{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603).\n- CVE-2026-31503: udp: Fix wildcard bind conflict check when using hash2 (bsc#1263077).\n- CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync (bsc#1264003).\n- CVE-2026-43057: net: mpls: error out if inner headers are not set (bsc#1264056).\n- CVE-2026-43092: xsk: validate MTU against usable frame size on bind (bsc#1264270).\n- CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).\n- CVE-2026-43157: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).\n- CVE-2026-43167: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).\n- CVE-2026-43191: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (bsc#1264548).\n- CVE-2026-43194: net: consume xmit errors of GSO frames (bsc#1264304).\n- CVE-2026-43199: net/mlx5e: Fix \"scheduling while atomic\" in IPsec MAC address query (bsc#1264556).\n- CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).\n- CVE-2026-43205: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).\n- CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).\n- CVE-2026-43240: ima: verify the previous kernel\u0027s IMA buffer lies in addressable RAM (bsc#1264386).\n- CVE-2026-43248: vhost: move vdpa group bound check to vhost_vdpa (bsc#1264302).\n- CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593).\n- CVE-2026-43294: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels (bsc#1264853).\n- CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).\n- CVE-2026-43320: drm/amd/display: Fix dsc eDP issue (bsc#1264987).\n- CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).\n- CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).\n- CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).\n- CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).\n- CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).\n- CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).\n- CVE-2026-43465: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).\n- CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).\n- CVE-2026-43468: net/mlx5: Fix deadlock between devlink lock and esw-\u003ewq (bsc#1264978).\n- CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731).\n- CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).\n- CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).\n- CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).\n- CVE-2026-45920: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).\n- CVE-2026-45987: KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (bsc#1267213).\n- CVE-2026-45997: scsi: sd: fix missing put_disk() when device_add(\u0026disk_dev) fails (bsc#1266740).\n- CVE-2026-46046: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (bsc#1266726).\n- CVE-2026-46050: md/raid10: fix deadlock with check operation and nowait requests (bsc#1266686).\n- CVE-2026-46051: md/raid5: fix soft lockup in retry_aligned_read() (bsc#1267360).\n- CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).\n- CVE-2026-46059: KVM: nSVM: Always use NextRIP as vmcb02\u0027s NextRIP after first L2 VMRUN (bsc#1267495).\n- CVE-2026-46099: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (bsc#1266722).\n- CVE-2026-46161: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (bsc#1266838).\n- CVE-2026-46178: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (bsc#1267493).\n- CVE-2026-46242: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).\n- CVE-2026-46314: drm/v3d: Reject empty multisync extension to prevent infinite loop (bsc#1267992).\n- CVE-2026-46322: tun: free page on build_skb failure in tun_xdp_one() (bsc#1267994).\n- CVE-2026-52924: sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1269036).\n- CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).\n- CVE-2026-52955: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).\n- CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).\n- CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).\n- CVE-2026-52961: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129).\n- CVE-2026-52993: tipc: fix double-free in tipc_buf_append() (bsc#1269193).\n- CVE-2026-53021: scsi: target: core: Fix integer overflow in UNMAP bounds check (bsc#1269151).\n- CVE-2026-53035: bpf, sockmap: Fix af_unix iter deadlock (bsc#1269190).\n- CVE-2026-53036: bpf, arm64: Reject out-of-range B.cond targets (bsc#1269389).\n- CVE-2026-53039: ocfs2: validate group add input before caching (bsc#1269392).\n- CVE-2026-53049: gfs2: add some missing log locking (bsc#1269646).\n- CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).\n- CVE-2026-53060: dm cache metadata: fix memory leak on metadata abort retry (bsc#1269164).\n- CVE-2026-53075: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (bsc#1269690).\n- CVE-2026-53078: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops (bsc#1269700).\n- CVE-2026-53086: net: bcmgenet: fix racing timeout handler (bsc#1269537).\n- CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532).\n- CVE-2026-53139: drm/v3d: Skip CSD when it has zeroed workgroups (bsc#1269262).\n- CVE-2026-53167: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (bsc#1269768).\n- CVE-2026-53168: fuse: reject fuse_notify() pagecache ops on directories (bsc#1269645).\n- CVE-2026-53176: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (bsc#1269710).\n- CVE-2026-53178: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction (bsc#1269795).\n- CVE-2026-53181: vsock/vmci: fix sk_ack_backlog leak on failed handshake (bsc#1269886).\n- CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).\n- CVE-2026-53215: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680).\n- CVE-2026-53216: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587).\n- CVE-2026-53217: net: mvpp2: sync RX data at the hardware packet offset (bsc#1269989).\n- CVE-2026-53229: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (bsc#1269691).\n- CVE-2026-53245: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (bsc#1269675).\n- CVE-2026-53249: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (bsc#1269992).\n- CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).\n- CVE-2026-53258: wifi: fix leak if split 6 GHz scanning fails (bsc#1269230).\n- CVE-2026-53274: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS (bsc#1269651).\n- CVE-2026-53285: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (bsc#1269527).\n- CVE-2026-53306: tty: hvc_iucv: fix off-by-one in number of supported devices (bsc#1269814).\n- CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).\n- CVE-2026-53366: kernel: ipv4: account for fraggap on the paged allocation path (bsc#1271366)\n\nThe following non security issues were fixed:\n\n- batman-adv: access unicast_ttvn skb-\u003edata only after skb realloc (git-fixes).\n- batman-adv: bla: reacquire gw address after skb realloc (git-fixes).\n- batman-adv: dat: acquire ARP hw source only after skb realloc (git-fixes).\n- batman-adv: dat: ensure accessible eth_hdr proto field (git-fixes).\n- batman-adv: gw: acquire ethernet header only after skb realloc (git-fixes).\n- Bluetooth: 6lowpan: hold L2CAP conn across debugfs control (git-fixes).\n- Bluetooth: bnep: pin L2CAP connection during netdev registration (git-fixes).\n- Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() (git-fixes).\n- Bluetooth: fix UAF in bt_accept_dequeue() (git-fixes).\n- Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (git-fixes).