OPENSUSE-SU-2026:12165-1
Vulnerability from csaf_opensuse - Published: 2026-10-17 00:00 - Updated: 2026-10-18 10:27Summary
kernel-devel-7.2.11-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: kernel-devel-7.2.11-1.1 on GA media
Description of the patch: These are all security issues fixed in the kernel-devel-7.2.11-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12165
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
important
7.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
4.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
6.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-98385
Threats
Impact
moderate
References
79 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "kernel-devel-7.2.11-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the kernel-devel-7.2.11-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-12165",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12165-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98385 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98387 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98388 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98401 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98404 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98405 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98407 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98410 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98414 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98414/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98415 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98415/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98416 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98418 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98418/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98419 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98420 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98420/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98421 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98421/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98422 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98422/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98423 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98423/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98424 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98424/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98425 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98425/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98426 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98427 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98428 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98428/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98429 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98430 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98430/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-98431 page",
"url": "https://www.suse.com/security/cve/CVE-2026-98431/"
}
],
"title": "kernel-devel-7.2.11-1.1 on GA media",
"tracking": {
"current_release_date": "2026-10-18T10:27:42Z",
"generator": {
"date": "2026-10-17T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:12165-1",
"initial_release_date": "2026-10-17T00:00:00Z",
"revision_history": [
{
"date": "2026-10-17T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-18T10:27:42Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.2.11-1.1.aarch64",
"product": {
"name": "kernel-devel-0:7.2.11-1.1.aarch64",
"product_id": "kernel-devel-0:7.2.11-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.2.11-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.2.11-1.1.aarch64",
"product": {
"name": "kernel-macros-0:7.2.11-1.1.aarch64",
"product_id": "kernel-macros-0:7.2.11-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.2.11-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.2.11-1.1.aarch64",
"product": {
"name": "kernel-source-0:7.2.11-1.1.aarch64",
"product_id": "kernel-source-0:7.2.11-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.2.11-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"product": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"product_id": "kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.11-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.2.11-1.1.ppc64le",
"product": {
"name": "kernel-devel-0:7.2.11-1.1.ppc64le",
"product_id": "kernel-devel-0:7.2.11-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.2.11-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.2.11-1.1.ppc64le",
"product": {
"name": "kernel-macros-0:7.2.11-1.1.ppc64le",
"product_id": "kernel-macros-0:7.2.11-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.2.11-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.2.11-1.1.ppc64le",
"product": {
"name": "kernel-source-0:7.2.11-1.1.ppc64le",
"product_id": "kernel-source-0:7.2.11-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.2.11-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"product": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"product_id": "kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.11-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.2.11-1.1.s390x",
"product": {
"name": "kernel-devel-0:7.2.11-1.1.s390x",
"product_id": "kernel-devel-0:7.2.11-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.2.11-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.2.11-1.1.s390x",
"product": {
"name": "kernel-macros-0:7.2.11-1.1.s390x",
"product_id": "kernel-macros-0:7.2.11-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.2.11-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.2.11-1.1.s390x",
"product": {
"name": "kernel-source-0:7.2.11-1.1.s390x",
