u003c000003ef82bb6a30\u003e] ctx_sched_in+0x180/0x260\n [\u003c000003ef82bb780c\u003e] perf_event_context_sched_in+0x11c/0x2d0\n [\u003c000003ef82bb79ee\u003e] __perf_event_task_sched_in+0x2e/0xc0\n [\u003c000003ef82994834\u003e] finish_task_switch.isra.0+0x1a4/0x250\n....\nLast Breaking-Event-Address:\n [\u003c000003ef8291f1d8\u003e] this_cpu_cfhw+0x38/0x40\n\nThe issue arises only in per-task context when the CPUMF facility is\nused and the scheduler picks a random CPU for such a process to run on.\nThe scheduler enables the CPUMF infrastructure via PMU callback\nfunctions pmu::add() and pmu::del().\n\nIntroduce a CPU hotplug prepare/dead callback pair which creates and\nremoves the per CPU counter data while the CPU is offline. Count the\nusers which track every CPU (cpu == -1), that is perf_event_open()\nevents with task context and /dev/hwctr device sessions, in the new\ncounter cpu_cf_root::tskcnt, protected by pmc_reserve_mutex.\nThis ensures the infrastructure is available when\nnew CPU is selected to run the per-task context process.\n\nIn cpum_cf_free_root() and cpum_cf_free_cpu() ensure the reference\npointer to data structures is set to NULL before the data is freed\nto prevent interrupt handlers to access stale data.\n\n[gor@linux.ibm.com: change commit message]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89460",
          "url": "https://www.suse.com/security/cve/CVE-2026-89460"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280327 for CVE-2026-89460",
          "url": "https://bugzilla.suse.com/1280327"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89460"
    },
    {
      "cve": "CVE-2026-89476",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89476"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix stream-\u003eoutcnt underflow on duplicate RECONF responses\n\nA cached RECONF chunk may contain more than one request parameter.  A\nduplicate response can therefore find and process the same ADD_OUT request\nagain while another parameter is still outstanding, rolling back outcnt\ntwice and possibly underflowing it.\n\nTrack outstanding request types as bits and clear each bit after its first\nresponse.  Later responses for the same request are then ignored.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89476",
          "url": "https://www.suse.com/security/cve/CVE-2026-89476"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280337 for CVE-2026-89476",
          "url": "https://bugzilla.suse.com/1280337"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89476"
    },
    {
      "cve": "CVE-2026-89477",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89477"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix NULL deref on untransmitted RECONF completion\n\nsctp_process_strreset_outreq(), sctp_process_strreset_addstrm_out() and\nsctp_process_strreset_resp() complete a pending stream reconfiguration\nrequest by stopping the reconf timer on the transport it was sent on:\n\n\tt = asoc-\u003estrreset_chunk-\u003etransport;\n\tif (timer_delete(\u0026t-\u003ereconf_timer))\n\t\tsctp_transport_put(t);\n\nchunk-\u003etransport is assigned by __sctp_packet_append_chunk() when the\nchunk is appended to an outbound packet, and sctp_outq_flush_ctrl() arms\nthe reconf timer at that same point. A request already published in\nasoc-\u003estrreset_chunk but not yet transmitted has neither, so completing\nit dereferences NULL.\n\nTwo ways to get there. sctp_send_asconf_del_ip() sets\nasoc-\u003esrc_out_of_asoc_ok without sending anything when the address being\nremoved is the association\u0027s last one, and sctp_outq_flush_ctrl() then\nleaves every non-ASCONF control chunk queued; as only\nsctp_process_asconf_ack() clears that flag, it persists. An unprivileged\nprocess that removes such an address and then asks for a stream reset\npanics the kernel from softirq. A peer needs neither ASCONF nor local\nhelp: sctp_cmd_interpreter() uncorks the outqueue only once the whole\npacket has been processed, so a reply built while walking a RECONF chunk\nstays untransmitted for the rest of that walk, and one RECONF chunk\ncarrying [Incoming SSN Reset Request, Outgoing SSN Reset Request,\nResponse] -- or two RECONF chunks in one packet -- reaches the same\ndereference.\n\n  KASAN: null-ptr-deref in range [0x00000000000001e8-0x00000000000001ef]\n  RIP: 0010:timer_delete+0x67/0x110\n  Call Trace:\n   \u003cIRQ\u003e\n   sctp_process_strreset_addstrm_out (net/sctp/stream.c:832)\n   sctp_sf_do_reconf (net/sctp/sm_statefuns.c:4212)\n   sctp_do_sm (net/sctp/sm_sideeffect.c:1172)\n   sctp_assoc_bh_rcv (net/sctp/associola.c:1044)\n   sctp_rcv (net/sctp/input.c:243)\n   ip_local_deliver (net/ipv4/ip_input.c:262)\n   process_backlog (net/core/dev.c:6680)\n   \u003c/IRQ\u003e\n\nA response can only acknowledge a request that was actually sent, so do\nnot match asoc-\u003estrreset_chunk while chunk-\u003etransport is NULL. Guarding\nthe lookup covers all three completion sites.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89477",
          "url": "https://www.suse.com/security/cve/CVE-2026-89477"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280338 for CVE-2026-89477",
          "url": "https://bugzilla.suse.com/1280338"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89477"
    },
    {
      "cve": "CVE-2026-89482",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89482"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone\n\nCommit 25e5cb780e62 (\"nvme-tcp: fix possible crash in write_zeroes\nprocessing\") established that blk_rq_payload_bytes() must not be read\nwithout first checking blk_rq_nr_phys_segments(), and recorded the\nresult in nvme_tcp_setup_cmd_pdu() as req-\u003edata_len. The receive side\nwas left as it was.\n\nThe two differ for REQ_OP_WRITE_ZEROES, which has no physical segments\nbut a non-zero blk_rq_bytes(), so setup leaves req-\u003eiter untouched\nwhile the receive gate lets a C2HData through and nvme_tcp_recv_data()\ncopies into whatever the previous command on that tag left there. The\ndriver-private area is zeroed only when the tag set is allocated.\n\nReproduced with a test target that leaves a residual iterator on a tag\nand then sends a C2HData for a WRITE_ZEROES command on the same tag:\n\nBUG: KASAN: wild-memory-access in _copy_to_iter+0x642/0x1330\nWrite of size 512 at addr ffe728c2175dfa81 by task kworker/0:1H/103\n\nCPU: 0 UID: 0 PID: 103 Comm: kworker/0:1H Not tainted 7.2.0-rc5-NVMETCP-gf5098b6bae76 #1 PREEMPT(lazy)\nHardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nWorkqueue: nvme_tcp_wq nvme_tcp_io_work\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x53/0x70\n kasan_report+0xce/0x100\n ? _copy_to_iter+0x642/0x1330\n kasan_check_range+0x105/0x1b0\n __asan_memcpy+0x3c/0x60\n _copy_to_iter+0x642/0x1330\n ? __pfx_sock_has_perm+0x10/0x10\n ? worker_thread+0x45b/0xd10\n ? __pfx__copy_to_iter+0x10/0x10\n ? _raw_spin_lock_bh+0x83/0xe0\n ? __pfx__raw_spin_lock_bh+0x10/0x10\n __skb_datagram_iter+0xf3/0x820\n ? __pfx_simple_copy_to_iter+0x10/0x10\n ? __asan_memcpy+0x3c/0x60\n ? skb_copy_bits+0x58d/0x830\n skb_copy_datagram_iter+0x37/0x120\n nvme_tcp_recv_skb+0xa07/0x4320\n ? __pfx_nvme_tcp_recv_skb+0x10/0x10\n __tcp_read_sock+0x1ab/0x810\n ? __pfx_nvme_tcp_recv_skb+0x10/0x10\n ? __pfx_lock_sock_nested+0x10/0x10\n ? __pfx___tcp_read_sock+0x10/0x10\n nvme_tcp_try_recv+0x152/0x1e0\n ? __pfx_nvme_tcp_try_recv+0x10/0x10\n ? __pfx_mutex_unlock+0x10/0x10\n nvme_tcp_io_work+0x1e4/0x6c0\n ? __schedule+0x181a/0x49f0\n ? __pfx_nvme_tcp_io_work+0x10/0x10\n process_one_work+0x633/0x1030\n\nKeep the blk_rq_payload_bytes() test and add req-\u003edata_len to it. The\nold test is what rejects a C2HData naming a tag that is no longer in\nflight, because blk_update_request() zeroes rq-\u003e__data_len on\ncompletion; req-\u003edata_len and req-\u003ecurr_bio are driver-private and\nsurvive completion, so they cannot stand in for it. Setup initialises\nthe iterator only when both req-\u003ecurr_bio and req-\u003edata_len are set, so\nthe gate now tests the same two.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89482",
          "url": "https://www.suse.com/security/cve/CVE-2026-89482"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280350 for CVE-2026-89482",
          "url": "https://bugzilla.suse.com/1280350"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280351 for CVE-2026-89482",
          "url": "https://bugzilla.suse.com/1280351"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89482"
    },
    {