\n- Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length (git-fixes).\n- Bluetooth: ISO: fix malformed ISO_END/CONT handling (git-fixes).\n- Bluetooth: L2CAP: validate option length before reading conf opt value (git-fixes).\n- Bluetooth: MGMT: Fix adv monitor add failure cleanup (git-fixes).\n- Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete (git-fixes).\n- bnxt_en: Add a timeout parameter to bnxt_hwrm_port_ts_query() (bsc#1264180).\n- bnxt_en: Add is_ts_pkt field to struct bnxt_sw_tx_bd (bsc#1264180).\n- bnxt_en: Add new TX timestamp completion definitions (bsc#1264180).\n- bnxt_en: Add TX timestamp completion logic (bsc#1264180).\n- bnxt_en: Allow some TX packets to be unprocessed in NAPI (bsc#1264180).\n- bnxt_en: fix module unload sequence (bsc#1264180).\n- bnxt_en: Fix PTP firmware timeout parameter (bsc#1264180).\n- bnxt_en: improve TX timestamping FIFO configuration (bsc#1264180).\n- bnxt_en: Increase the max total outstanding PTP TX packets to 4 (bsc#1264180).\n- bnxt_en: Let bnxt_stamp_tx_skb() return error code (bsc#1264180).\n- bnxt_en: Refactor all PTP TX timestamp fields into a struct (bsc#1264180).\n- bnxt_en: Remove an impossible condition check for PTP TX pending SKB (bsc#1264180).\n- bnxt_en: Remove atomic operations on ptp-\u003etx_avail (bsc#1264180).\n- bnxt_en: Retry PTP TX timestamp from FW for 1 second (bsc#1264180).\n- bnxt_en: silence clang build warning (bsc#1264180).\n- crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (stable-fixes).\n- crypto: qat - Return pointer directly in adf_ctl_alloc_resources (stable-fixes).\n- drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference (git-fixes).\n- drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips (git-fixes).\n- drm/amdgpu: fix aperture mapping leak (git-fixes).\n- drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() (git-fixes).\n- drm/i915: Return NULL on error in active_instance (git-fixes).\n- drm/i915/gem: Do not leak siblings[] on proto context error (git-fixes).\n- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU (git-fixes).\n- drm/virtio: bound EDID block reads to the response buffer (git-fixes).\n- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (stable-fixes).\n- fbdev: fix use-after-free in store_modes() (stable-fixes).\n- gpio-f7188x: Add support for NCT6126D version B (git-fixes).\n- gpio: htc-egpio: use managed gpiochip registration (git-fixes).\n- gpio: mvebu: fail probe if gpiochip registration fails (git-fixes).\n- gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe (git-fixes).\n- gpios: palmas: add .get_direction() op (git-fixes).\n- HID: letsketch: fix UAF on inrange_timer at driver unbind (git-fixes).\n- HID: lg-g15: cancel pending work on remove to fix a use-after-free (git-fixes).\n- HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() (git-fixes).\n- hwmon: (asus_atk0110) Check package count before accessing element (git-fixes).\n- hwmon: (ltc2992) add missing \u0027select REGMAP_I2C\u0027 to Kconfig (git-fixes).\n- hwmon: (occ) unregister sysfs devices outside occ lock (git-fixes).\n- hwmon: adm1275: Prevent reading uninitialized stack (git-fixes).\n- iio: accel: bmc150: clamp the device-reported FIFO frame count (git-fixes).\n- iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error (git-fixes).\n- iio: adc: lpc32xx: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: spear: Initialize completion before requesting IRQ (git-fixes).\n- iio: adc: ti-ads124s08: Return reset GPIO lookup errors (git-fixes).\n- iio: event: Fix event FIFO reset race (git-fixes).\n- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ (git-fixes).\n- iio: imu: st_lsm6dsx: deselect shub page before reading whoami (git-fixes).\n- iio: light: al3010: fix incorrect scale for the highest gain range (git-fixes).\n- iio: light: gp2ap002: fix runtime PM leak on read error (git-fixes).\n- iio: light: tsl2591: return actual error from probe IRQ failure (git-fixes).\n- Input: maplemouse - fix NULL pointer dereference in open() (git-fixes).\n- Input: mms114 - fix multi-touch slot corruption (git-fixes).\n- iommu/amd: serialize sequence allocation under concurrent TLB invalidations (git-fixes).\n- ipv4: account for fraggap on the paged allocation path (git-fixes).\n- KVM: x86: Fix shadow paging use-after-free due to unexpected role (git-fixes).\n- KVM: x86/mmu: Recover TDP MMU NX huge pages using MMU read lock (bsc#1271050).\n- KVM: x86/mmu: Rename kvm_tdp_mmu_zap_sp() to better indicate its purpose (bsc#1271050).\n- KVM: x86/mmu: Track possible NX huge pages separately for TDP vs. Shadow MMU (bsc#1271050).\n- net: mana: Validate the packet length reported by the NIC (git-fixes).\n- net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy (git-fixes).\n- net: usb: lan78xx: disable VLAN filter in promiscuous mode (git-fixes).\n- net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (git-fixes).\n- net: wwan: iosm: bound device offsets in the MUX downlink decoder (git-fixes).\n- pinctrl: meson: restore non-sleeping GPIO access (git-fixes).\n- ppc/fadump: invoke kmsg_dump in fadump panic path (bsc#1270226 ltc#218302).\n- regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK (git-fixes).\n- serial: 8250_omap: clear rx_running on zero-length DMA completes (git-fixes).\n- serial: msm: Disable DMA for kernel console UART (git-fixes).\n- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() (git-fixes).\n- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop (git-fixes).\n- staging: rtl8723bs: fix OOB write in HT_caps_handler() (git-fixes).\n- staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() (git-fixes).\n- tpm: Make the TPM character devices non-seekable (git-fixes).\n- usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() (git-fixes).\n- USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (git-fixes).\n- usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() (git-fixes).\n- usb: dwc3: run gadget disconnect from sleepable suspend context (git-fixes).\n- usb: free iso schedules on failed submit (git-fixes).\n- usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler (git-fixes).\n- usb: gadget: f_printer: take kref only for successful open (git-fixes).\n- USB: idmouse: fix use-after-free on disconnect race (git-fixes).\n- USB: iowarrior: fix use-after-free on disconnect (git-fixes).\n- USB: ldusb: fix use-after-free on disconnect race (git-fixes).\n- USB: legousbtower: fix use-after-free on disconnect race (git-fixes).\n- USB: misc: uss720: unregister parport on probe failure (git-fixes).\n- usb: mtu3: unmap request DMA on queue failure (git-fixes).\n- USB: serial: digi_acceleport: fix broken rx after throttle (git-fixes).\n- USB: serial: digi_acceleport: fix hard lockup on disconnect (git-fixes).\n- USB: serial: digi_acceleport: fix write buffer corruption (git-fixes).\n- USB: serial: keyspan_pda: fix information leak (git-fixes).\n- usb: sl811-hcd: disable controller wakeup on remove (git-fixes).\n- USB: storage: include US_FL_NO_SAME in quirks mask (git-fixes).\n- usb: typec: anx7411: use devm_pm_runtime_enable() (git-fixes).\n- usb: typec: class: drop PD lookup reference (git-fixes).\n- usb: typec: tcpm: Validate SVID index in svdm_consume_modes() (git-fixes).\n- usb: typec: ucsi: cancel pending work on system suspend (git-fixes).