RHSA-2026:2264
Vulnerability from csaf_opensuse - Published: 2026-02-09 00:00 - Updated: 2026-09-16 18:28Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:2264.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:2264.
Patchnames: RHSA-2026:2264
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:2264.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:2264.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:2264",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_2264.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:2264",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-February/002483.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:2264",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-February/002483.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50673 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50673/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38403 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40135 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40158 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40170 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40269 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40269/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68349 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-22998 page",
"url": "https://www.suse.com/security/cve/CVE-2026-22998/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:28:33Z",
"generator": {
"date": "2026-02-09T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:2264",
"initial_release_date": "2026-02-09T00:00:00Z",
"revision_history": [
{
"date": "2026-02-09T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:47:48Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:28:33Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.104.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.104.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.104.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.104.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.104.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.104.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.104.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.104.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.104.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.104.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.104.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.104.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.104.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.104.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.104.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.104.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.104.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.104.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.104.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.104.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.104.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50673",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50673"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix use-after-free in ext4_orphan_cleanup\n\nI caught a issue as follows:\n==================================================================\n BUG: KASAN: use-after-free in __list_add_valid+0x28/0x1a0\n Read of size 8 at addr ffff88814b13f378 by task mount/710\n\n CPU: 1 PID: 710 Comm: mount Not tainted 6.1.0-rc3-next #370\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x73/0x9f\n print_report+0x25d/0x759\n kasan_report+0xc0/0x120\n __asan_load8+0x99/0x140\n __list_add_valid+0x28/0x1a0\n ext4_orphan_cleanup+0x564/0x9d0 [ext4]\n __ext4_fill_super+0x48e2/0x5300 [ext4]\n ext4_fill_super+0x19f/0x3a0 [ext4]\n get_tree_bdev+0x27b/0x450\n ext4_get_tree+0x19/0x30 [ext4]\n vfs_get_tree+0x49/0x150\n path_mount+0xaae/0x1350\n do_mount+0xe2/0x110\n __x64_sys_mount+0xf0/0x190\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n \u003c/TASK\u003e\n [...]\n==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\next4_fill_super\n ext4_orphan_cleanup\n --- loop1: assume last_orphan is 12 ---\n list_add(\u0026EXT4_I(inode)-\u003ei_orphan, \u0026EXT4_SB(sb)-\u003es_orphan)\n ext4_truncate --\u003e return 0\n ext4_inode_attach_jinode --\u003e return -ENOMEM\n iput(inode) --\u003e free inode\u003c12\u003e\n --- loop2: last_orphan is still 12 ---\n list_add(\u0026EXT4_I(inode)-\u003ei_orphan, \u0026EXT4_SB(sb)-\u003es_orphan);\n // use inode\u003c12\u003e and trigger UAF\n\nTo solve this issue, we need to propagate the return value of\next4_inode_attach_jinode() appropriately.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50673",
"url": "https://www.suse.com/security/cve/CVE-2022-50673"
},
{
"category": "external",
"summary": "SUSE Bug 1255521 for CVE-2022-50673",
"url": "https://bugzilla.suse.com/1255521"
},
{
"category": "external",
"summary": "SUSE Bug 1255522 for CVE-2022-50673",
"url": "https://bugzilla.suse.com/1255522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-50673"
},
{
"cve": "CVE-2025-38403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38403"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/vmci: Clear the vmci transport packet properly when initializing it\n\nIn vmci_transport_packet_init memset the vmci_transport_packet before\npopulating the fields to avoid any uninitialised data being left in the\nstructure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38403",
"url": "https://www.suse.com/security/cve/CVE-2025-38403"
},
{
"category": "external",
"summary": "SUSE Bug 1247141 for CVE-2025-38403",
"url": "https://bugzilla.suse.com/1247141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38403"
},
{