      "cve": "CVE-2026-89483",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89483"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: zero the discard fallback page\n\nnvme_setup_discard() always maps sizeof(struct nvme_dsm_range) *\nNVME_DSM_MAX_RANGES = 4096 bytes as the DSM payload however many ranges\nthe command declares, because some devices ignore the \u0027Number of Ranges\u0027\nfield - the Fixes: commit records two that read past the declared ranges.\nA single-range discard fills only the first 16 bytes.\n\nNormally the buffer comes from kzalloc() and the other 4080 bytes are\nzero.  When that allocation fails the code falls back to the\nper-controller ctrl-\u003ediscard_page, which nvme_init_ctrl() obtains with\nalloc_page(GFP_KERNEL) and nothing ever zeroes, so those 4080 bytes are\nwhatever the page last held and are handed to the controller.  Reaching\nit requires the kzalloc(GFP_ATOMIC | __GFP_NOWARN) to fail, that is\nmemory pressure; it is not remotely triggerable.  Failing the allocation\nunder KMSAN reproduces it, with the leaked tail full of vmemmap struct\npage pointers.  The extent in the report is a partial transfer of the\npayload, not the whole 4096 bytes; the 16-byte boundary in it is the one\ndeclared range:\n\n[   11.991601] BUG: KMSAN: uninit-value in dma_map_phys+0x14c8/0x1900\n[   11.991969]  dma_map_phys+0x14c8/0x1900\n[   11.992220]  dma_map_page_attrs+0xcf/0x130\n[   11.992485]  e1000_xmit_frame+0x4099/0x6d10\n[   11.992768]  dev_hard_start_xmit+0x22f/0xa80\n[   11.993068]  sch_direct_xmit+0x35c/0xcb0\n[   11.993315]  __dev_queue_xmit+0x1ee5/0x5eb0\n[   11.993608]  ip_finish_output2+0x1903/0x1c30\n[   11.993881]  ip_finish_output+0x288/0x870\n[   11.994125]  ip_output+0x15e/0x400\n[   11.994365]  __ip_queue_xmit+0x1e85/0x1fb0\n[   11.994639]  ip_queue_xmit+0x60/0x80\n[   11.994899]  __tcp_transmit_skb+0x4e71/0x5fa0\n[   11.995210]  tcp_write_xmit+0x3a36/0x9160\n[   11.995533]  __tcp_push_pending_frames+0xc5/0x3c0\n[   11.995854]  tcp_push+0x7dc/0x840\n[   11.996076]  tcp_sendmsg_locked+0x766c/0x8400\n[   11.996371]  tcp_sendmsg+0x4b/0x90\n[   11.996572]  inet_sendmsg+0x134/0x2a0\n[   11.996823]  __sock_sendmsg+0x265/0x360\n[   11.997076]  sock_sendmsg+0x100/0x1e0\n[   11.997293]  nvme_tcp_try_send+0x196f/0x6370\n[   11.997605]  nvme_tcp_queue_rq+0x1d54/0x20b0\n[   11.997882]  blk_mq_dispatch_rq_list+0x5ee/0x2e50\n[   11.998175]  __blk_mq_sched_dispatch_requests+0x16dc/0x24a0\n[   11.998539]  blk_mq_sched_dispatch_requests+0x11b/0x2c0\n[   11.998865]  blk_mq_run_work_fn+0x13b/0x280\n[   11.999146]  process_scheduled_works+0x966/0x1ad0\n[   11.999465]  worker_thread+0xe44/0x1480\n[   11.999709]  kthread+0x53b/0x600\n[   11.999927]  ret_from_fork+0x29f/0x7c0\n[   12.000191]  ret_from_fork_asm+0x1a/0x30\n[   12.000460]\n[   12.000558] Uninit was created at:\n[   12.000788]  __alloc_frozen_pages_noprof+0x8bf/0xd30\n[   12.001096]  alloc_pages_mpol+0x1d0/0x5f0\n[   12.001326]  alloc_pages_noprof+0x102/0x290\n[   12.001627]  nvme_init_ctrl+0x5a3/0x9f0\n[   12.001891]  nvme_tcp_create_ctrl+0xd75/0x19b0\n[   12.002170]  nvmf_dev_write+0x4c68/0x4fd0\n[   12.002426]  vfs_write+0x587/0x1a10\n[   12.002636]  __x64_sys_write+0x207/0x4f0\n[   12.002874]  x64_sys_call+0x2ff0/0x3ea0\n[   12.003123]  do_syscall_64+0x147/0x3b0\n[   12.003400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f\n[   12.003680]\n[   12.003777] Bytes 16-2843 of 2844 are uninitialized\n[   12.004068] Memory access of size 2844 starts at ffff888109f82000\n[   12.004412]\n[   12.004530] CPU: 0 UID: 0 PID: 101 Comm: kworker/0:1H Not tainted 7.2.0-rc5-NVMECTL-gf5098b6bae76 #1 PREEMPT(lazy)\n[   12.005127] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[   12.005762] Workqueue: kblockd blk_mq_run_work_fn\n[   12.006073] =====================================================\n\nAllocate the page with __GFP_ZERO.  The single allocation site covers\nevery use of it: bytes no discard has written stay zero, and bytes one\ndid write hold that controller\u0027s own range list, which it has already\nbeen sent.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89483",
          "url": "https://www.suse.com/security/cve/CVE-2026-89483"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280349 for CVE-2026-89483",
          "url": "https://bugzilla.suse.com/1280349"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89483"
    },
    {
      "cve": "CVE-2026-89484",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89484"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlockd: fix NULL dereference on lockowner allocation failure\n\nnlmclnt_locks_init_private() installs NLM file lock operations even when\nnlmclnt_find_lockowner() fails to allocate a lockowner. nlmclnt_proc()\nthen returns -ENOMEM, but the VFS still tears down the partially\ninitialized file_lock and calls locks_release_private().\n\nThat invokes nlmclnt_locks_release_private(), which dereferences\nfl-\u003efl_u.nfs_fl.owner and crashes because the owner was never installed.\n\nClear fl_ops before attempting to initialize the NLM private state, and\ninstall the NLM lock operations only after a lockowner has been allocated\nsuccessfully.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89484",
          "url": "https://www.suse.com/security/cve/CVE-2026-89484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280343 for CVE-2026-89484",
          "url": "https://bugzilla.suse.com/1280343"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89484"
    },
    {
      "cve": "CVE-2026-89500",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89500"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Make cpu_buffer::free_page a buffer_data_read_page\n\nDiscarding a cached reader page after a concurrent ring buffer resize\nuses the new global subbuf_order for the free_pages() call. This\nmismatched order may crashes the kernel or leaks memory because the cached\npage was allocated under the old size.\n\nSave the actual free_page order alongside the page address to ensure we\nalways refer to the correct value and do not rely on the potentially\nstalled cpu_buffer-\u003esubbuf_order value. The simplest is to make\nfree_page a buffer_data_read_page which already covers exactly what we\nneed: a page address and a page order.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89500",
          "url": "https://www.suse.com/security/cve/CVE-2026-89500"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280333 for CVE-2026-89500",
          "url": "https://bugzilla.suse.com/1280333"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89500"
    },
    {
      "cve": "CVE-2026-89501",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89501"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Hold cpu_buffer::lock when resizing a subbuf\n\nBecause, ring_buffer_subbuf_order_set() can clear cpu_buffer-\u003efree_page,\nhold cpu_buffer-\u003elock to prevent races with\nring_buffer_alloc_read_page() and ring_buffer_free_read_page().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89501",
          "url": "https://www.suse.com/security/cve/CVE-2026-89501"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280335 for CVE-2026-89501",
          "url": "https://bugzilla.suse.com/1280335"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89501"
    },
    {
      "cve": "CVE-2026-89502",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89502"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Free cpu_buffer::free_page with subbuf_order\n\nWhen sub-buffers use an order greater than 0, cpu_buffer-\u003efree_page is\nallocated with subbuf_order. Use the correct order for\ncpu_buffer-\u003efree_page.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89502",
          "url": "https://www.suse.com/security/cve/CVE-2026-89502"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280336 for CVE-2026-89502",
          "url": "https://bugzilla.suse.com/1280336"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89502"
    },
    {
      "cve": "CVE-2026-89503",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89503"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()\n\nring_buffer_alloc_read_page() is racy with ring_buffer_subbuf_order_set,\nit can allocate a reader page with an outdated order. This isn\u0027t a big\nissue, the user can still re-allocate a new reader page and try again.\n\nHowever, what is more problematic is if the value of subbuf_order\nchanges in the middle of ring_buffer_alloc_read_page(). In that case,\nbpage-\u003eorder might not match the actual allocated memory.\n\nUse bpage-\u003eorder for the allocation to prevent this race.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89503",
          "url": "https://www.suse.com/security/cve/CVE-2026-89503"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280334 for CVE-2026-89503",
          "url": "https://bugzilla.suse.com/1280334"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89503"
    },
    {
      "cve": "CVE-2026-89573",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89573"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: reject an array block whose value size is not the caller\u0027s\n\narray_block_check() can only compare the header against itself, so a block\nwith value_size 4 and max_entries 1018 is internally consistent and passes.\ndm-cache keeps two arrays -- mappings at 8 bytes and hints at 4 -- and the\nroots for both live in the superblock. Point the mappings root at a hint\nblock and __load_mappings() walks it through an info whose value size is 8,\nso element_at() strides 8 bytes over 4-byte entries and reaches offset 8160\nof a 4096-byte block.\n\nget_ablock() and __shadow_ablock() are the two places that hold the block\nand the caller at once. Reject there when the two value sizes disagree.\nArrays only ever read their own blocks, so this fires on crafted metadata\nonly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89573",
          "url": "https://www.suse.com/security/cve/CVE-2026-89573"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280225 for CVE-2026-89573",
          "url": "https://bugzilla.suse.com/1280225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89573"
    },
    {
      "cve": "CVE-2026-89574",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89574"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: validate array block headers on read\n\narray_block_check() validates blocknr and csum and nothing else, while\nnode_check(), next to it, has bounded the structural fields since both\nwere written. dm_array_cursor_next() takes its loop bound from the\non-disk nr_entries and element_at() is unguarded pointer arithmetic, so\na count larger than the block holds keeps the cursor in one block while\nthe index grows past it and the read walks off the dm-bufio buffer --\ndm_cache_load_mappings() drives it once per cache block at activation.\n\nCheck the header against itself: reject a zero value_size, require\nmax_entries to equal calc_max_entries() for that value_size and block\nsize, and require nr_entries to fit. Equality rather than an upper bound,\nsince a count below the real capacity trips BUG_ON() in fill_ablock() and\ntrim_ablock(). Metadata dm-array writes satisfies all three.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89574",
          "url": "https://www.suse.com/security/cve/CVE-2026-89574"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280226 for CVE-2026-89574",