"product_id": "kernel-source-0:7.2.11-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.2.11-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.2.11-1.1.s390x",
"product": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.s390x",
"product_id": "kernel-source-vanilla-0:7.2.11-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.11-1.1?arch=s390x\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.2.11-1.1.x86_64",
"product": {
"name": "kernel-devel-0:7.2.11-1.1.x86_64",
"product_id": "kernel-devel-0:7.2.11-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.2.11-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.2.11-1.1.x86_64",
"product": {
"name": "kernel-macros-0:7.2.11-1.1.x86_64",
"product_id": "kernel-macros-0:7.2.11-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.2.11-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.2.11-1.1.x86_64",
"product": {
"name": "kernel-source-0:7.2.11-1.1.x86_64",
"product_id": "kernel-source-0:7.2.11-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.2.11-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.2.11-1.1.x86_64",
"product": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.x86_64",
"product_id": "kernel-source-vanilla-0:7.2.11-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.2.11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.2.11-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.2.11-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.2.11-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64"
},
"product_reference": "kernel-devel-0:7.2.11-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.2.11-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le"
},
"product_reference": "kernel-devel-0:7.2.11-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.2.11-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x"
},
"product_reference": "kernel-devel-0:7.2.11-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.2.11-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64"
},
"product_reference": "kernel-devel-0:7.2.11-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.2.11-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64"
},
"product_reference": "kernel-macros-0:7.2.11-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.2.11-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le"
},
"product_reference": "kernel-macros-0:7.2.11-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.2.11-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x"
},
"product_reference": "kernel-macros-0:7.2.11-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.2.11-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64"
},
"product_reference": "kernel-macros-0:7.2.11-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.2.11-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64"
},
"product_reference": "kernel-source-0:7.2.11-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.2.11-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le"
},
"product_reference": "kernel-source-0:7.2.11-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.2.11-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x"
},
"product_reference": "kernel-source-0:7.2.11-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.2.11-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64"
},
"product_reference": "kernel-source-0:7.2.11-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64"
},
"product_reference": "kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le"
},
"product_reference": "kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x"
},
"product_reference": "kernel-source-vanilla-0:7.2.11-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.2.11-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
},
"product_reference": "kernel-source-vanilla-0:7.2.11-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-98385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98385"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/cache: Decouple sched_cache_group from mm to fix UAF\n\nCurrently the sched cache grouping is by mm and the scheduling statistics\nsched_cache_stat lives in the mm structure. This ties the life cycle\nof scheduling stats with mm.\n\nIn account_mm_sched(), the scheduling stats are accessed by\ntask-\u003emm-\u003esc_stat. However, a task may be switching mm on one CPU when\nanother CPU is running account_mm_sched(), and possibly accessing the\nold mm that was freed. This problem was found when running tests with\nKASAN by Hyunwoo:\n\n https://lore.kernel.org/lkml/apPb-Dr4nPYuHQOK@v4bel/\n\nInstead of serializing the mm access by introducing extra acquisition of\nrq lock in the mm free path, extract sched_cache_stat from mm_struct,\nrename it as sched_cache_group and manage its life cycle apart from\nmm_struct with its own ref counting. This allows us in the next patch\naccess sched_cache_group directly from task, and add a refcount\non sched_cache_group when a task links to it. This prevents the use\nafter free issue when accessing stale and released old mm and its\nsched cache stat a task switches to a new mm while account_mm_sched()\nis done elsewhere.\n\nThe other benefit of this restructure is in the future, the grouping of\ntasks to a LLC would have the flexibility to be associated with a user\ndefined grouping, or cgroup, cookie group, numa_group or others instead\nof just with a single mm address space.\n\nRename sched_cache_stat to sched_cache_group and turn it into a refcounted\nobject allocated from mm_struct. The mm_struct now holds a pointer\n(sched_cache_grp) to this object instead of embedding it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98385",
"url": "https://www.suse.com/security/cve/CVE-2026-98385"
},
{
"category": "external",
