RHSA-2026:2720

Vulnerability from csaf_opensuse - Published: 2026-02-16 00:00 - Updated: 2026-09-16 18:31
Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:2720. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:2720.
Patchnames: RHSA-2026:2720
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64 —
Vendor Fix
Threats
Impact moderate
Affected products
Recommended 20 products, the same list as for CVE-2023-53762
Threats
Impact moderate
Affected products
Recommended 20 products, the same list as for CVE-2023-53762
Threats
Impact moderate

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2026:2720.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:2720.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2026:2720",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_2720.json"
      },
      {
        "category": "self",
        "summary": "URL for RHSA-2026:2720",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-February/002516.html"
      },
      {
        "category": "self",
        "summary": "E-Mail link for RHSA-2026:2720",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-February/002516.html"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-53762 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-53762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-40168 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-40168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-40304 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-40304/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-16T18:31:02Z",
      "generator": {
        "date": "2026-02-16T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2026:2720",
      "initial_release_date": "2026-02-16T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-02-16T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T17:50:33Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T18:31:02Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
                "product": {
                  "name": "kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
                  "product_id": "kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.105.1.el8_10?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-4.18.0-553.105.1.el8_10.noarch",
                "product": {
                  "name": "kernel-doc-4.18.0-553.105.1.el8_10.noarch",
                  "product_id": "kernel-doc-4.18.0-553.105.1.el8_10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.105.1.el8_10?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "bpftool-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "bpftool-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@4.18.0-553.105.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.105.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-core-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-core-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-core-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-core@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.105.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.105.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.105.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.105.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.105.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.105.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.105.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "perf-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "perf-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@4.18.0-553.105.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.105.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-4.18.0-553.105.1.el8_10.x86_64",
                "product": {
                  "name": "python3-perf-4.18.0-553.105.1.el8_10.x86_64",
                  "product_id": "python3-perf-4.18.0-553.105.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-perf@4.18.0-553.105.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.105.1.el8_10.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 8",
                "product": {
                  "name": "SUSE Liberty Linux 8",
                  "product_id": "SUSE Liberty Linux 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "bpftool-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch"
        },
        "product_reference": "kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-core-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-4.18.0-553.105.1.el8_10.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch"
        },
        "product_reference": "kernel-doc-4.18.0-553.105.1.el8_10.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "perf-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-4.18.0-553.105.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
        },
        "product_reference": "python3-perf-4.18.0-553.105.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-53762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-53762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync\n\nUse-after-free can occur in hci_disconnect_all_sync if a connection is\ndeleted by concurrent processing of a controller event.\n\nTo prevent this the code now tries to iterate over the list backwards\nto ensure the links are cleanup before its parents, also it no longer\nrelies on a cursor, instead it always uses the last element since\nhci_abort_conn_sync is guaranteed to call hci_conn_del.\n\nUAF crash log:\n==================================================================\nBUG: KASAN: slab-use-after-free in hci_set_powered_sync\n(net/bluetooth/hci_sync.c:5424) [bluetooth]\nRead of size 8 at addr ffff888009d9c000 by task kworker/u9:0/124\n\nCPU: 0 PID: 124 Comm: kworker/u9:0 Tainted: G        W\n6.5.0-rc1+ #10\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n1.16.2-1.fc38 04/01/2014\nWorkqueue: hci0 hci_cmd_sync_work [bluetooth]\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5b/0x90\n print_report+0xcf/0x670\n ? __virt_addr_valid+0xdd/0x160\n ? hci_set_powered_sync+0x2c9/0x4a0 [bluetooth]\n kasan_report+0xa6/0xe0\n ? hci_set_powered_sync+0x2c9/0x4a0 [bluetooth]\n ? __pfx_set_powered_sync+0x10/0x10 [bluetooth]\n hci_set_powered_sync+0x2c9/0x4a0 [bluetooth]\n ? __pfx_hci_set_powered_sync+0x10/0x10 [bluetooth]\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_set_powered_sync+0x10/0x10 [bluetooth]\n hci_cmd_sync_work+0x137/0x220 [bluetooth]\n process_one_work+0x526/0x9d0\n ? __pfx_process_one_work+0x10/0x10\n ? __pfx_do_raw_spin_lock+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n worker_thread+0x92/0x630\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x196/0x1e0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2c/0x50\n \u003c/TASK\u003e\n\nAllocated by task 1782:\n kasan_save_stack+0x33/0x60\n kasan_set_track+0x25/0x30\n __kasan_kmalloc+0x8f/0xa0\n hci_conn_add+0xa5/0xa80 [bluetooth]\n hci_bind_cis+0x881/0x9b0 [bluetooth]\n iso_connect_cis+0x121/0x520 [bluetooth]\n iso_sock_connect+0x3f6/0x790 [bluetooth]\n __sys_connect+0x109/0x130\n __x64_sys_connect+0x40/0x50\n do_syscall_64+0x60/0x90\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nFreed by task 695:\n kasan_save_stack+0x33/0x60\n kasan_set_track+0x25/0x30\n kasan_save_free_info+0x2b/0x50\n __kasan_slab_free+0x10a/0x180\n __kmem_cache_free+0x14d/0x2e0\n device_release+0x5d/0xf0\n kobject_put+0xdf/0x270\n hci_disconn_complete_evt+0x274/0x3a0 [bluetooth]\n hci_event_packet+0x579/0x7e0 [bluetooth]\n hci_rx_work+0x287/0xaa0 [bluetooth]\n process_one_work+0x526/0x9d0\n worker_thread+0x92/0x630\n kthread+0x196/0x1e0\n ret_from_fork+0x2c/0x50\n==================================================================",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-53762",
          "url": "https://www.suse.com/security/cve/CVE-2023-53762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254606 for CVE-2023-53762",
          "url": "https://bugzilla.suse.com/1254606"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-53762"
    },
    {
      "cve": "CVE-2025-40168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-40168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().\n\nsmc_clc_prfx_match() is called from smc_listen_work() and\nnot under RCU nor RTNL.\n\nUsing sk_dst_get(sk)-\u003edev could trigger UAF.\n\nLet\u0027s use __sk_dst_get() and dst_dev_rcu().\n\nNote that the returned value of smc_clc_prfx_match() is not\nused in the caller.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-40168",
          "url": "https://www.suse.com/security/cve/CVE-2025-40168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253427 for CVE-2025-40168",
          "url": "https://bugzilla.suse.com/1253427"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-40168"
    },
    {
      "cve": "CVE-2025-40304",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-40304"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds\n\nAdd bounds checking to prevent writes past framebuffer boundaries when\nrendering text near screen edges. Return early if the Y position is off-screen\nand clip image height to screen boundary. Break from the rendering loop if the\nX position is off-screen. When clipping image width to fit the screen, update\nthe character count to match the clipped width to prevent buffer size\nmismatches.\n\nWithout the character count update, bit_putcs_aligned and bit_putcs_unaligned\nreceive mismatched parameters where the buffer is allocated for the clipped\nwidth but cnt reflects the original larger count, causing out-of-bounds writes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-40304",
          "url": "https://www.suse.com/security/cve/CVE-2025-40304"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255034 for CVE-2025-40304",
          "url": "https://bugzilla.suse.com/1255034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.105.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-4.18.0-553.105.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-4.18.0-553.105.1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-02-16T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-40304"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…