          "url": "https://bugzilla.suse.com/1280226"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89574"
    },
    {
      "cve": "CVE-2026-89575",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89575"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm raid1: reserve space for NUL-terminator in build_constructor_string()\n\nReserve space for the termination NUL after the maximum 20 decimal\ndigits of a long long value to avoid buffer overflow in sprintf().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89575",
          "url": "https://www.suse.com/security/cve/CVE-2026-89575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280213 for CVE-2026-89575",
          "url": "https://bugzilla.suse.com/1280213"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89575"
    },
    {
      "cve": "CVE-2026-89576",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89576"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-era: fix shadowed superblock leak on take-snap failure\n\nmetadata_take_snap() bumps the live superblock refcount and then\ndm_tm_shadow_block() allocates a new block for the metadata snapshot.\nIf the subsequent dm_sm_inc_block() of writeset_tree_root or\nera_array_root fails, the function only unlocks the clone and\nreturns.  The newly allocated shadow block is never returned to the\nmetadata space map, so each failed take-snap permanently leaks one\nmetadata block.\n\nFree the clone with dm_sm_dec_block() on those error paths, matching\nthe final step of metadata_drop_snap().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89576",
          "url": "https://www.suse.com/security/cve/CVE-2026-89576"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280210 for CVE-2026-89576",
          "url": "https://bugzilla.suse.com/1280210"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89576"
    },
    {
      "cve": "CVE-2026-89578",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89578"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-io: clone the source bio instead of copying its biovec\n\nFor DM_IO_BIO requests, do_region() built each destination bio by walking\nthe source bio\u0027s biovec and re-adding the pages one at a time, tracking\nthe remaining transfer in sectors. The vector lengths are byte granular\nand need not be sector aligned (e.g. a misaligned O_DIRECT buffer split\nacross pages), so the sector-based accounting could lose a sub-sector\nfragment: to_sector() truncated the remainder and the outer loop spun\nforever submitting empty bios, hanging the I/O.\n\nThere is no need to rebuild the biovec at all. The destination reads into\n(or writes from) exactly the same pages as the source bio, so the bio can\nsimply clone the source\u0027s biovec with bio_alloc_clone() and remap it to\nthe target device. The clone inherits the source\u0027s iterator and alignment,\nand the block layer splits it to the target\u0027s limits on submission, so the\nwhole region maps to a single cloned bio with no manual page copying or\nsector accounting.\n\nThis removes the per-page copy path (and its open-coded bvec dpages\nhelpers) for bio-backed I/O and fixes the hang on misaligned direct I/O to\na dm-mirror device. Page-list, vma and kmem sources keep the existing copy\npath.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89578",
          "url": "https://www.suse.com/security/cve/CVE-2026-89578"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280227 for CVE-2026-89578",
          "url": "https://bugzilla.suse.com/1280227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89578"
    },
    {
      "cve": "CVE-2026-89579",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89579"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Harden bloom filter sizing and indexing on 32-bit kernels\n\nbloom_map_alloc() has two 32-bit-specific problems when the computed\nbitmap reaches the U32_MAX fallback case.\n\nFirst, BITS_TO_BYTES(U32_MAX) is evaluated with 32-bit arithmetic. The\naddition performed by DIV_ROUND_UP wraps, so the map allocates only the\nfixed-size bloom filter object while keeping bitset_mask == U32_MAX.\nSubsequent updates can then write past the allocated object.\n\nSecond, fixing only the allocation size is not sufficient. The bloom hash\nis a u32, but set_bit() takes a signed long bit number and x86 test_bit()\neventually feeds the index to variable_test_bit(long, ...). On 32-bit\nkernels, hashes in [0x80000000, U32_MAX] therefore become negative bit\noffsets. x86 bt/bts with a memory operand interpret those offsets relative\nto the supplied base, so a map with bitset_mask == U32_MAX can read or\nwrite before bloom-\u003ebitset even after allocating the full 512 MiB bitmap.\n\nKeep the U32_MAX fallback, but split each hash into a word pointer and an\nin-word bit number before calling test_bit() or set_bit(). The bitops\nargument is then always in [0, BITS_PER_LONG - 1], while BIT_WORD(h) still\nselects the intended word in the full bitmap.\n\nCompute the bitset size from (u64)bitset_mask + 1 before passing the final\nsize to bpf_map_area_alloc(). This fixes the original under-allocation and\nkeeps the allocated storage consistent with the addressable bitset.\n\nExploitation note: local privilege escalation is possible on a 32-bit x86\nkernel using the under-allocation bug from a binary with CAP_BPF.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89579",
          "url": "https://www.suse.com/security/cve/CVE-2026-89579"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280231 for CVE-2026-89579",
          "url": "https://bugzilla.suse.com/1280231"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89579"
    },
    {
      "cve": "CVE-2026-89586",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89586"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes\n\nata_scsi_write_same_xlat() translates a SCSI WRITE SAME command with the\nUNMAP bit set into an ATA DATA SET MANAGEMENT TRIM command.  The TRIM\ndescriptor is built by ata_format_dsm_trim_descr() into the 2048-byte\nata_scsi_rbuf staging buffer, and the number of bytes copied is compared\nagainst the logical sector size by the caller:\n\n\tsize = ata_format_dsm_trim_descr(scmd, trmax, block, n_block);\n\tif (size != len)\t\t/* len == sdp-\u003esector_size */\n\t\tgoto invalid_param_len;\n\nata_format_dsm_trim_descr() clamps the copy length to ATA_SCSI_RBUF_SIZE\n(2048).  On a device whose logical sector size exceeds that (e.g. a 4Kn\ndevice, where sector_size == 4096) the function can never return more than\n2048, while the caller expects it to return sector_size.  The comparison\ntherefore always fails, so every TRIM is rejected with \"Parameter list\nlength error\" and WARN_ON() splats on each attempt.  TRIM / discard is\nthus completely broken on such devices.\n\nThe descriptor was incorrectly sized from the logical sector size.  A DSM\nTRIM payload is a list of 512-byte pages, each holding up to\nATA_MAX_TRIM_RNUM (64) LBA Range Entries, and is independent of the logical\nsector size.  The Block Limits VPD page already advertises a single such\npage as the maximum WRITE SAME length (65535 * ATA_MAX_TRIM_RNUM logical\nblocks), so the block layer never sends a request that needs more than one\npage.\n\nEmit exactly one 512-byte page, independent of the logical sector size,\nand transfer only that page (COUNT == 1).  For a 512-byte-sector device\nthis is unchanged; devices with larger logical sectors now work instead of\nfailing every TRIM.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89586",
          "url": "https://www.suse.com/security/cve/CVE-2026-89586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280228 for CVE-2026-89586",
          "url": "https://bugzilla.suse.com/1280228"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89586"
    },
    {
      "cve": "CVE-2026-89592",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89592"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/rocket: fix NULL dereference and integer overflow in rocket_job_push()\n\nrocket_job_push() allocates a temporary array to hold all input and\noutput GEM object pointers:\n\n    bos = kvmalloc_array(job-\u003ein_bo_count + job-\u003eout_bo_count,\n                         sizeof(void *), GFP_KERNEL);\n    memcpy(bos, job-\u003ein_bos, job-\u003ein_bo_count * sizeof(void *));\n    memcpy(\u0026bos[job-\u003ein_bo_count], job-\u003eout_bos, ...);\n\nTwo bugs exist:\n\n1. Missing NULL check: if kvmalloc_array() fails, bos is NULL and\n   the subsequent memcpy() dereferences it, causing a kernel NULL\n   pointer dereference.\n\n2. Integer overflow: in_bo_count and out_bo_count are both u32, set\n   directly from userspace-supplied in_bo_handle_count and\n   out_bo_handle_count with no prior validation. Their sum is computed\n   in u32 arithmetic and can wrap to a smaller value, causing the\n   allocation count passed to kvmalloc_array() to be smaller than\n   intended. Subsequent uses still operate on the original counts when\n   copying and locking objects, which may lead to out-of-bounds accesses\n   on the temporary array.\n\nFix by using check_add_overflow() to detect count overflow before the\nallocation, and adding a NULL check on the allocation result.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89592",
          "url": "https://www.suse.com/security/cve/CVE-2026-89592"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280342 for CVE-2026-89592",
          "url": "https://bugzilla.suse.com/1280342"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89592"
    },
    {
      "cve": "CVE-2026-89593",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89593"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhugetlb: only adjust reservation during unmapping if mapcount is 0\n\nSince df7a6d1f6405, __unmap_hugepage_range can adjust reservations.  In\nthe case of folio mapped in both a parent and a child, if the parent\nunmaps the range first, the reservation adjustment will result in an\nunderflow of the reserved count.  Once the child unmaps the range, the\ncount is restored.  Change __unmap_hugepage_range() to check the mapcount\nbefore adjusting the reservation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89593",