"summary": "SUSE Bug 1285039 for CVE-2026-98385",
"url": "https://bugzilla.suse.com/1285039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-98385"
},
{
"cve": "CVE-2026-98387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98387"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_virt() fails, the walk structure may be in an undefined\nstate, and attempting to process data could lead to incorrect behavior\nor accessing uninitialized memory.\n\nAdd proper return code checking to ensure correct handling of the walk\ninitialization and walk advance and eventually return to the caller\nwith that return code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98387",
"url": "https://www.suse.com/security/cve/CVE-2026-98387"
},
{
"category": "external",
"summary": "SUSE Bug 1285552 for CVE-2026-98387",
"url": "https://bugzilla.suse.com/1285552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98387"
},
{
"cve": "CVE-2026-98388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98388"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexec: do_close_on_exec() before taking exec_update_lock\n\ndo_close_on_exec() currently happens while holding the exec_update_lock,\nwhich is used in a lot of places that access process state to\nsynchronize access checks.\nI recently added another such use of exec_update_lock, causing a\nregression.\n\ndo_close_on_exec() can block waiting for a reply from a filesystem.\nThat means a hung filesystem can block codepaths that use\nexec_update_lock; and it also means that a FUSE filesystem which\nattempts to inspect the calling process can deadlock.\n\nTo avoid such problems, move do_close_on_exec() before the\nexec_update_lock is taken, but after the FD table has been copied if\nnecessary.\n\nI have looked through all the calls between the old and new position of\nthe do_close_on_exec() call; there seems to be no file descriptor table\naccess in between.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98388",
"url": "https://www.suse.com/security/cve/CVE-2026-98388"
},
{
"category": "external",
"summary": "SUSE Bug 1285582 for CVE-2026-98388",
"url": "https://bugzilla.suse.com/1285582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98388"
},
{
"cve": "CVE-2026-98401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98401"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: iptunnel: fix stale transport header during tunnel decapsulation\n\nSyzbot reported a crash in qdisc_pkt_len_segs_init() caused by a stale\ntransport_header offset after tunnel decapsulation.\n\nBUG: unable to handle page fault for address: ffffed102091a42e\nOops: Oops: 0000 [#1] SMP KASAN NOPTI\nCPU: 0 UID: 0 PID: 340 Comm: qdisc_uaf_repro Not tainted 7.2.0-rc4-00061-g248951ddc14d #256 PREEMPT(full)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nRIP: 0010:__asan_load2\n\u003cIRQ\u003e\nqdisc_pkt_len_segs_init (net/core/dev.c:4145)\n__dev_queue_xmit (net/core/dev.c:4787)\nbr_dev_queue_push_xmit (net/bridge/br_forward.c:53)\nbr_handle_frame_finish (net/bridge/br_input.c:229)\nbr_handle_frame (net/bridge/br_input.c:315)\n__netif_receive_skb_core.constprop.0 (net/core/dev.c:6099)\n__netif_receive_skb_list_core (net/core/dev.c:6287)\nnetif_receive_skb_list_internal (net/core/dev.c:6445)\nnapi_complete_done (net/core/dev.c:6813)\ngro_cell_poll (net/core/gro_cells.c:74)\n__napi_poll (net/core/dev.c:7735)\nnet_rx_action (net/core/dev.c:7798 net/core/dev.c:7955)\nhandle_softirqs (kernel/softirq.c:622)\ndo_softirq (kernel/softirq.c:523 kernel/softirq.c:510 )\n__local_bh_enable_ip (kernel/softirq.c:450)\ntun_get_user (drivers/net/tun.c:1986 (discriminator 1))\ntun_chr_write_iter (drivers/net/tun.c:2032)\n\nThe issue is completely latent until qdisc read transport header in\ncommit 7fb4c1967011 (\"net: pull headers in qdisc_pkt_len_segs_init()\").\nThe crash requires four conditions to line up:\n\n1. The incoming packet is encapsulated and carries GSO metadata. The outer\n transport header offset is stored in skb-\u003etransport_header while the\n packet is still in the outer tunnel context.\n2. The tunnel receiver strips the outer headers. skb-\u003edata is advanced to\n the inner frame, but skb-\u003etransport_header is left pointing to the\n now-removed outer L4 header, so it becomes a negative offset relative to\n the new data.\n3. The inner frame is not delivered to the local IP stack. Instead, it\n is forwarded at L2 by a bridge or HSR, so ip_rcv_core() never runs and\n the transport header is not reset to the inner L4 offset.\n4. The forwarding path calls __dev_queue_xmit(), which enters\n qdisc_pkt_len_segs_init(). That function computes the GSO header length\n from skb_transport_offset(skb). Because the offset is negative, the\n unsigned cast overflows and pskb_may_pull(skb, hdr_len +\n sizeof(struct tcphdr)) reads past the end of the skb, triggering a\n KASAN fault or page fault.\n\nThe issue specifically requires GSO packets (shinfo-\u003egso_size != 0), which\nare processed/aggregated through gro_cells. Fix this by clearing\ntransport_header to the ~0U sentinel in gro_cell for all tunnnel driver.\nGTP does not support GRO/GSO, drop the evil GSO packets in GTP directly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98401",
"url": "https://www.suse.com/security/cve/CVE-2026-98401"
},
{
"category": "external",
"summary": "SUSE Bug 1285574 for CVE-2026-98401",
"url": "https://bugzilla.suse.com/1285574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98401"
},
{
"cve": "CVE-2026-98404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98404"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()\n\nSmatch complains that returning a NULL here will lead to a NULL pointer\ndereference in drm_mode_addfb2(). Return an error pointer instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98404",