\n- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove (git-fixes).\n- usb: typec: ucsi: Invert DisplayPort role assignment (git-fixes).\n- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode (git-fixes).\n- USB: ulpi: fix memory leak on registration failure (git-fixes).\n- USB: usb-storage: ene_ub6250: restore media-ready check (git-fixes).\n- usb: xhci: Fix sleep in atomic context in xhci_free_streams() (git-fixes).\n- usbip: tools: support SuperSpeedPlus devices (git-fixes).\n- usbip: vudc: fix NULL deref in vep_dequeue() (git-fixes).\n- usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (git-fixes).\n- wifi: iwlwifi: mvm: fix race condition in PTP removal (stable-fixes).\n- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S (stable-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-kernel-536",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22810-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:22810-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622810-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:22810-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027821.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1243603",
        "url": "https://bugzilla.suse.com/1243603"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1260593",
        "url": "https://bugzilla.suse.com/1260593"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263077",
        "url": "https://bugzilla.suse.com/1263077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264003",
        "url": "https://bugzilla.suse.com/1264003"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264056",
        "url": "https://bugzilla.suse.com/1264056"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264180",
        "url": "https://bugzilla.suse.com/1264180"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264270",
        "url": "https://bugzilla.suse.com/1264270"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264302",
        "url": "https://bugzilla.suse.com/1264302"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264304",
        "url": "https://bugzilla.suse.com/1264304"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264328",
        "url": "https://bugzilla.suse.com/1264328"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264386",
        "url": "https://bugzilla.suse.com/1264386"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264419",
        "url": "https://bugzilla.suse.com/1264419"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264531",
        "url": "https://bugzilla.suse.com/1264531"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264544",
        "url": "https://bugzilla.suse.com/1264544"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264545",
        "url": "https://bugzilla.suse.com/1264545"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264548",
        "url": "https://bugzilla.suse.com/1264548"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264556",
        "url": "https://bugzilla.suse.com/1264556"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264580",
        "url": "https://bugzilla.suse.com/1264580"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264624",
        "url": "https://bugzilla.suse.com/1264624"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264731",
        "url": "https://bugzilla.suse.com/1264731"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264744",
        "url": "https://bugzilla.suse.com/1264744"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264790",
        "url": "https://bugzilla.suse.com/1264790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264794",
        "url": "https://bugzilla.suse.com/1264794"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264853",
        "url": "https://bugzilla.suse.com/1264853"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264978",
        "url": "https://bugzilla.suse.com/1264978"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264987",
        "url": "https://bugzilla.suse.com/1264987"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264993",
        "url": "https://bugzilla.suse.com/1264993"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264997",
        "url": "https://bugzilla.suse.com/1264997"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265023",
        "url": "https://bugzilla.suse.com/1265023"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265041",
        "url": "https://bugzilla.suse.com/1265041"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265079",
        "url": "https://bugzilla.suse.com/1265079"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265142",
        "url": "https://bugzilla.suse.com/1265142"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266458",
        "url": "https://bugzilla.suse.com/1266458"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266686",
        "url": "https://bugzilla.suse.com/1266686"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266722",
        "url": "https://bugzilla.suse.com/1266722"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266726",
        "url": "https://bugzilla.suse.com/1266726"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266740",
        "url": "https://bugzilla.suse.com/1266740"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266773",
        "url": "https://bugzilla.suse.com/1266773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266838",
        "url": "https://bugzilla.suse.com/1266838"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266883",
        "url": "https://bugzilla.suse.com/1266883"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266893",
        "url": "https://bugzilla.suse.com/1266893"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267213",
        "url": "https://bugzilla.suse.com/1267213"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267360",
        "url": "https://bugzilla.suse.com/1267360"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267493",
        "url": "https://bugzilla.suse.com/1267493"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267494",
        "url": "https://bugzilla.suse.com/1267494"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267495",
        "url": "https://bugzilla.suse.com/1267495"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267618",
        "url": "https://bugzilla.suse.com/1267618"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267992",
        "url": "https://bugzilla.suse.com/1267992"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267994",
        "url": "https://bugzilla.suse.com/1267994"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268989",
        "url": "https://bugzilla.suse.com/1268989"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269036",
        "url": "https://bugzilla.suse.com/1269036"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269129",
        "url": "https://bugzilla.suse.com/1269129"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269151",
        "url": "https://bugzilla.suse.com/1269151"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269159",
        "url": "https://bugzilla.suse.com/1269159"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269164",
        "url": "https://bugzilla.suse.com/1269164"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269172",