          "url": "https://www.suse.com/security/cve/CVE-2026-89593"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280229 for CVE-2026-89593",
          "url": "https://bugzilla.suse.com/1280229"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89593"
    },
    {
      "cve": "CVE-2026-89664",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89664"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: release OPEN-decoded posix ACLs via op_release\n\nnfsd4_decode_createhow4() calls nfsd4_decode_fattr4(), which allocates\nrefcounted struct posix_acl objects via posix_acl_alloc() and stores\nthem in open-\u003eop_pacl and open-\u003eop_dpacl. These pointers must be\nreleased once the OPEN compound finishes.\n\nWhen nfsd4_decode_open_claim4() returns a non-seqid-mutating error,\nthe dispatcher short-circuits before op_func runs:\n\n    nfsd4_proc_compound()\n      if (op-\u003estatus \u0026\u0026 op-\u003eopnum == OP_OPEN)\n          op-\u003estatus = nfsd4_open_omfg(...)\n              if (!seqid_mutating_err(ntohl(op-\u003estatus)))\n                  return op-\u003estatus;   /* nfsd4_open() never runs */\n      ...\n      opdesc-\u003eop_release(\u0026op-\u003eu)  /* must still release op_pacl/op_dpacl */\n\nBefore this change OP_OPEN had no .op_release in nfsd4_ops[], and the\nrelease pair lived inside nfsd4_open() at its out_err: label. On the\nshort-circuit path nfsd4_open() is never invoked, so both posix_acl\nrefs leak on every malformed OPEN compound that carries valid POSIX\nACL createhow4 attributes.\n\nAdd nfsd4_open_release() and wire it as .op_release for OP_OPEN.\nposix_acl_release() is NULL-safe, so the single release site covers\nboth the normal path and the nfsd4_open_omfg short-circuit. Remove\nthe matching posix_acl_release() pair from nfsd4_open()\u0027s out_err:\nlabel to avoid double-releasing.\n\nThe compound loop has two encoding branches: nfsd4_encode_operation()\nfor normal ops, and nfsd4_encode_replay() for v4.0 replayed ops.\nop_release was only called from nfsd4_encode_operation(), so resources\nattached to op-\u003eu leak on the replay path.\n\nMove the op_release() call out of nfsd4_encode_operation() and the\nreplay branch, placing it after the if-else in nfsd4_proc_compound().\nThis gives a single call site in a fairly obviously-correct place,\ncovering both the normal encoding and replay paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89664",
          "url": "https://www.suse.com/security/cve/CVE-2026-89664"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280272 for CVE-2026-89664",
          "url": "https://bugzilla.suse.com/1280272"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89664"
    },
    {
      "cve": "CVE-2026-89667",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89667"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache\n\nThe shrinker, GC worker, and fsnotify/lease callbacks can unhash an\nnfsd_file from the rhashtable and then call\nnfsd_file_dispose_list_delayed() to move it to the per-net dispose list.\nIf nfsd_file_cache_shutdown_net() runs concurrently, its rhashtable walk\nmisses the already-unhashed file, and its drain of the per-net dispose\nlist can run before the file has been queued.  The file then sits on\nthe per-net list with no thread to drain it, leaking both the file and\nits associated state.\n\nThe GC worker and shrinker already hold nfsd_gc_lock while walking the\nLRU, but in the original code they release it before calling\nnfsd_file_dispose_list_delayed().  The fsnotify/lease path\n(nfsd_file_close_inode) has no synchronization at all.\n\nFix this by:\n\n  1. Widening nfsd_gc_lock in both nfsd_file_gc() and nfsd_file_lru_scan()\n     to cover the nfsd_file_dispose_list_delayed() call.\n\n  2. Wrapping nfsd_file_close_inode() in nfsd_gc_lock so that all three\n     callers of nfsd_file_dispose_list_delayed() hold the lock.\n\n  3. Adding a spin_lock/unlock(nfsd_gc_lock) barrier in\n     nfsd_file_cache_shutdown_net() after the purge, so that any\n     in-progress disposal has fully completed before the per-net list\n     is drained.\n\nAll operations inside the lock are non-sleeping (rhashtable lookups,\natomic bit/refcount ops, list moves, svc_wake_up), so the spinlock is\nappropriate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89667",
          "url": "https://www.suse.com/security/cve/CVE-2026-89667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280261 for CVE-2026-89667",
          "url": "https://bugzilla.suse.com/1280261"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89667"
    },
    {
      "cve": "CVE-2026-89668",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89668"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()\n\nnfsd_debugfs_init() runs before nfsd4_init_slabs() in init_nfsd().\nIf the slab allocation fails, the bare \"return retval\" bypasses\nnfsd_debugfs_exit(), leaving orphan debugfs files with stale fops\npointers into the freed module text.\n\nMove nfsd_debugfs_init() to after the slab init succeeds, so the\nearly return has no debugfs state to clean up.\n\nSince debugfs is now the more recently initialized of the two, also\nupdate the unwind paths to match reverse-initialization (LIFO) order:\nrun nfsd_debugfs_exit() before nfsd4_free_slabs() in both the\ninit_nfsd() error path and exit_nfsd(). The nfsd debugfs files only\nreference module-global state and have no dependency on the slab\ncaches, so that reordering is a cleanup with no functional change.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89668",
          "url": "https://www.suse.com/security/cve/CVE-2026-89668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280279 for CVE-2026-89668",
          "url": "https://bugzilla.suse.com/1280279"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89668"
    },
    {
      "cve": "CVE-2026-89669",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89669"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: initialize copy-notify stateid before publishing it\n\nnfsd4_copy_notify() finished initializing the cpntf state after\nnfs4_alloc_init_cpntf_state() had already linked it into the\ns2s_cp_stateids IDR and the parent\u0027s sc_cp_list, with cs_count == 1 (the\nmembership reference) and none held for the caller. A racing\nOFFLOAD_CANCEL (crafted cl_id == nn-\u003es2s_cp_cl_id plus the guessable\nso_id) could reach manage_cpntf_state() and free the entry, turning the\ncaller\u0027s subsequent cpn_cnr_stateid read and cp_p_stateid/cp_p_clid\nwrites into use-after-free. The owning clientid was also only recorded\nafter publication, so it could not gate an ownership check in that window.\n\nRecord cp_p_stateid and cp_p_clid inside nfs4_alloc_init_cpntf_state()\nbefore nfs4_init_cp_state() publishes the entry, and return it with an\nextra reference. The caller reads the stateid under that reference and\ndrops it with nfs4_put_cpntf_state(); on a late error the laundromat\nreaps the entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89669",
          "url": "https://www.suse.com/security/cve/CVE-2026-89669"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280251 for CVE-2026-89669",
          "url": "https://bugzilla.suse.com/1280251"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280286 for CVE-2026-89669",
          "url": "https://bugzilla.suse.com/1280286"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89669"
    },
    {
      "cve": "CVE-2026-89670",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89670"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: hold rcu across localio cmpxchg retry\n\nnfsd_file objects are freed via call_rcu (filecache.c:296), and\nnfsd_file_slab is created without SLAB_TYPESAFE_BY_RCU\n(KMEM_CACHE(nfsd_file, 0) at filecache.c:789), so the slab page\nbacking a freed nfsd_file becomes freely reclaimable once the RCU\ngrace period elapses.\n\nThe again: retry block in nfsd_open_local_fh() loads a pointer with\ncmpxchg and then calls nfsd_file_get(new) (which is\nrefcount_inc_not_zero) without holding rcu_read_lock. The sole caller\nnfs_open_local_fh() drops rcu_read_lock before invoking this helper,\nso no outer reader-side critical section covers the load.\n\n    CPU 0 (nfsd_open_local_fh)        CPU 1 (nfsd_file_put_local)\n    -----                             -----\n    new = cmpxchg(pnf, NULL, ...)\n                                      nf = xchg(pnf, NULL)\n                                      nfsd_file_put(nf)\n                                        last ref -\u003e call_rcu()\n                                      /* grace period elapses;\n                                         slab page recycled */\n    nfsd_file_get(new)\n      refcount_inc_not_zero(\u0026new-\u003enf_ref)\n      /* operates on recycled memory */\n\nA non-zero word at the nf_ref offset of the recycled object makes the\nrefcount bump appear to succeed, and the caller then dereferences\nnew-\u003enf_net and new-\u003enf_file out of freed memory.\n\nFix by taking rcu_read_lock() immediately before the cmpxchg and\nreleasing it on all three exits of the if (new) block: the goto-again\nretry, the lost-race cleanup path, and the install-succeeded path.\nnfsd_file_put() and nfsd_net_put() stay outside the RCU section so\nthey remain free to block.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89670",
          "url": "https://www.suse.com/security/cve/CVE-2026-89670"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280250 for CVE-2026-89670",
          "url": "https://bugzilla.suse.com/1280250"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89670"
    },
    {