"url": "https://www.suse.com/security/cve/CVE-2026-98404"
},
{
"category": "external",
"summary": "SUSE Bug 1285556 for CVE-2026-98404",
"url": "https://bugzilla.suse.com/1285556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98404"
},
{
"cve": "CVE-2026-98405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98405"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix missing iov bounds check in parse_posix_sids()\n\nIn parse_posix_sids(), sidsbuf_end is calculated using the server-supplied\nout_len without being validated against the actual length of the received\niov (iov_len).\n\nIf a server provides an inflated out_len, sidsbuf_end will point past the\nend of the iov. This defeats the bounds guards in posix_info_sid_size(),\nallowing out-of-bounds reads into adjacent kernel memory.\n\nFix this by rejecting responses where the calculated sidsbuf_end would\nexceed the received iov boundaries or cause pointer wraparound.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98405",
"url": "https://www.suse.com/security/cve/CVE-2026-98405"
},
{
"category": "external",
"summary": "SUSE Bug 1285583 for CVE-2026-98405",
"url": "https://bugzilla.suse.com/1285583"
},
{
"category": "external",
"summary": "SUSE Bug 1285584 for CVE-2026-98405",
"url": "https://bugzilla.suse.com/1285584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-98405"
},
{
"cve": "CVE-2026-98407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98407"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: fix heap OOB write on key removal\n\nWhen a key is removed (data == NULL), rsi_hal_load_key() runs:\n\n\tmemset(\u0026set_key[FRAME_DESC_SZ], 0, frame_len - FRAME_DESC_SZ);\n\nset_key is a struct rsi_set_key *, so the subscript is scaled by\nsizeof(struct rsi_set_key) (160 bytes): \u0026set_key[FRAME_DESC_SZ] is\nskb-\u003edata + 2560, and the memset writes 144 zero bytes starting\n2.4KB past the end of the 160-byte skb data buffer, corrupting\nunrelated heap objects. The intended byte offset would have been\n(u8 *)set_key + FRAME_DESC_SZ.\n\nThe write fires on every DISABLE_KEY callback, so plain disconnects,\nroams and interface teardowns trigger it on real networks.\n\nThe memset is redundant: the whole buffer is zeroed right after\nallocation, so the frame sent to the device is byte-identical\nwithout it. Drop the else branch; normal operation is unaffected.\n\nDiscovered by Atuin - Automated Vulnerability Discovery Engine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98407",
"url": "https://www.suse.com/security/cve/CVE-2026-98407"
},
{
"category": "external",
"summary": "SUSE Bug 1285553 for CVE-2026-98407",
"url": "https://bugzilla.suse.com/1285553"
},
{
"category": "external",
"summary": "SUSE Bug 1285554 for CVE-2026-98407",
"url": "https://bugzilla.suse.com/1285554"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-98407"
},
{
"cve": "CVE-2026-98410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98410"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog\n\nda9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(),\nwhen the watchdog is left running by the driver sets\nWDOG_HW_RUNNING in da9063_wdt_probe() but userspace never opens the\ndevice, so WDOG_ACTIVE remains cleared, the wdt_disable() will not be\nexecuted in da9063_wdt_suspend. In this case, the suspend callback is\na no-op and the watchdog keeps counting during system suspend,\nleading to an unexpected system reset.\nCheck WDOG_HW_RUNNING and wdd\uff0ccan fix this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98410",
"url": "https://www.suse.com/security/cve/CVE-2026-98410"
},
{
"category": "external",
"summary": "SUSE Bug 1285587 for CVE-2026-98410",
"url": "https://bugzilla.suse.com/1285587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98410"
},
{
"cve": "CVE-2026-98414",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98414"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemcg: avoid charging the root memcg from obj_cgroup_charge_pages()\n\nobj_cgroup_charge_pages() resolves the objcg to its memcg and calls\ntry_charge_memcg(), which does not short circuit the root memcg. That\nmemcg can be the root memcg: obj_cgroup_is_root() reflects the memcg the\nobjcg was created for and is never updated, while memcg_reparent_objcgs()\ndoes redirect objcg-\u003ememcg to the parent on rmdir. An objcg of a dying\nchild of root therefore passes every obj_cgroup_is_root() filter but\nresolves to the root memcg.\n\nFolios keep the objcg they were charged with, so this is easy to reach\nthrough zswap: allocate anon memory in a cgroup, move the task out, remove\nthe cgroup, then write to the root cgroup\u0027s memory.reclaim. The reclaimed\nfolios are charged through the reparented objcg and end up in\nrefill_stock() with the root memcg:\n\n WARNING: mm/memcontrol.c:2198 at refill_stock+0x644/0x940\n refill_stock+0x644/0x940\n try_charge_memcg+0x12d6/0x1570\n __obj_cgroup_charge+0x35/0xf0\n obj_cgroup_charge+0x1de/0x210\n obj_cgroup_charge_zswap+0x83/0x270\n zswap_store+0x1620/0x2000\n swap_writeout+0x94c/0x14c0\n shrink_folio_list+0x3388/0x52b0\n [...]\n try_to_free_mem_cgroup_pages+0x30d/0x830\n user_proactive_reclaim+0x504/0x840\n memory_reclaim+0x1f/0x30\n\nBeyond the warning, the charge is asymmetric: obj_cgroup_uncharge_pages()\nskips refill_stock() for the root memcg, so the root\u0027s page counter grows\nand is never uncharged. It is not user visible, since memory.current is\nnot exposed on the root, but it is a leak.\n\nUse try_charge(), which returns early for the root memcg, restoring the\nsymmetry with obj_cgroup_uncharge_pages().\n\nThe above sequence was scripted into a standalone reproducer (zswap on,\nswap on a virtio disk, 512MB of anon memory faulted in inside a child of\nthe root cgroup, the task then migrated to the root cgroup, the child\nremoved, followed by \"echo 600M swappiness=max \u003e memory.reclaim\" on the\nroot) and run in a CONFIG_DEBUG_VM=y VM. It reproduces the splat on the\nfirst zswap store of a reparented folio, with the same call chain as the\nreport. With this patch applied the splat is gone while the zswap store\ncount over the run is unchanged, so the same path is still exercised. \ncgroup selftests test_zswap, test_kmem and test_memcontrol show no new\nfailures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98414",