        "url": "https://bugzilla.suse.com/1269172"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269174",
        "url": "https://bugzilla.suse.com/1269174"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269188",
        "url": "https://bugzilla.suse.com/1269188"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269190",
        "url": "https://bugzilla.suse.com/1269190"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269193",
        "url": "https://bugzilla.suse.com/1269193"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269230",
        "url": "https://bugzilla.suse.com/1269230"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269262",
        "url": "https://bugzilla.suse.com/1269262"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269389",
        "url": "https://bugzilla.suse.com/1269389"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269392",
        "url": "https://bugzilla.suse.com/1269392"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269493",
        "url": "https://bugzilla.suse.com/1269493"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269527",
        "url": "https://bugzilla.suse.com/1269527"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269532",
        "url": "https://bugzilla.suse.com/1269532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269537",
        "url": "https://bugzilla.suse.com/1269537"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269587",
        "url": "https://bugzilla.suse.com/1269587"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269645",
        "url": "https://bugzilla.suse.com/1269645"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269646",
        "url": "https://bugzilla.suse.com/1269646"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269651",
        "url": "https://bugzilla.suse.com/1269651"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269675",
        "url": "https://bugzilla.suse.com/1269675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269680",
        "url": "https://bugzilla.suse.com/1269680"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269690",
        "url": "https://bugzilla.suse.com/1269690"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269691",
        "url": "https://bugzilla.suse.com/1269691"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269700",
        "url": "https://bugzilla.suse.com/1269700"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269710",
        "url": "https://bugzilla.suse.com/1269710"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269768",
        "url": "https://bugzilla.suse.com/1269768"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269795",
        "url": "https://bugzilla.suse.com/1269795"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269814",
        "url": "https://bugzilla.suse.com/1269814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269886",
        "url": "https://bugzilla.suse.com/1269886"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269986",
        "url": "https://bugzilla.suse.com/1269986"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269989",
        "url": "https://bugzilla.suse.com/1269989"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269992",
        "url": "https://bugzilla.suse.com/1269992"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269993",
        "url": "https://bugzilla.suse.com/1269993"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1270022",
        "url": "https://bugzilla.suse.com/1270022"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1270059",
        "url": "https://bugzilla.suse.com/1270059"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1270226",
        "url": "https://bugzilla.suse.com/1270226"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1270257",
        "url": "https://bugzilla.suse.com/1270257"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271040",
        "url": "https://bugzilla.suse.com/1271040"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271050",
        "url": "https://bugzilla.suse.com/1271050"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271366",
        "url": "https://bugzilla.suse.com/1271366"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-20585 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-20585/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31503 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31503/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43019 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43019/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43057 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43057/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43092 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43092/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43124 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43124/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43157 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43157/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43167 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43167/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43191 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43191/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43194 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43194/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43199 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43199/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43204 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43204/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43205 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43205/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43226 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43226/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43240 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43240/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43248 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43248/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43253 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43253/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43294 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43294/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43304 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43304/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43320 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43320/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43373 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43373/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43383 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43383/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43445 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43445/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43449 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43449/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43450 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43450/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43452 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43452/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43465 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43465/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43466 