      "cve": "CVE-2026-89671",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89671"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: gate nfs3 setacl by argp-\u003emask\n\nnfsd3_proc_setacl() calls set_posix_acl() unconditionally for both\nACL_TYPE_ACCESS and ACL_TYPE_DEFAULT, passing argp-\u003eacl_access and\nargp-\u003eacl_default verbatim. The NFSv3 ACL decoder only populates\nthose pointers when the corresponding mask bit is set:\n\n    nfs3svc_decode_setaclargs()\n      if (args-\u003emask \u0026 NFS_ACL)    decode into acl_access\n      if (args-\u003emask \u0026 NFS_DFACL)  decode into acl_default\n      /* otherwise the pointer stays NULL (pc_argzero) */\n\n    nfsd3_proc_setacl()\n      set_posix_acl(.., ACL_TYPE_ACCESS,  argp-\u003eacl_access)\n      set_posix_acl(.., ACL_TYPE_DEFAULT, argp-\u003eacl_default)\n\nset_posix_acl(idmap, dentry, type, NULL) is the VFS \"remove this\nACL type\" operation. A NULL pointer that means \"the client did not\nsend this arm\" is therefore indistinguishable from \"the client\nasked to remove this ACL\". A SETACL with mask=NFS_ACL silently\ndrops the directory\u0027s default ACL; mask=0 drops both.\n\nThe sibling nfsd3_proc_getacl() already consults argp-\u003emask before\ntouching each arm; mirror that in setacl.\n\nFix by wrapping each set_posix_acl() call in the matching mask bit\ncheck and initializing error to 0 before inode_lock so that a\nrequest with neither bit set leaves the on-disk ACLs untouched and\nreturns nfs_ok. The out_drop_lock path and the unconditional\nposix_acl_release() at out: are preserved; both NULL-tolerate the\nskipped arms.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89671",
          "url": "https://www.suse.com/security/cve/CVE-2026-89671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280252 for CVE-2026-89671",
          "url": "https://bugzilla.suse.com/1280252"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89671"
    },
    {
      "cve": "CVE-2026-89672",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89672"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: gate nfs2 setacl by argp-\u003emask\n\nThe NFSACL v2 SETACL path shares the decoder convention used by its\nv3 sibling: nfsaclsvc_decode_setaclargs() fills in argp-\u003eacl_access\nonly when NFS_ACL is set in the request mask and argp-\u003eacl_default\nonly when NFS_DFACL is set, leaving the other pointer NULL because\nthe argument buffer is zeroed up to pc_argzero before decode.\n\nnfsacld_proc_setacl() then hands both pointers to set_posix_acl()\nunconditionally. set_posix_acl(idmap, dentry, type, NULL) is the VFS\n\"remove this ACL type\" operation, so an omitted arm is\nindistinguishable from an explicit request to delete that ACL. A\nSETACL carrying only NFS_ACL silently strips the directory\u0027s default\nACL; mask=0 strips both.\n\nThis is the same defect just fixed in nfsd3_proc_setacl(); apply the\nsame remedy. Gate each set_posix_acl() call on its mask bit and\ninitialize error to 0 so that a request with neither bit set leaves\nthe on-disk ACLs untouched and returns success. The out_drop_lock\npath and the unconditional posix_acl_release() in\nnfsaclsvc_release_setacl() already tolerate the skipped arms.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89672",
          "url": "https://www.suse.com/security/cve/CVE-2026-89672"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280235 for CVE-2026-89672",
          "url": "https://bugzilla.suse.com/1280235"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89672"
    },
    {
      "cve": "CVE-2026-89673",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89673"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix XDR padding calculation in ff_encode_getdeviceinfo\n\nnfsd4_ff_encode_getdeviceinfo() computes the da_addr_body reservation\nas 16 + netid_len + addr_len, but the subsequent xdr_encode_opaque()\ncalls emit 8 + round_up(netid_len, 4) + round_up(addr_len, 4) bytes.\nThe mismatch means the declared da_addr_body length exceeds the actual\nencoded data by 2-8 bytes on every flexfile GETDEVICEINFO reply,\nleaking stale reply-page content to the client and mis-aligning the\nsubsequent version list decode.\n\nUse xdr_align_size() for each string length to match what\nxdr_encode_opaque() actually writes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89673",
          "url": "https://www.suse.com/security/cve/CVE-2026-89673"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280237 for CVE-2026-89673",
          "url": "https://bugzilla.suse.com/1280237"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89673"
    },
    {
      "cve": "CVE-2026-89674",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89674"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget\n\nThe XDR buffer size calculation in nfsd4_ff_encode_layoutget() has\nmultiple errors that can result in either an out-of-bounds write or\nleaking uninitialized kernel memory to the client:\n\n - fh_len doesn\u0027t account for XDR padding on the file handle data\n - uid and gid lengths use \"8 + len\" but xdr_encode_opaque() actually\n   writes \"4 + xdr_align_size(len)\" bytes\n - ds_len omits the flags and stats_collect_hint fields (8 bytes),\n   while len\u0027s header constant overestimates by 8 bytes -- these\n   partially cancel but leave a net mismatch\n\nThe worst case occurs with short strings (e.g. uid=0, gid=0 with an\nodd-sized file handle), where the function writes up to 5 bytes past\nthe reserved XDR buffer. Conversely, when string lengths happen to be\n4-byte aligned, the reservation is too large and stale buffer content\nis sent to the client.\n\nFix this by breaking out every encoded field explicitly in the ds_len\ncalculation, using xdr_align_size() for all variable-length opaque\nfields, and correcting the header constants.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89674",
          "url": "https://www.suse.com/security/cve/CVE-2026-89674"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280243 for CVE-2026-89674",
          "url": "https://bugzilla.suse.com/1280243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280285 for CVE-2026-89674",
          "url": "https://bugzilla.suse.com/1280285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89674"
    },
    {
      "cve": "CVE-2026-89675",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89675"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix UAF in async copy cancel and shutdown\n\nAn async copy could be freed or used after free while a teardown caller\n(OFFLOAD_CANCEL, nfsd4_shutdown_copy, nfsd4_cancel_copy_by_sb) raced the\ncopy kthread:\n\n  - find_async_copy() bumped copy-\u003erefcount but left the copy on\n    clp-\u003easync_copies, so the reaper\u0027s cleanup_async_copy() could run\n    release_copy_files() concurrently with a cancel/shutdown caller. Both\n    put and NULL nf_src/nf_dst without a common lock, double-putting the\n    nfsd_file and freeing it early.\n\n  - nfsd4_do_async_copy() set NFSD4_COPY_F_STOPPED before its final uses\n    of the copy (nfsd_update_cmtime_attr() on copy-\u003enf_dst,\n    nfsd4_send_cb_offload()). nfsd4_stop_copy() treats a set STOPPED bit\n    as \"kthread done, skip kthread_stop()\", so a teardown caller ran\n    release_copy_files() -- which puts and NULLs nf_dst -- while the\n    kthread still dereferenced it (NULL/UAF).\n\n  - copy-\u003ecopy_task was never pinned. The one-shot kthread self-reaps on\n    return, so kthread_stop()\u0027s get_task_struct() could touch a freed\n    task_struct.\n\n  - co_cb is embedded in the copy, but nfsd4_send_cb_offload() held a\n    reference only on the client, so a concurrent teardown could free\n    the copy while the CB_OFFLOAD callback was in flight.\n\nFix the teardown lifetime as a whole:\n\n  - find_async_copy() unlinks the copy (clear cp_clp, list_del_init)\n    under async_lock; the cancel, shutdown, and sb-cancel paths drop the\n    list-membership reference via nfs4_put_copy() after nfsd4_stop_copy().\n    Drop the now-redundant list_del fixup from cleanup_async_copy().\n\n  - Because unlinking hides the copy from the reaper, its\n    cleanup_async_copy() can no longer remove the copy\u0027s s2s_cp_stateids\n    entry; the cancel/shutdown/sb-cancel paths now call\n    nfs4_free_copy_state() themselves (while cp_clp is still valid) so\n    the entry does not dangle at freed memory for the laundromat and\n    manage_cpntf_state() to dereference.\n\n  - Give the kthread its own reference, taken in nfsd4_copy() before\n    wake_up_process() and dropped at the end of nfsd4_do_async_copy();\n    call wake_up_process() before list_add().\n\n  - Pin the task_struct with get_task_struct() in nfsd4_copy(), released\n    in nfs4_put_copy(), so kthread_stop() is safe whenever the kthread\n    exits. Set NFSD4_COPY_F_STOPPED only in nfsd4_stop_copy(), which now\n    always kthread_stop()s before release_copy_files(); completion is\n    still reported via NFSD4_COPY_F_COMPLETED, so\n    nfsd4_has_active_async_copies() is unaffected. Each teardown caller\n    removes the copy from clp-\u003easync_copies first, so kthread_stop() runs\n    exactly once.\n\n  - Take a copy reference in nfsd4_send_cb_offload(), dropped in\n    nfsd4_cb_offload_release(). The kthread still holds its own reference\n    there, so the refcount_inc() cannot race the final free.\n\n  - Read cp_clp with smp_load_acquire() to pair with the unordered\n    set_bit()/clear_bit() writers (Documentation/atomic_bitops.rst).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89675",
          "url": "https://www.suse.com/security/cve/CVE-2026-89675"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280216 for CVE-2026-89675",
          "url": "https://bugzilla.suse.com/1280216"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89675"
    },
    {