"url": "https://www.suse.com/security/cve/CVE-2026-98414"
},
{
"category": "external",
"summary": "SUSE Bug 1285580 for CVE-2026-98414",
"url": "https://bugzilla.suse.com/1285580"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98414"
},
{
"cve": "CVE-2026-98415",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98415"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: samsung: exynos-pmu: fix use-after-free of interrupt generator node\n\nThe setup_cpuhp_and_cpuidle() parses the device tree node for the\ninterrupt generation block via of_parse_phandle() and decrements its\nreference count using of_node_put() immediately after fetching the resource\naddress. However, later the intr_gen_node pointer is passed into\nof_syscon_register_regmap().\n\nFix this by declaring intr_gen_node with __free() and removing\nof_node_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98415",
"url": "https://www.suse.com/security/cve/CVE-2026-98415"
},
{
"category": "external",
"summary": "SUSE Bug 1285578 for CVE-2026-98415",
"url": "https://bugzilla.suse.com/1285578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98415"
},
{
"cve": "CVE-2026-98416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98416"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()\n\nIf devm_kcalloc() for rx_chn-\u003eflows fails in a channel request function,\nthe error path calls k3_udma_glue_release_rx_chn(), which dereferences\nthe NULL rx_chn-\u003eflows pointer in k3_udma_glue_release_rx_flow().\n\nSkip the flow release loop in k3_udma_glue_release_rx_chn() when\nrx_chn-\u003eflows is not allocated.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98416",
"url": "https://www.suse.com/security/cve/CVE-2026-98416"
},
{
"category": "external",
"summary": "SUSE Bug 1285569 for CVE-2026-98416",
"url": "https://bugzilla.suse.com/1285569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98416"
},
{
"cve": "CVE-2026-98418",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98418"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/core: Avoid false migration warning for proxy donors\n\nProxy execution can move a blocked donor\u0027s scheduling context to the\nlock owner\u0027s CPU even when the donor is migration-disabled. The donor\ndoes not execute there, and its original execution CPU remains recorded\nin wake_cpu.\n\nset_task_cpu() warns unconditionally for migration-disabled tasks, so a\nsubsequent proxy migration or the wakeup path returning the donor home\ntriggers a false positive: moving a blocked scheduling context does not\nviolate the migration-disabled execution context.\n\nFor example, creating a mutex owner on CPU1 and a migration-disabled\nwaiter on CPU0 can trigger the following warning:\n\n proxy_migrate_repro: donor blocking on CPU0 with migration disabled\n proxy_migrate_repro: donor moved from CPU0 to CPU1\n WARNING: kernel/sched/core.c:3389 at set_task_cpu+0x1d3/0x280\n ...\n Call Trace:\n try_to_wake_up+0x43f/0x780\n __mutex_unlock_slowpath+0x330/0x540\n owner_fn+0x9f/0xc0 [proxy_migrate_repro]\n ...\n proxy_migrate_repro: donor woke on CPU0, task_cpu=0\n proxy_migrate_repro: completed\n\nExclude blocked proxy donors from the warning. The proxy wakeup path\nrestores an executable placement before clearing the blocked state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98418",
"url": "https://www.suse.com/security/cve/CVE-2026-98418"
},
{
"category": "external",
"summary": "SUSE Bug 1285576 for CVE-2026-98418",
"url": "https://bugzilla.suse.com/1285576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98418"
},
{
"cve": "CVE-2026-98419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98419"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrop_monitor: fix out-of-bounds write in reset_per_cpu_data()\n\nIn reset_per_cpu_data(), al is computed as:\n\n al = sizeof(struct net_dm_alert_msg);\n al += dm_hit_limit * sizeof(struct net_dm_drop_point);\n al += sizeof(struct nlattr);\n\n skb = genlmsg_new(al, GFP_KERNEL);\n ...\n nla = nla_reserve(skb, NLA_UNSPEC, sizeof(struct net_dm_alert_msg));\n ...\n msg = nla_data(nla);\n memset(msg, 0, al);\n\nBecause al includes sizeof(struct nlattr) (the 4-byte attribute header),\ngenlmsg_new() allocates al bytes of tailroom starting at nla.\nHowever, msg points to nla_data(nla), which is located\nsizeof(struct nlattr) bytes past nla. Calling memset(msg, 0, al)\ntherefore writes al bytes starting from msg, exceeding the allocated\nbuffer by sizeof(struct nlattr) (4 bytes) and corrupting\nskb_shared_info.\n\nFix this by letting al represent only the payload length, allocating\nthe skb with genlmsg_new(nla_total_size(al), GFP_KERNEL), and zeroing\nal bytes from msg.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98419",
"url": "https://www.suse.com/security/cve/CVE-2026-98419"
},
{
"category": "external",
"summary": "SUSE Bug 1285555 for CVE-2026-98419",
"url": "https://bugzilla.suse.com/1285555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98419"
},
{