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43466/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43468 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43468/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43473 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43473/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45857 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45857/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45858 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45858/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45899 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45899/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45920 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45920/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45987 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45997 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45997/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46046 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46046/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46050 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46050/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46051 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46051/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46052 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46052/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46059 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46059/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46099 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46099/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46161 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46161/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46178 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46178/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46242 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46242/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46314 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46314/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46322 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46322/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52924 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52924/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52933 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52933/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52955 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52955/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52956 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52958 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52958/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52961 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52961/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52993 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52993/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53021 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53021/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53035 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53035/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53036 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53036/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53039 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53039/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53049 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53049/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53050 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53050/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53060 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53060/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53075 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53075/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53078 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53086 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53090 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53090/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53139 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53139/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53167 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53167/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53168 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53176 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53176/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53178 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53178/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53181 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53181/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53196 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53196/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53215 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53215/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53216 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53216/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53217 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53217/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53229 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53229/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53245 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53245/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53249 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53249/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53256 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53256/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53258 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53258/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53274 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53274/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53285 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53285/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53306 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53306/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53357 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53357/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53359 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53359/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53362 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53362/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53366 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53366/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2026-09-16T20:06:22Z",
      "generator": {
        "date": "2026-07-22T13:52:17Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:22810-1",
      "initial_release_date": "2026-07-22T13:52:17Z",
      "revision_history": [
        {
          "date": "2026-07-22T13:52:17Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-07-22T13:52:17Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T19:17:52Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:06:22Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-6.4.0-50.1.aarch64",