      "cve": "CVE-2026-89676",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89676"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix stale s2s_cp_stateids IDR entry for async COPY\n\nFor an async COPY, nfsd4_copy() called nfs4_init_copy_state() before\ndup_copy_fields(), so the s2s_cp_stateids IDR was pointed at\n\u0026u-\u003ecopy-\u003ecp_stateid -- memory in the per-rqstp COMPOUND buffer that is\nreused by the next request. dup_copy_fields() copies only the value into\nasync_copy, so the IDR slot dangled at the transient buffer for the whole\nbackground copy. Any IDR walker then dereferences reused request memory:\nthe laundromat reads cs_type from it and, if the bytes look like an\nexpired NFS4_COPYNOTIFY_STID, follows into\nrefcount_dec()/idr_remove()/kfree() on garbage; manage_cpntf_state() has\nthe same exposure via idr_find().\n\nDuplicate the fields first, then register the stateid on the stable\nasync_copy. result-\u003ecb_stateid is unchanged.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89676",
          "url": "https://www.suse.com/security/cve/CVE-2026-89676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280219 for CVE-2026-89676",
          "url": "https://bugzilla.suse.com/1280219"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89676"
    },
    {
      "cve": "CVE-2026-89677",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89677"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()\n\ndentry_create() can hypothetically provide a different dentry than the\none passed in.  This could happen, for example, if the exported\nfilesystem is NFS, and the server returned to OPEN a filehandle which\nmatched a directory that was already in the dcache.  Clearly this would\nnot be expected!\n\nIf this were to happen the dentry (child) that was already stored in\nresfhp could be freed and later dereferenced.\n\nWe shouldn\u0027t call fh_compose() until we are certain that we have the\nfinal dentry, so this patch moved the fh_compose() call to two places:\none for the case where the target already exists, and one after\ndentry_create() where it was created.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89677",
          "url": "https://www.suse.com/security/cve/CVE-2026-89677"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280224 for CVE-2026-89677",
          "url": "https://bugzilla.suse.com/1280224"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89677"
    },
    {
      "cve": "CVE-2026-89678",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89678"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix partial-write detection in nfsd_direct_write\n\nnfsd_direct_write() walks a list of write segments and, after each\nvfs_iocb_iter_write(), tries to detect a short write so the loop can\nstop before placing the next segment at a wrong file offset:\n\n    host_err = vfs_iocb_iter_write(file, kiocb, \u0026segments[i].iter);\n    if (host_err \u003c 0)\n            return host_err;\n    *cnt += host_err;\n    if (host_err \u003c segments[i].iter.count)\n            break;\t/* partial write */\n\nvfs_iocb_iter_write() runs the iter through -\u003ewrite_iter(), which\nadvances the iter by the number of bytes written. By the time the\ncheck runs, segments[i].iter.count is the residual, not the original\nrequest length:\n\n    before write_iter: iter.count == original_len\n    after  write_iter: iter.count == original_len - host_err\n\nThe condition then reduces to host_err \u003c original_len - host_err, so\nthe break fires only when less than half of the segment was written.\nAny short write completing between 50% and 99% of the segment slips\nthrough; the loop advances to the next segment with kiocb-\u003eki_pos\nonly bumped by the short amount, writing the next segment\u0027s payload\nat the wrong offset and over-reporting *cnt to the NFS client.\n\nSnapshot the segment\u0027s byte count before the write and compare\nhost_err against that snapshot so any short write breaks the loop.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89678",
          "url": "https://www.suse.com/security/cve/CVE-2026-89678"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280199 for CVE-2026-89678",
          "url": "https://bugzilla.suse.com/1280199"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89678"
    },
    {
      "cve": "CVE-2026-89679",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89679"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs\n\nWhen a SETATTR request includes FATTR4_WORD2_TIME_DELEG_ACCESS or\nFATTR4_WORD2_TIME_DELEG_MODIFY in the attribute bitmap, nfsd4_setattr()\nsets deleg_attrs=true and calls nfs4_preprocess_stateid_op() to validate\nthe stateid.\n\nIf the client supplies the NFSv4 \"one stateid\" (all-0xFF bytes),\ncheck_special_stateids() returns nfs_ok without populating the output\nnfs4_stid pointer, because the special-stateid path in\nnfs4_preprocess_stateid_op() jumps to done: with s==NULL, and the\n\"if (s)\" block that would set *cstid is skipped. The local variable `st`\nremains NULL.\n\nBack in nfsd4_setattr(), the if (deleg_attrs) block then unconditionally\ndereferences st-\u003esc_type (at offset 4 from NULL), causing a kernel oops.\n\nThis is remotely triggerable by any NFSv4 client: send COMPOUND [PUTROOTFH,\nSETATTR(ONE_STATEID, {bmval2=FATTR4_WORD2_TIME_DELEG_ACCESS, ...})].\nNo authentication, delegation, or prior state is required.\n\nFix by adding a NULL check before the dereference. A special stateid is\nnot a delegation stateid, so the existing nfserr_bad_stateid return value\nis already correct; we only need to guard the pointer dereference itself.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89679",
          "url": "https://www.suse.com/security/cve/CVE-2026-89679"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280203 for CVE-2026-89679",
          "url": "https://bugzilla.suse.com/1280203"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89679"
    },
    {
      "cve": "CVE-2026-89680",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89680"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfsd_file leak on inter-server COPY setup failure\n\nWhen nfsd4_setup_inter_ssc() fails, nfsd4_copy() returns\nnfserr_offload_denied directly, bypassing the out: label where\nrelease_copy_files() would drop the nf_dst reference taken by\nnfs4_preprocess_stateid_op(). Each failed inter-server COPY\nleaks one nfsd_file, pinning file/inode/dentry/vfsmount.\n\nFix by setting status and jumping to out: instead of returning\ndirectly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89680",
          "url": "https://www.suse.com/security/cve/CVE-2026-89680"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280206 for CVE-2026-89680",
          "url": "https://bugzilla.suse.com/1280206"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89680"
    },
    {
      "cve": "CVE-2026-89681",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89681"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix layout fence worker double-reference race\n\nThe workqueue core clears WORK_STRUCT_PENDING before the callback\nis invoked, so delayed_work_pending() in lm_breaker_timedout() can\nreturn false while the fence worker is already running. This lets\nthe breaker take a duplicate sc_count reference and schedule a new\nworker that coalesces with the in-progress one. The extra reference\nis never put, leaking the layout stateid.\n\nReplace the racy delayed_work_pending() check with an\nls_fence_inflight boolean set atomically with\nrefcount_inc_not_zero() under ls_lock, and cleared under ls_lock\nbefore the final nfs4_put_stid() on the dispose path; the retry\npath intentionally retains it.  Remove the self-rearm\nmod_delayed_work() at the top of the worker.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89681",
          "url": "https://www.suse.com/security/cve/CVE-2026-89681"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280189 for CVE-2026-89681",
          "url": "https://bugzilla.suse.com/1280189"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89681"
    },
    {
      "cve": "CVE-2026-89682",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89682"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net\n\nnfsd_file_dispose_list_delayed() defers fput() to nfsd service threads\nvia a per-net freeme queue, preventing the shrinker and GC worker from\nbearing the cost of closing files (see ffb402596147).  However, the\nqueue lives in a separately-allocated struct nfsd_fcache_disposal that\nis freed by nfsd_free_fcache_disposal_net() during per-net teardown.\nThe global shrinker, laundrette, and fsnotify callbacks can still be\ninside nfsd_file_dispose_list_delayed() dereferencing that pointer,\ncausing a use-after-free.\n\nInline the spinlock and freeme list directly into struct nfsd_net (as\nfcache_dispose_lock and fcache_dispose_list), eliminating the separately\nallocated struct nfsd_fcache_disposal entirely.  These fields now have\nthe same lifetime as the net namespace itself, so there is no dangling\npointer to chase.\n\nnfsd_file_cache_start_net() now just initializes the inline fields and\ncannot fail due to allocation.  nfsd_file_cache_shutdown_net() drains\nthe inline list directly instead of freeing a separate struct.  The\nalloc/free helpers are removed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89682",
          "url": "https://www.suse.com/security/cve/CVE-2026-89682"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280191 for CVE-2026-89682",
          "url": "https://bugzilla.suse.com/1280191"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89682"
    },
    {
      "cve": "CVE-2026-89683",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89683"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix dentry ref leak on V4ROOT export filehandle lookup\n\nnfsd_set_fh_dentry() leaks the dentry reference from\nexportfs_decode_fh_raw() when the NFS3_FHSIZE or NFS_FHSIZE\nswitch cases detect NFSEXP_V4ROOT and goto out. The out: label\ncalls exp_put() but never dput(dentry), and fhp-\u003efh_dentry was\nnever assigned so fh_put() cannot compensate.\n\nA crafted NFSv3 filehandle targeting a V4ROOT export\u0027s fsid\ntriggers the leak on every request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89683",