"cve": "CVE-2025-40135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40135"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: use RCU in ip6_xmit()\n\nUse RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent\npossible UAF.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40135",
"url": "https://www.suse.com/security/cve/CVE-2025-40135"
},
{
"category": "external",
"summary": "SUSE Bug 1253342 for CVE-2025-40135",
"url": "https://bugzilla.suse.com/1253342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40135"
},
{
"cve": "CVE-2025-40158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: use RCU in ip6_output()\n\nUse RCU in ip6_output() in order to use dst_dev_rcu() to prevent\npossible UAF.\n\nWe can remove rcu_read_lock()/rcu_read_unlock() pairs\nfrom ip6_finish_output2().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40158",
"url": "https://www.suse.com/security/cve/CVE-2025-40158"
},
{
"category": "external",
"summary": "SUSE Bug 1253402 for CVE-2025-40158",
"url": "https://bugzilla.suse.com/1253402"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40158"
},
{
"cve": "CVE-2025-40170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: use dst_dev_rcu() in sk_setup_caps()\n\nUse RCU to protect accesses to dst-\u003edev from sk_setup_caps()\nand sk_dst_gso_max_size().\n\nAlso use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(),\nand ip_dst_mtu_maybe_forward().\n\nip4_dst_hoplimit() can use dst_dev_net_rcu().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40170",
"url": "https://www.suse.com/security/cve/CVE-2025-40170"
},
{
"category": "external",
"summary": "SUSE Bug 1253413 for CVE-2025-40170",
"url": "https://bugzilla.suse.com/1253413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40170"
},
{
"cve": "CVE-2025-40269",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40269"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential overflow of PCM transfer buffer\n\nThe PCM stream data in USB-audio driver is transferred over USB URB\npacket buffers, and each packet size is determined dynamically. The\npacket sizes are limited by some factors such as wMaxPacketSize USB\ndescriptor. OTOH, in the current code, the actually used packet sizes\nare determined only by the rate and the PPS, which may be bigger than\nthe size limit above. This results in a buffer overflow, as reported\nby syzbot.\n\nBasically when the limit is smaller than the calculated packet size,\nit implies that something is wrong, most likely a weird USB\ndescriptor. So the best option would be just to return an error at\nthe parameter setup time before doing any further operations.\n\nThis patch introduces such a sanity check, and returns -EINVAL when\nthe packet size is greater than maxpacksize. The comparison with\nep-\u003epacksize[1] alone should suffice since it\u0027s always equal or\ngreater than ep-\u003epacksize[0].",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40269",
"url": "https://www.suse.com/security/cve/CVE-2025-40269"
},
{
"category": "external",
"summary": "SUSE Bug 1255035 for CVE-2025-40269",
"url": "https://bugzilla.suse.com/1255035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40269"
},
{
"cve": "CVE-2025-68349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68349"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid\n\nFixes a crash when layout is null during this call stack:\n\nwrite_inode\n -\u003e nfs4_write_inode\n -\u003e pnfs_layoutcommit_inode\n\npnfs_set_layoutcommit relies on the lseg refcount to keep the layout\naround. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt\nto reference a null layout.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68349",
"url": "https://www.suse.com/security/cve/CVE-2025-68349"
},
{
"category": "external",
"summary": "SUSE Bug 1255544 for CVE-2025-68349",
"url": "https://bugzilla.suse.com/1255544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68349"
},
{
"cve": "CVE-2026-22998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-22998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec\n\nCommit efa56305908b (\"nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length\")\nadded ttag bounds checking and data_offset\nvalidation in nvmet_tcp_handle_h2c_data_pdu(), but it did not validate\nwhether the command\u0027s data structures (cmd-\u003ereq.sg and cmd-\u003eiov) have\nbeen properly initialized before processing H2C_DATA PDUs.\n\nThe nvmet_tcp_build_pdu_iovec() function dereferences these pointers\nwithout NULL checks. This can be triggered by sending H2C_DATA PDU\nimmediately after the ICREQ/ICRESP handshake, before\nsending a CONNECT command or NVMe write command.\n\nAttack vectors that trigger NULL pointer dereferences:\n1. H2C_DATA PDU sent before CONNECT -\u003e both pointers NULL\n2. H2C_DATA PDU for READ command -\u003e cmd-\u003ereq.sg allocated, cmd-\u003eiov NULL\n3. H2C_DATA PDU for uninitialized command slot -\u003e both pointers NULL\n\nThe fix validates both cmd-\u003ereq.sg and cmd-\u003eiov before calling\nnvmet_tcp_build_pdu_iovec(). Both checks are required because:\n- Uninitialized commands: both NULL\n- READ commands: cmd-\u003ereq.sg allocated, cmd-\u003eiov NULL\n- WRITE commands: both allocated",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-22998",
"url": "https://www.suse.com/security/cve/CVE-2026-22998"
},
{
"category": "external",
"summary": "SUSE Bug 1257209 for CVE-2026-22998",
"url": "https://bugzilla.suse.com/1257209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.104.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.104.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.104.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-22998"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…