                "product": {
                  "name": "kernel-default-6.4.0-50.1.aarch64",
                  "product_id": "kernel-default-6.4.0-50.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-50.1?arch=aarch64\u0026upstream=kernel-source-6.4.0-50.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-6.4.0-50.2.noarch",
                "product": {
                  "name": "kernel-devel-6.4.0-50.2.noarch",
                  "product_id": "kernel-devel-6.4.0-50.2.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@6.4.0-50.2?arch=noarch\u0026upstream=kernel-source-6.4.0-50.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-6.4.0-50.2.noarch",
                "product": {
                  "name": "kernel-macros-6.4.0-50.2.noarch",
                  "product_id": "kernel-macros-6.4.0-50.2.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-macros@6.4.0-50.2?arch=noarch\u0026upstream=kernel-source-6.4.0-50.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-6.4.0-50.2.noarch",
                "product": {
                  "name": "kernel-source-6.4.0-50.2.noarch",
                  "product_id": "kernel-source-6.4.0-50.2.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source@6.4.0-50.2?arch=noarch\u0026upstream=kernel-source-6.4.0-50.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-6.4.0-50.1.s390x",
                "product": {
                  "name": "kernel-default-6.4.0-50.1.s390x",
                  "product_id": "kernel-default-6.4.0-50.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-50.1?arch=s390x\u0026upstream=kernel-source-6.4.0-50.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-livepatch-6.4.0-50.1.s390x",
                "product": {
                  "name": "kernel-default-livepatch-6.4.0-50.1.s390x",
                  "product_id": "kernel-default-livepatch-6.4.0-50.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-livepatch@6.4.0-50.1?arch=s390x\u0026upstream=kernel-source-6.4.0-50.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-6.4.0-50.1.x86_64",
                "product": {
                  "name": "kernel-default-6.4.0-50.1.x86_64",
                  "product_id": "kernel-default-6.4.0-50.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-50.1?arch=x86_64\u0026upstream=kernel-source-6.4.0-50.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-livepatch-6.4.0-50.1.x86_64",
                "product": {
                  "name": "kernel-default-livepatch-6.4.0-50.1.x86_64",
                  "product_id": "kernel-default-livepatch-6.4.0-50.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-livepatch@6.4.0-50.1?arch=x86_64\u0026upstream=kernel-source-6.4.0-50.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-6.4.0-50.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-6.4.0-50.1.x86_64",
                  "product_id": "kernel-kvmsmall-6.4.0-50.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-kvmsmall@6.4.0-50.1?arch=x86_64\u0026upstream=kernel-source-6.4.0-50.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-6.4.0-50.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64"
        },
        "product_reference": "kernel-default-6.4.0-50.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-6.4.0-50.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x"
        },
        "product_reference": "kernel-default-6.4.0-50.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-6.4.0-50.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64"
        },
        "product_reference": "kernel-default-6.4.0-50.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-livepatch-6.4.0-50.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x"
        },
        "product_reference": "kernel-default-livepatch-6.4.0-50.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-livepatch-6.4.0-50.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64"
        },
        "product_reference": "kernel-default-livepatch-6.4.0-50.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-6.4.0-50.2.noarch as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch"
        },
        "product_reference": "kernel-devel-6.4.0-50.2.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-6.4.0-50.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-6.4.0-50.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-6.4.0-50.2.noarch as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch"
        },
        "product_reference": "kernel-macros-6.4.0-50.2.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-6.4.0-50.2.noarch as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        },
        "product_reference": "kernel-source-6.4.0-50.2.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-20585",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-20585"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-20585",
          "url": "https://www.suse.com/security/cve/CVE-2023-20585"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243603 for CVE-2023-20585",
          "url": "https://bugzilla.suse.com/1243603"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-20585"
    },
    {
      "cve": "CVE-2026-31503",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31503"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudp: Fix wildcard bind conflict check when using hash2\n\nWhen binding a udp_sock to a local address and port, UDP uses\ntwo hashes (udptable-\u003ehash and udptable-\u003ehash2) for collision\ndetection. The current code switches to \"hash2\" when\nhslot-\u003ecount \u003e 10.\n\n\"hash2\" is keyed by local address and local port.\n\"hash\" is keyed by local port only.\n\nThe issue can be shown in the following bind sequence (pseudo code):\n\nbind(fd1,  \"[fd00::1]:8888\")\nbind(fd2,  \"[fd00::2]:8888\")\nbind(fd3,  \"[fd00::3]:8888\")\nbind(fd4,  \"[fd00::4]:8888\")\nbind(fd5,  \"[fd00::5]:8888\")\nbind(fd6,  \"[fd00::6]:8888\")\nbind(fd7,  \"[fd00::7]:8888\")\nbind(fd8,  \"[fd00::8]:8888\")\nbind(fd9,  \"[fd00::9]:8888\")\nbind(fd10, \"[fd00::10]:8888\")\n\n/* Correctly return -EADDRINUSE because \"hash\" is used\n * instead of \"hash2\". udp_lib_lport_inuse() detects the\n * conflict.\n */\nbind(fail_fd, \"[::]:8888\")\n\n/* After one more socket is bound to \"[fd00::11]:8888\",\n * hslot-\u003ecount exceeds 10 and \"hash2\" is used instead.\n */\nbind(fd11, \"[fd00::11]:8888\")\nbind(fail_fd, \"[::]:8888\")      /* succeeds unexpectedly */\n\nThe same issue applies to the IPv4 wildcard address \"0.0.0.0\"\nand the IPv4-mapped wildcard address \"::ffff:0.0.0.0\". For\nexample, if there are existing sockets bound to\n\"192.168.1.[1-11]:8888\", then binding \"0.0.0.0:8888\" or\n\"[::ffff:0.0.0.0]:8888\" can also miss the conflict when\nhslot-\u003ecount \u003e 10.\n\nTCP inet_csk_get_port() already has the correct check in\ninet_use_bhash2_on_bind(). Rename it to\ninet_use_hash2_on_bind() and move it to inet_hashtables.h\nso udp.c can reuse it in this fix.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31503",
          "url": "https://www.suse.com/security/cve/CVE-2026-31503"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263077 for CVE-2026-31503",
          "url": "https://bugzilla.suse.com/1263077"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31503"
    },
    {