          "url": "https://www.suse.com/security/cve/CVE-2026-89683"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280193 for CVE-2026-89683",
          "url": "https://bugzilla.suse.com/1280193"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89683"
    },
    {
      "cve": "CVE-2026-89684",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89684"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix cpntf publish race in nfs4_init_cp_state\n\nnfs4_alloc_init_cpntf_state() published the new cpntf entry into the\ns2s_cp_stateids IDR (with cs_type set) in one s2s_cp_lock section, then\ntook the lock again to list_add() it onto p_stid-\u003esc_cp_list. In the gap\nthe entry is reachable by so_id but cp_list is still {NULL,NULL} from\nkzalloc. A racing OFFLOAD_CANCEL (so_id is echoed to the client as\ncnr_stateid, so any NFSv4.2 client can drive it) reaches\nmanage_cpntf_state() -\u003e _free_cpntf_state_locked() and does list_del() on\nthe zeroed list_head, oopsing the server.\n\nFold the cs_type assignment and the list_add() into the same critical\nsection as idr_alloc_cyclic(), so a concurrent lookup either misses the\nentry or sees a fully linked cp_list. INIT_LIST_HEAD() the entry after\nallocation and switch _free_cpntf_state_locked() to list_del_init() so a\nstale unlink is a no-op. nfs4_init_copy_state() passes NULL p_stid and\nskips the list_add, preserving NFS4_COPY_STID semantics.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89684",
          "url": "https://www.suse.com/security/cve/CVE-2026-89684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280178 for CVE-2026-89684",
          "url": "https://bugzilla.suse.com/1280178"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89684"
    },
    {
      "cve": "CVE-2026-89685",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89685"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix clock domain mismatch in clients_still_reclaiming()\n\nclients_still_reclaiming() computes a deadline from nn-\u003eboot_time\n(CLOCK_REALTIME, ~1.7 billion) but compares it against\nktime_get_boottime_seconds() (CLOCK_BOOTTIME, seconds since boot).\nThe comparison is always false - it would take ~54 years of uptime\nfor BOOTTIME to exceed the REALTIME-derived deadline.\n\nThis means any client can hold the server in grace indefinitely by\nsending CLAIM_PREVIOUS OPEN requests, blocking all non-reclaim\noperations for all other clients.\n\nAdd boot_time_bt (CLOCK_BOOTTIME) alongside the existing boot_time\nand use it for the deadline computation. boot_time (CLOCK_REALTIME)\nis preserved for its cl_boot clientid-nonce role.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89685",
          "url": "https://www.suse.com/security/cve/CVE-2026-89685"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280179 for CVE-2026-89685",
          "url": "https://bugzilla.suse.com/1280179"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89685"
    },
    {
      "cve": "CVE-2026-89686",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89686"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke\n\nnfsd4_alloc_layout_stateid reads fp-\u003efi_deleg_file without holding\nfi_lock when the parent stateid is a delegation. A concurrent delegation\nrevoke via the laundromat can clear fi_deleg_file under fi_lock, causing\nnfsd_file_get() to return NULL and triggering the BUG_ON.\n\nThis race is client-reachable: two NFS clients can trigger it by having\none hold a delegation while another opens the same file to force a\nrecall. When the first client doesn\u0027t respond to the recall, the\nlaundromat revokes it. A concurrent LAYOUTGET from any client using the\ndelegation stateid hits the race window.\n\nFix this by taking fi_lock around the fi_deleg_file read in the\nSC_TYPE_DELEG path, matching the locking discipline of the\nfind_any_file() arm, and replacing the BUG_ON with a graceful error\nreturn that cleans up the partially-initialized layout stateid.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89686",
          "url": "https://www.suse.com/security/cve/CVE-2026-89686"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280184 for CVE-2026-89686",
          "url": "https://bugzilla.suse.com/1280184"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89686"
    },
    {
      "cve": "CVE-2026-89687",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89687"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: ensure nfsd_file_do_acquire() does not use a non-opened file\n\n-\u003eatomic_open is permitted to return success without actually opening\nthe file.  It indicates this by calling finish_no_open().\nThis means dentry_create() can return a file which hasn\u0027t been opened.\nThis is extremely unlikely as -\u003eatomic_open handlers typically\nuse finish_no_open() only for already existing files, and dentry_create()\nisn\u0027t called in that case, and the parent being locked should prevent\nraces.\n\nHowever out of an abundance of caution it seems wise to teach nfsd to\nonly use the file returned by dentry_create() if FMODE_OPENED is set,\nindicating that it has in fact been opened.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89687",
          "url": "https://www.suse.com/security/cve/CVE-2026-89687"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280173 for CVE-2026-89687",
          "url": "https://bugzilla.suse.com/1280173"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89687"
    },
    {
      "cve": "CVE-2026-89688",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89688"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: drop the stateid, not the stateowner, on seqid_op replay retry\n\nIn nfs4_preprocess_seqid_op() the stateid is obtained from\nnfsd4_lookup_stateid(), which holds a reference on the nfs4_stid\n(sc_count) but takes no reference on the stateowner. openlockstateid()\nmerely casts that stid and likewise takes no reference.\n\nWhen nfsd4_cstate_assign_replay() returns -EAGAIN (the replay owner is\nbeing torn down, RP_UNHASHED) it has not taken a stateowner reference on\nthat path. The error handling nevertheless called\nnfs4_put_stateowner(stp-\u003est_stateowner), dropping an so_count reference\nthe function never acquired -- risking a stateowner refcount underflow and\nuse-after-free -- while leaking the sc_count reference held on the stid.\nThe leaked stid reference can also stall a concurrent\nnfsd4_close_open_stateid() waiting for sc_count to drop.\n\nDrop the reference actually held -- the stid -- before retrying. The\nstateowner stays alive through the reference held by the stid. This mirrors\nthe open path in nfsd4_process_open1(), where the put balances a reference\nthat path explicitly holds on the stateowner.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89688",
          "url": "https://www.suse.com/security/cve/CVE-2026-89688"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280171 for CVE-2026-89688",
          "url": "https://bugzilla.suse.com/1280171"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89688"
    },
    {
      "cve": "CVE-2026-89689",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89689"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: don\u0027t free session slots that are still in use\n\nnfsd4_sequence() can free the very slot it is currently processing.\nWhen the session shrinker has reduced se_target_maxslots below\nse_fchannel.maxreqs, the shrink path checks three conditions before\ncalling free_session_slots():\n\n  1. se_target_maxslots \u003c maxreqs  (shrink was advertised)\n  2. slot-\u003esl_generation == se_slot_gen  (slot is up-to-date)\n  3. seq-\u003emaxslots \u003c= se_target_maxslots  (client acknowledges)\n\nHowever, seq-\u003eslotid is never checked against se_target_maxslots.\nA client using a slot in the range [se_target_maxslots, maxreqs) can\nsatisfy all three conditions: its slot has the current generation\n(set by a prior SEQUENCE), and it sends sa_highest_slotid \u003c=\nse_target_maxslots to acknowledge the reduction.\n\nfree_session_slots() then kfrees every slot at index \u003e=\nse_target_maxslots, including the caller\u0027s own slot. The function\ncontinues to write sl_seqid, sl_flags, sl_generation, and stores the\ndangling pointer in cstate-\u003eslot. Later, nfsd4_store_cache_entry()\ncopies up to maxresp_cached bytes of the compound reply into the freed\nsl_data[] array, corrupting whatever slab object now occupies that\naddress.\n\nAdditionally, a concurrent thread processing SEQUENCE on a different\nhigh-numbered slot can have its slot freed out from under it.\nNFSD4_SLOT_INUSE is set under nn-\u003eclient_lock before the lock is\nreleased, so any concurrent thread past SEQUENCE will have its slot\nmarked. However, free_session_slots() does not check NFSD4_SLOT_INUSE\nbefore freeing.\n\nFix both problems by:\n 1. Checking that the current request\u0027s slotid is below the shrink\n    boundary.\n 2. Scanning slots in the to-be-freed range for NFSD4_SLOT_INUSE and\n    deferring the shrink if any are active.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89689",
          "url": "https://www.suse.com/security/cve/CVE-2026-89689"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280174 for CVE-2026-89689",
          "url": "https://bugzilla.suse.com/1280174"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280211 for CVE-2026-89689",
          "url": "https://bugzilla.suse.com/1280211"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-89689"
    },
    {