"cve": "CVE-2026-98420",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98420"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: follow SMB2 session expiration semantics\n\nksmbd_session_register() destroys valid sessions after ten seconds of\ninactivity whenever a client starts another SessionSetup exchange. This\nconfuses Session.IdleTime with Session.ExpirationTime. Windows can create\nadditional authenticated sessions on an existing connection, so deleting\nthe older session invalidates its tree connects and makes mapped drives\nfail with STATUS_NETWORK_NAME_DELETED.\n\nThe session expiration rules require the server to change a valid session\nto expired only after its credential expiration time passes. A valid or\nexpired session otherwise keeps its connection from being scavenged.\nConnections that have not negotiated a dialect, have no sessions, or have\nonly InProgress sessions are disconnected after an implementation-specific\ntimeout. Use the Windows-compatible 45 second value and run the expiration\ncheck periodically for both TCP and SMB Direct.\n\nKeep zero as an infinite credential expiration time, and count each\nValid-to-Expired transition. Set expired sessions to InProgress when they\nreauthenticate. If authentication fails, remove the session from the\nglobal and per-connection tables immediately, including SMB3 multichannel\nconnections.\n\nRetain protection against abandoned SessionId-zero exchanges by allowing\nonly one InProgress authentication per connection. Additional exchanges\nfail with STATUS_INSUFFICIENT_RESOURCES, and stale InProgress sessions are\nreaped after the same 45 second setup timeout. This bounds the original\nunauthenticated memory-exhaustion path without evicting established\nsessions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98420",
"url": "https://www.suse.com/security/cve/CVE-2026-98420"
},
{
"category": "external",
"summary": "SUSE Bug 1285557 for CVE-2026-98420",
"url": "https://bugzilla.suse.com/1285557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98420"
},
{
"cve": "CVE-2026-98421",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98421"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: require a peer station for TDLS setup confirm\n\nIt\u0027s nonsense for the setup confirm to go to station that\ndoesn\u0027t even exist, and it hits a warning when building\nthe frame:\n\n WARN_ON_ONCE(!sta || !ap_sta)\n\nOnly accept WLAN_TDLS_SETUP_CONFIRM when the station is\nalready there as a TDLS station. Need to copy the call\nto ieee80211_tdls_prep_mgmt_packet() since the existing\nWLAN_TDLS_DISCOVERY_REQUEST already falls through to it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98421",
"url": "https://www.suse.com/security/cve/CVE-2026-98421"
},
{
"category": "external",
"summary": "SUSE Bug 1285564 for CVE-2026-98421",
"url": "https://bugzilla.suse.com/1285564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98421"
},
{
"cve": "CVE-2026-98422",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98422"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: reset the AP_VLAN tailroom counter on ifdown\n\nOn ifup, AP_VLAN interfaces get crypto_tx_tailroom_needed_cnt from\nthe AP interface, but it\u0027s never decremented again unless the AP is\nalso brought down. Thus, bringing the same AP_VLAN up again will\nincrement the counter again and eventually hit the sanity check:\n\n WARN_ON_ONCE(sdata-\u003ecrypto_tx_tailroom_needed_cnt !=\n master-\u003ecrypto_tx_tailroom_needed_cnt);\n\nReset it on ifdown to avoid that.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98422",
"url": "https://www.suse.com/security/cve/CVE-2026-98422"
},
{
"category": "external",
"summary": "SUSE Bug 1285561 for CVE-2026-98422",
"url": "https://bugzilla.suse.com/1285561"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98422"
},
{
"cve": "CVE-2026-98423",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98423"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: don\u0027t hand frames to mac80211 while stopping\n\nThe code checks -\u003estarted for frames coming from wmediumd, but the\nradio can be stopped after the check and before frame delivery,\ncausing mac80211 to hit the WARN_ON(!local-\u003estarted).\n\nExpand the mutex for this case and synchronise against it when the\nradio is stopped to avoid being able to hit the warning with hwsim.\n\nDrop the error print that would\u0027ve complicated the error path, it\nonly triggers for allocation failures (already noisy) and malformed\nframes anyway.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98423",
"url": "https://www.suse.com/security/cve/CVE-2026-98423"
},
{
"category": "external",
"summary": "SUSE Bug 1285565 for CVE-2026-98423",
"url": "https://bugzilla.suse.com/1285565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 1.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98423"
},
{
"cve": "CVE-2026-98424",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98424"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: undo netns switch if renaming the wiphy fails\n\nOnce all the interfaces have been moved, cfg80211_switch_netns()\nmoves the wiphy itself by setting its network namespace and then\nrenaming it, which makes sysfs move it. The rename can fail (but\nonly on allocation failures), leaving things mixed up and hitting\nthe warning there.\n\nIgnoring it isn\u0027t great, undo the move and let the change fail\nin this case. If undo fails then WARN, then things would again\nbe stuck in two different network namespaces.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98424",
"url": "https://www.suse.com/security/cve/CVE-2026-98424"
},
{
"category": "external",
"summary": "SUSE Bug 1285566 for CVE-2026-98424",
"url": "https://bugzilla.suse.com/1285566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98424"
},
{