      "cve": "CVE-2026-43019",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43019"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_conn: fix potential UAF in set_cig_params_sync\n\nhci_conn lookup and field access must be covered by hdev lock in\nset_cig_params_sync, otherwise it\u0027s possible it is freed concurrently.\n\nTake hdev lock to prevent hci_conn from being deleted or modified\nconcurrently.  Just RCU lock is not suitable here, as we also want to\navoid \"tearing\" in the configuration.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43019",
          "url": "https://www.suse.com/security/cve/CVE-2026-43019"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264003 for CVE-2026-43019",
          "url": "https://bugzilla.suse.com/1264003"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43019"
    },
    {
      "cve": "CVE-2026-43057",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43057"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: correctly handle tunneled traffic on IPV6_CSUM GSO fallback\n\nNETIF_F_IPV6_CSUM only advertises support for checksum offload of\npackets without IPv6 extension headers. Packets with extension\nheaders must fall back onto software checksumming. Since TSO\ndepends on checksum offload, those must revert to GSO.\n\nThe below commit introduces that fallback. It always checks\nnetwork header length. For tunneled packets, the inner header length\nmust be checked instead. Extend the check accordingly.\n\nA special case is tunneled packets without inner IP protocol. Such as\nRFC 6951 SCTP in UDP. Those are not standard IPv6 followed by\ntransport header either, so also must revert to the software GSO path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43057",
          "url": "https://www.suse.com/security/cve/CVE-2026-43057"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264056 for CVE-2026-43057",
          "url": "https://bugzilla.suse.com/1264056"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43057"
    },
    {
      "cve": "CVE-2026-43092",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43092"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: validate MTU against usable frame size on bind\n\nAF_XDP bind currently accepts zero-copy pool configurations without\nverifying that the device MTU fits into the usable frame space provided\nby the UMEM chunk.\n\nThis becomes a problem since we started to respect tailroom which is\nsubtracted from chunk_size (among with headroom). 2k chunk size might\nnot provide enough space for standard 1500 MTU, so let us catch such\nsettings at bind time. Furthermore, validate whether underlying HW will\nbe able to satisfy configured MTU wrt XSK\u0027s frame size multiplied by\nsupported Rx buffer chain length (that is exposed via\nnet_device::xdp_zc_max_segs).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43092",
          "url": "https://www.suse.com/security/cve/CVE-2026-43092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264270 for CVE-2026-43092",
          "url": "https://bugzilla.suse.com/1264270"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43092"
    },
    {
      "cve": "CVE-2026-43124",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43124"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npstore: ram_core: fix incorrect success return when vmap() fails\n\nIn persistent_ram_vmap(), vmap() may return NULL on failure.\n\nIf offset is non-zero, adding offset_in_page(start) causes the function\nto return a non-NULL pointer even though the mapping failed.\npersistent_ram_buffer_map() therefore incorrectly returns success.\n\nSubsequent access to prz-\u003ebuffer may dereference an invalid address\nand cause crashes.\n\nAdd proper NULL checking for vmap() failures.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43124",
          "url": "https://www.suse.com/security/cve/CVE-2026-43124"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264545 for CVE-2026-43124",
          "url": "https://bugzilla.suse.com/1264545"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43124"
    },
    {
      "cve": "CVE-2026-43157",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43157"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: CGX: fix bitmap leaks\n\nThe RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap)\nare allocated by cgx_lmac_init() but never freed in cgx_lmac_exit().\nUnbinding and rebinding the driver therefore triggers kmemleak:\n\n    unreferenced object (size 16):\n        backtrace:\n          rvu_alloc_bitmap\n          cgx_probe\n\nFree both bitmaps during teardown.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43157",
          "url": "https://www.suse.com/security/cve/CVE-2026-43157"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264624 for CVE-2026-43157",
          "url": "https://bugzilla.suse.com/1264624"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43157"
    },
    {
      "cve": "CVE-2026-43167",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43167"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: always flush state and policy upon NETDEV_UNREGISTER event\n\nsyzbot is reporting that \"struct xfrm_state\" refcount is leaking.\n\n  unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2\n  ref_tracker: netdev@ffff888052f24618 has 1/1 users at\n       __netdev_tracker_alloc include/linux/netdevice.h:4400 [inline]\n       netdev_tracker_alloc include/linux/netdevice.h:4412 [inline]\n       xfrm_dev_state_add+0x3a5/0x1080 net/xfrm/xfrm_device.c:316\n       xfrm_state_construct net/xfrm/xfrm_user.c:986 [inline]\n       xfrm_add_sa+0x34ff/0x5fa0 net/xfrm/xfrm_user.c:1022\n       xfrm_user_rcv_msg+0x58e/0xc00 net/xfrm/xfrm_user.c:3507\n       netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2550\n       xfrm_netlink_rcv+0x71/0x90 net/xfrm/xfrm_user.c:3529\n       netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]\n       netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1344\n       netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1894\n       sock_sendmsg_nosec net/socket.c:727 [inline]\n       __sock_sendmsg net/socket.c:742 [inline]\n       ____sys_sendmsg+0xa5d/0xc30 net/socket.c:2592\n       ___sys_sendmsg+0x134/0x1d0 net/socket.c:2646\n       __sys_sendmsg+0x16d/0x220 net/socket.c:2678\n       do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n       do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94\n       entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nThis is because commit d77e38e612a0 (\"xfrm: Add an IPsec hardware\noffloading API\") implemented xfrm_dev_unregister() as no-op despite\nxfrm_dev_state_add() from xfrm_state_construct() acquires a reference\nto \"struct net_device\".\nI guess that that commit expected that NETDEV_DOWN event is fired before\nNETDEV_UNREGISTER event fires, and also assumed that xfrm_dev_state_add()\nis called only if (dev-\u003efeatures \u0026 NETIF_F_HW_ESP) != 0.\n\nSabrina Dubroca identified steps to reproduce the same symptoms as below.\n\n  echo 0 \u003e /sys/bus/netdevsim/new_device\n  dev=$(ls -1 /sys/bus/netdevsim/devices/netdevsim0/net/)\n  ip xfrm state add src 192.168.13.1 dst 192.168.13.2 proto esp \\\n     spi 0x1000 mode tunnel aead \u0027rfc4106(gcm(aes))\u0027 $key 128   \\\n     offload crypto dev $dev dir out\n  ethtool -K $dev esp-hw-offload off\n  echo 0 \u003e /sys/bus/netdevsim/del_device\n\nLike these steps indicate, the NETIF_F_HW_ESP bit can be cleared after\nxfrm_dev_state_add() acquired a reference to \"struct net_device\".\nAlso, xfrm_dev_state_add() does not check for the NETIF_F_HW_ESP bit\nwhen acquiring a reference to \"struct net_device\".\n\nCommit 03891f820c21 (\"xfrm: handle NETDEV_UNREGISTER for xfrm device\")\nre-introduced the NETDEV_UNREGISTER event to xfrm_dev_event(), but that\ncommit for unknown reason chose to share xfrm_dev_down() between the\nNETDEV_DOWN event and the NETDEV_UNREGISTER event.\nI guess that that commit missed the behavior in the previous paragraph.\n\nTherefore, we need to re-introduce xfrm_dev_unregister() in order to\nrelease the reference to \"struct net_device\" by unconditionally flushing\nstate and policy.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43167",