      "cve": "CVE-2026-89690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: defer vfree of compound ops to fix rpc_status UAF\n\nThe rpc_status netlink dumpit walks every in-flight svc_rqst under\nrcu_read_lock and, for NFSv4 requests, reads opnums out of\nargs-\u003eops[]. But args-\u003eops is a separate vmalloc buffer freed\nsynchronously by vfree() in nfsd4_release_compoundargs() at the end\nof every compound. The dumpit\u0027s rcu_read_lock pins the svc_rqst\nstruct itself (freed via kfree_rcu), but nothing defers the vfree\nof the ops buffer across the RCU grace period. A concurrent compound\ncompletion can therefore free the buffer while the dumpit is reading\nit - a use-after-free on vmalloc memory.\n\nThe trailing seqcount recheck (smp_load_acquire of rq_status_counter)\ncannot undo a load that already retired against freed memory.\n\nFix by replacing vfree(args-\u003eops) with kvfree_rcu_mightsleep(), which\ndefers the free until after an RCU grace period. This makes the\nexisting rcu_read_lock in the dumpit sufficient to protect the read.\nThe tradeoff is that completed compound ops buffers (up to\n200 * sizeof(struct nfsd4_op)) persist in memory slightly longer,\nacross one grace period, before being reclaimed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89690",
          "url": "https://www.suse.com/security/cve/CVE-2026-89690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280166 for CVE-2026-89690",
          "url": "https://bugzilla.suse.com/1280166"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89690"
    },
    {
      "cve": "CVE-2026-89691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: clear opcnt on compound arg release to prevent OOB read\n\nnfsd4_release_compoundargs() resets args-\u003eops to the inline iops[8]\narray when the dynamically-allocated ops buffer is freed, but leaves\nargs-\u003eopcnt at its original value (which can be up to 200 for NFSv4.1+\ncompounds).\n\nIf rq_status_counter is stuck at an odd value (which can happen when\nnfsd_dispatch() hits an error path after setting it odd), the RPC\nstatus dumpit handler reads min(opcnt, 16) entries from args-\u003eops[].\nSince iops only has 8 elements and is the last field in struct\nnfsd4_compoundargs, reading indices 8-15 accesses adjacent slab memory\nand leaks it to userspace via netlink.\n\nZero opcnt unconditionally in nfsd4_release_compoundargs() so stale\ncompound metadata is never exposed through the status interface.\n\n[ cel: Remove the kvfree_rcu_mightsleep() sleep from the exposure window ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89691",
          "url": "https://www.suse.com/security/cve/CVE-2026-89691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280163 for CVE-2026-89691",
          "url": "https://bugzilla.suse.com/1280163"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89691"
    },
    {
      "cve": "CVE-2026-89692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: clear CALLBACK_RUNNING on failed delegation recall queue\n\nnfsd_break_one_deleg() sets NFSD4_CALLBACK_RUNNING via test_and_set_bit\nat entry to serialize recall work, then calls nfsd4_run_cb() to queue\nthe recall.  When the queue attempt fails the refcount bump is undone,\nbut the RUNNING bit is left set.  The only site that clears the bit is\nnfsd41_destroy_cb() (fs/nfsd/nfs4callback.c), which runs from the\nworkqueue and is therefore unreachable when nothing was queued.\n\nThe bit becomes a permanent latch on dp-\u003edl_recall.cb_flags: every\nsubsequent break_lease() on the same delegation hits the early-return\nguard in nfsd_break_one_deleg() and silently skips the recall, so the\ndelegation is never broken and the conflicting open or lock stalls.\n\nFix by clearing NFSD4_CALLBACK_RUNNING on the !queued branch alongside\nthe refcount_dec.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89692",
          "url": "https://www.suse.com/security/cve/CVE-2026-89692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280167 for CVE-2026-89692",
          "url": "https://bugzilla.suse.com/1280167"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89692"
    },
    {
      "cve": "CVE-2026-89693",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89693"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()\n\nnfsd4_create() stores the return value of nfsd4_acl_to_attr() in\nstatus, but the switch(create-\u003ecr_type) block unconditionally\noverwrites it in every branch. ACL translation errors are silently\ndiscarded, and the CREATE proceeds without the requested ACL.\n\nAdd an early exit check after nfsd4_acl_to_attr(), matching the\npattern already used in nfsd4_setattr().\n\n[ cel: prefer NFS4ERR_BADTYPE over NFS4ERR_ATTRNOTSUPP ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89693",
          "url": "https://www.suse.com/security/cve/CVE-2026-89693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280153 for CVE-2026-89693",
          "url": "https://bugzilla.suse.com/1280153"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89693"
    },
    {
      "cve": "CVE-2026-89694",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89694"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: check client ownership when cancelling a copy-notify stateid\n\nOn the OFFLOAD_CANCEL path (clp != NULL), manage_cpntf_state() freed the\ntarget cpntf state without checking ownership. The lookup key\nst-\u003esi_opaque.so_id is allocated cyclically (guessable) and the embedded\nclientid is the fixed per-net nn-\u003es2s_cp_cl_id, so any authenticated\nNFSv4.2 client could cancel and free another client\u0027s copy-notify\nstateid.\n\nCompare the creating clientid recorded in state-\u003ecp_p_clid against the\nrequesting client\u0027s cl_clientid and return nfserr_bad_stateid on a\nmismatch instead of freeing the entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89694",
          "url": "https://www.suse.com/security/cve/CVE-2026-89694"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280151 for CVE-2026-89694",
          "url": "https://bugzilla.suse.com/1280151"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89694"
    },
    {
      "cve": "CVE-2026-89695",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89695"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: cap decoded POSIX ACL count to bound sort cost\n\nnfsd4_decode_posixacl() reads a u32 entry count off the wire and passes\nit straight to posix_acl_alloc() and sort_pacl_range(). The latter is\nan O(n^2) bubble sort, so a client-chosen count drives unbounded CPU in\nthe server\u0027s compound processing path.\n\n    nfsd4_decode_posixacl()\n      xdr_stream_decode_u32(\u0026count)       /* uncapped u32 */\n      posix_acl_alloc(count, GFP_KERNEL)\n      sort_pacl_range(*acl, 0, count - 1) /* O(n^2) bubble sort */\n\nThe encoder side in the same file already rejects ACLs whose a_count\nexceeds NFS_ACL_MAX_ENTRIES, but the decoder introduced in commit\n5fc51dfc2eb1 (\"NFSD: Add support for XDR decoding POSIX draft ACLs\")\nomitted the symmetric check.\n\nFix by rejecting a wire count greater than NFS_ACL_MAX_ENTRIES with\nnfserr_inval, before any allocation, so the sort is bounded by\nNFS_ACL_MAX_ENTRIES^2 comparisons.\n\nWhile we\u0027re in here, also fix the nfserr_resource return if\nposix_acl_alloc() fails. That\u0027s not a legal error code for v4.1+. Change\nit to return nfserr_jukebox as that\u0027s more appropriate for memory\nallocation failures.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89695",
          "url": "https://www.suse.com/security/cve/CVE-2026-89695"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280155 for CVE-2026-89695",
          "url": "https://bugzilla.suse.com/1280155"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89695"
    },
    {
      "cve": "CVE-2026-89696",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89696"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref\n\nWhen CONFIG_NFSD_V4_2_INTER_SSC is enabled, nfsd4_putfh() can return\nsuccess with fh_dentry and fh_export both NULL if fh_verify() returns\nnfserr_stale and putfh-\u003eno_verify is true. The NFSD4_FH_FOREIGN flag\nis set, but the compound dispatch loop only uses this flag to bypass\nthe nfserr_nofilehandle check -- it does not prevent subsequent ops\nfrom running with a NULL fh_dentry.\n\nA remote client can exploit this by crafting a COMPOUND that includes\nan inter-SSC COPY (which causes check_if_stalefh_allowed() to set\nno_verify=true on the saved PUTFH) with an additional op inserted\nbetween the source PUTFH and SAVEFH. For example, SETATTR calls\nfh_want_write() which dereferences fh_export-\u003eex_path.mnt without\ncalling fh_verify() first, causing a NULL pointer dereference in the\nnfsd kthread.\n\nFix this by gating the dispatch loop: when NFSD4_FH_FOREIGN is set\nand fh_dentry is NULL, only OP_SAVEFH (needed for the inter-SSC flow)\nand ops with ALLOWED_WITHOUT_FH (which don\u0027t need a resolved\nfilehandle) may proceed. All other ops receive nfserr_stale, per\nRFC 7862 Section 15.2.3 which specifies that foreign filehandle\nvalidation is deferred to the consuming operation and NFS4ERR_STALE\nreturned at that point.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89696",
          "url": "https://www.suse.com/security/cve/CVE-2026-89696"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280146 for CVE-2026-89696",
          "url": "https://bugzilla.suse.com/1280146"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89696"
    },
    {
      "cve": "CVE-2026-89697",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-89697"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()\n\nThe BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare()\ncan inspect the dentry. This causes nfsd_setattr() to skip\nfh_want_write(), so notify_change() runs without a mount write\nreference.\n\nAdd the missing fh_want_write() call after the early fh_verify().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-89697",
          "url": "https://www.suse.com/security/cve/CVE-2026-89697"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1280148 for CVE-2026-89697",
          "url": "https://bugzilla.suse.com/1280148"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-0:7.2.6-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-89697"
    }
  ]
}