"cve": "CVE-2026-98425",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98425"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don\u0027t warn when an IBSS has no channel to scan\n\nieee80211_request_ibss_scan() warns when regulatory leaves no\nallowed channel, but that can happen as the regdomain can change\nwhile IBSS is operating, and it can continue to operate briefly\nduring the 60s grace period until it\u0027s shut down.\n\nJust remove the warning in this case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98425",
"url": "https://www.suse.com/security/cve/CVE-2026-98425"
},
{
"category": "external",
"summary": "SUSE Bug 1285567 for CVE-2026-98425",
"url": "https://bugzilla.suse.com/1285567"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98425"
},
{
"cve": "CVE-2026-98426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98426"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path\n\nmwifiex_pcie_request_irq() registers each MSI-X vector with a per-index\ndev_id (\u0026card-\u003emsix_ctx[i]). On a request_irq() failure the cleanup loop\n\"for (j = 0; j \u003c i; j++)\" frees msix_entries[j].vector but passes the\nfailed index\u0027s \u0026card-\u003emsix_ctx[i] as the dev_id. free_irq() matches on\n(irq, dev_id), so it fails to find the action registered with\n\u0026card-\u003emsix_ctx[j]: the already-requested IRQ j is not freed (leaked) and\nfree_irq() warns about freeing a non-existent IRQ. Use \u0026card-\u003emsix_ctx[j].",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98426",
"url": "https://www.suse.com/security/cve/CVE-2026-98426"
},
{
"category": "external",
"summary": "SUSE Bug 1285562 for CVE-2026-98426",
"url": "https://bugzilla.suse.com/1285562"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-98426"
},
{
"cve": "CVE-2026-98427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98427"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: codel: bound the dropping loop per dequeue call\n\nThe CoDel control law schedules the next drop one interval/sqrt(count)\nafter the previous drop, using the configured interval\n(codel_params.interval). For very small intervals the scheduled step\nrounds down to zero, so the dropping loop in codel_dequeue() never\nadvances and drains the entire backlog under the qdisc lock in one\ncall - an unprivileged user can trigger a soft lockup this way.\n\nFix in the shared codel code used by both codel and fq_codel:\n\n1. Make the control-law step at least 1 tick so the dropping loop\n always moves forward.\n\n2. Cap the dropping loop at CODEL_MAX_DROPS_PER_DEQUEUE (256) drops\n per codel_dequeue() call, resyncing drop_next to now when the cap\n is hit: the catch-up owed to the loop grows with the idle gap and\n the backlog, which no interval threshold can bound. This is a\n deliberate behaviour change after long idle gaps.\n\nThe cap applies to fq_codel (4b549a2ef4be) and the mac80211 TXQ path\n(fixed interval, cap only).\n\nThe target sojourn delay (codel_params.target) is not validated: it\ndoes not feed the control law, so a sub-tick value is aggressive\nrather than deadlock-prone.\n\nConditions to recreate the bug:\n - tc qdisc add dev lo root handle 1: tbf rate 1kbit burst 2kb limit 1000000\n - tc qdisc add dev lo parent 1:1 handle 10: codel interval 2us target 1ms noecn limit 1000000 (same for fq_codel)\n - unpatched kernel: tc accepts it; a UDP flood under the 1kbit tbf\n soft-lockups (watchdog: BUG: soft lockup) while one\n codel_dequeue() call drops the backlog under the qdisc lock\n - patched kernel: same setup, at most 256 drops per dequeue call,\n no soft lockup\n\nTesting: claim reproducer and interval 2us/3us variants run clean;\ntdc qdisc category passes (see the selftests patch).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98427",
"url": "https://www.suse.com/security/cve/CVE-2026-98427"
},
{
"category": "external",
"summary": "SUSE Bug 1285572 for CVE-2026-98427",
"url": "https://bugzilla.suse.com/1285572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98427"
},
{
"cve": "CVE-2026-98428",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98428"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb: 6fire: Avoid embedded URBs\n\nThe USB 6fire driver uses URBs embedded in different structs for PCM,\nMIDI and communication, and this is basically a buggy implementation\nnowadays; since a URB is managed with a refcount, this may lead to a\nUAF when the URB is released asynchronously.\n\nFor addressing the problem, this patch converts those embedded URBs to\nones that are properly allocated via usb_alloc_urb(). The\npcm_urb.packets[] is gone, as it\u0027s allocated by usb_alloc_urb(), hence\nit\u0027s found in urb.iso_frame_desc[] instead.\n\nThe conversions are rather straightforward; each embedded struct urb\nis changed to a pointer, and its callers are updated accordingly.\nThe resource for those structs are released in the common destructor\nfunctions (usb6fire_comm_free(), etc), which are called at both the\ninit error path and the disconnect.\n\nNo functional changes, only compile-tested.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98428",
"url": "https://www.suse.com/security/cve/CVE-2026-98428"
},
{
"category": "external",
"summary": "SUSE Bug 1285560 for CVE-2026-98428",
"url": "https://bugzilla.suse.com/1285560"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98428"
},
{
"cve": "CVE-2026-98429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98429"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/efa: Keep EQ resources alive while IRQ is registered\n\nThe completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was\nregistered before that state was initialized, while teardown released the\nbuffer before free_irq() synchronized the handler.\n\nInitialize the EQ without arming it, register the IRQ, and then arm it.\nReverse the resource order during teardown by freeing the IRQ before\ndestroying the EQ.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98429",
"url": "https://www.suse.com/security/cve/CVE-2026-98429"
},
{
"category": "external",
"summary": "SUSE Bug 1285563 for CVE-2026-98429",
"url": "https://bugzilla.suse.com/1285563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98429"
},
{
"cve": "CVE-2026-98430",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98430"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/efa: Keep admin queues alive while IRQ is registered\n\nThe management IRQ handler accesses both the admin completion queue and the\nasync event queue. The driver registered the IRQ before constructing these\nqueues and destroyed them before freeing the IRQ, so the handler\u0027s lifetime\nwas not contained by the resources it accesses.\n\nInitialize the queues with interrupts masked, request the IRQ, and then\nswitch to interrupt mode. On removal, reset the device and free the IRQ\nbefore destroying the queues. Also reset the device before destroying the\nqueues if IRQ registration fails, because the device already has their DMA\naddresses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98430",
"url": "https://www.suse.com/security/cve/CVE-2026-98430"
},
{
"category": "external",
"summary": "SUSE Bug 1285558 for CVE-2026-98430",
"url": "https://bugzilla.suse.com/1285558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98430"
},
{
"cve": "CVE-2026-98431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-98431"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency\n\nCommit 51976c6cd786 (\"RDMA/core: Provide rdma_user_mmap_disassociate()\nto disassociate mmap pages\") introduced disassociation_lock to protect\nnew mmap registrations against uverbs_user_mmap_disassociate(), but\ncreated an ABBA deadlock:\n\n Thread A (mmap / fork):\n mmap_lock -\u003e disassociation_lock\n\n Thread B (disassociate):\n disassociation_lock -\u003e mmap_lock\n\nFix by removing disassociation_lock entirely and using the pre-existing\nhw_destroy_rwsem instead. hw_destroy_rwsem already provides the same\nprotection: rdma_umap_open() and ib_uverbs_mmap() both use\ndown_read_trylock() before registering a new VMA, so holding hw_destroy_rwsem\nin uverbs_user_mmap_disassociate() is sufficient to block new registrations.\ntrylock is used in both mmap paths (not blocking down_read) because\nmmap_lock is already held on entry, and uverbs_user_mmap_disassociate()\nacquires mmap_lock internally - a blocking read would recreate the same\ndeadlock.\n\nThe only caller that was not taking hw_destroy_rwsem for write was\nrdma_user_mmap_disassociate(). Fix it to take the rwsem per-ufile while\niterating under lists_mutex. This is safe because ib_uverbs_close()\nreleases hw_destroy_rwsem entirely before acquiring lists_mutex, so the\ntwo locks are never held simultaneously.\n\nlockdep warning:\n\n [ 776.654252] ======================================================\n [ 776.655214] WARNING: possible circular locking dependency detected\n [ 776.656167] 6.18.0for-upstream_debug_94e244d9ccab #1 Not tainted\n [ 776.657114] ------------------------------------------------------\n [ 776.658087] devlink/14824 is trying to acquire lock:\n [ 776.658879] ffff88811170c800 (\u0026mm-\u003emmap_lock){++++}-{4:4}, at: uverbs_user_mmap_disassociate+0x168/0x780 [ib_uverbs]\n [ 776.660479]\n [ 776.660479] but task is already holding lock:\n [ 776.661460] ffff888142d92b08 (\u0026file-\u003edisassociation_lock){+.+.}-{4:4}, at: uverbs_user_mmap_disassociate+0x39/0x780 [ib_uverbs]\n [ 776.663177]\n [ 776.663177] which lock already depends on the new lock.\n [ 776.663177]\n [ 776.664525]\n [ 776.664525] the existing dependency chain (in reverse order) is:\n [ 776.665724]\n [ 776.665724] -\u003e #2 (\u0026file-\u003edisassociation_lock){+.+.}-{4:4}:\n [ 776.666887] __mutex_lock+0x16d/0x2330\n [ 776.667633] rdma_umap_open+0x129/0x280 [ib_uverbs]\n [ 776.668489] dup_mmap+0xa40/0x1790\n [ 776.669170] copy_process+0x5dd2/0x6170\n [ 776.669933] kernel_clone+0xb6/0x610\n [ 776.670636] __do_sys_clone+0xb5/0xf0\n [ 776.671354] do_syscall_64+0x70/0x12e0\n [ 776.672083] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n [ 776.672940]\n [ 776.672940] -\u003e #1 (\u0026mm-\u003emmap_lock/1){+.+.}-{4:4}:\n [ 776.673985] down_write_nested+0x90/0x1e0\n [ 776.674751] dup_mmap+0x201/0x1790\n [ 776.675448] copy_process+0x5dd2/0x6170\n [ 776.676180] kernel_clone+0xb6/0x610\n [ 776.676904] __do_sys_clone+0xb5/0xf0\n [ 776.677615] do_syscall_64+0x70/0x12e0\n [ 776.678351] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n [ 776.679239]\n [ 776.679239] -\u003e #0 (\u0026mm-\u003emmap_lock){++++}-{4:4}:\n [ 776.680253] __lock_acquire+0x18c6/0x2ec0\n [ 776.681018] lock_acquire+0x10e/0x2e0\n [ 776.681742] down_read+0x95/0x430\n [ 776.682395] uverbs_user_mmap_disassociate+0x168/0x780 [ib_uverbs]\n [ 776.683436] uverbs_destroy_ufile_hw+0x1ae/0x270 [ib_uverbs]\n [ 776.684416] ib_uverbs_remove_one+0x22b/0x420 [ib_uverbs]\n [ 776.685371] remove_client_context+0xa6/0xf0 [ib_core]\n [ 776.686342] disable_device+0x12b/0x240 [ib_core]\n [ 776.687249] __ib_unregister_device+0x269/0x460 [ib_core]\n [ 776.688233] ib_unregister_device+0x21/0x30 [ib_core]\n [ 776.689140] mlx5r_remove+0xd0/0x170 [mlx5_ib]\n [ 776.689999] device_release_driver_internal+0x3b2/0x5\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-98431",
"url": "https://www.suse.com/security/cve/CVE-2026-98431"
},
{
"category": "external",
"summary": "SUSE Bug 1285559 for CVE-2026-98431",
"url": "https://bugzilla.suse.com/1285559"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.2.11-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-17T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-98431"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.