          "url": "https://www.suse.com/security/cve/CVE-2026-43167"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264580 for CVE-2026-43167",
          "url": "https://bugzilla.suse.com/1264580"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43167"
    },
    {
      "cve": "CVE-2026-43191",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43191"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35\n\n[Why]\nA backport of the change made for DCN401 that addresses an issue where\nwe turn off the PHY PLL when disabling TMDS output, which causes the\nOTG to remain stuck.\n\nThe OTG being stuck can lead to a hang in the DCHVM\u0027s ability to ACK\ninvalidations when it thinks the HUBP is still on but it\u0027s not receiving\nglobal sync.\n\nThe transition to PLL_ON needs to be atomic as there\u0027s no guarantee\nthat the thread isn\u0027t pre-empted or is able to complete before the\nIOMMU watchdog times out.\n\n[How]\nBackport the implementation from dcn401 back to dcn35.\n\nThere\u0027s a functional difference in when the eDP output is disabled in\ndcn401 code so we don\u0027t want to utilize it directly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43191",
          "url": "https://www.suse.com/security/cve/CVE-2026-43191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264548 for CVE-2026-43191",
          "url": "https://bugzilla.suse.com/1264548"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43191"
    },
    {
      "cve": "CVE-2026-43194",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43194"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: consume xmit errors of GSO frames\n\nudpgro_frglist.sh and udpgro_bench.sh are the flakiest tests\ncurrently in NIPA. They fail in the same exact way, TCP GRO\ntest stalls occasionally and the test gets killed after 10min.\n\nThese tests use veth to simulate GRO. They attach a trivial\n(\"return XDP_PASS;\") XDP program to the veth to force TSO off\nand NAPI on.\n\nDigging into the failure mode we can see that the connection\nis completely stuck after a burst of drops. The sender\u0027s snd_nxt\nis at sequence number N [1], but the receiver claims to have\nreceived (rcv_nxt) up to N + 3 * MSS [2]. Last piece of the puzzle\nis that senders rtx queue is not empty (let\u0027s say the block in\nthe rtx queue is at sequence number N - 4 * MSS [3]).\n\nIn this state, sender sends a retransmission from the rtx queue\nwith a single segment, and sequence numbers N-4*MSS:N-3*MSS [3].\nReceiver sees it and responds with an ACK all the way up to\nN + 3 * MSS [2]. But sender will reject this ack as TCP_ACK_UNSENT_DATA\nbecause it has no recollection of ever sending data that far out [1].\nAnd we are stuck.\n\nThe root cause is the mess of the xmit return codes. veth returns\nan error when it can\u0027t xmit a frame. We end up with a loss event\nlike this:\n\n  -------------------------------------------------\n  |   GSO super frame 1   |   GSO super frame 2   |\n  |-----------------------------------------------|\n  | seg | seg | seg | seg | seg | seg | seg | seg |\n  |  1  |  2  |  3  |  4  |  5  |  6  |  7  |  8  |\n  -------------------------------------------------\n     x    ok    ok    \u003cok\u003e|  ok    ok    ok   \u003cx\u003e\n                          \\\\\n\t\t\t   snd_nxt\n\n\"x\" means packet lost by veth, and \"ok\" means it went thru.\nSince veth has TSO disabled in this test it sees individual segments.\nSegment 1 is on the retransmit queue and will be resent.\n\nSo why did the sender not advance snd_nxt even tho it clearly did\nsend up to seg 8? tcp_write_xmit() interprets the return code\nfrom the core to mean that data has not been sent at all. Since\nTCP deals with GSO super frames, not individual segment the crux\nof the problem is that loss of a single segment can be interpreted\nas loss of all. TCP only sees the last return code for the last\nsegment of the GSO frame (in \u003c\u003e brackets in the diagram above).\n\nOf course for the problem to occur we need a setup or a device\nwithout a Qdisc. Otherwise Qdisc layer disconnects the protocol\nlayer from the device errors completely.\n\nWe have multiple ways to fix this.\n\n 1) make veth not return an error when it lost a packet.\n    While this is what I think we did in the past, the issue keeps\n    reappearing and it\u0027s annoying to debug. The game of whack\n    a mole is not great.\n\n 2) fix the damn return codes\n    We only talk about NETDEV_TX_OK and NETDEV_TX_BUSY in the\n    documentation, so maybe we should make the return code from\n    ndo_start_xmit() a boolean. I like that the most, but perhaps\n    some ancient, not-really-networking protocol would suffer.\n\n 3) make TCP ignore the errors\n    It is not entirely clear to me what benefit TCP gets from\n    interpreting the result of ip_queue_xmit()? Specifically once\n    the connection is established and we\u0027re pushing data - packet\n    loss is just packet loss?\n\n 4) this fix\n    Ignore the rc in the Qdisc-less+GSO case, since it\u0027s unreliable.\n    We already always return OK in the TCQ_F_CAN_BYPASS case.\n    In the Qdisc-less case let\u0027s be a bit more conservative and only\n    mask the GSO errors. This path is taken by non-IP-\"networks\"\n    like CAN, MCTP etc, so we could regress some ancient thing.\n    This is the simplest, but also maybe the hackiest fix?\n\nSimilar fix has been proposed by Eric in the past but never committed\nbecause original reporter was working with an OOT driver and wasn\u0027t\nproviding feedback (see Link).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43194",
          "url": "https://www.suse.com/security/cve/CVE-2026-43194"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264304 for CVE-2026-43194",
          "url": "https://bugzilla.suse.com/1264304"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43194"
    },
    {
      "cve": "CVE-2026-43199",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43199"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix \"scheduling while atomic\" in IPsec MAC address query\n\nFix a \"scheduling while atomic\" bug in mlx5e_ipsec_init_macs() by\nreplacing mlx5_query_mac_address() with ether_addr_copy() to get the\nlocal MAC address directly from netdev-\u003edev_addr.\n\nThe issue occurs because mlx5_query_mac_address() queries the hardware\nwhich involves mlx5_cmd_exec() that can sleep, but it is called from\nthe mlx5e_ipsec_handle_event workqueue which runs in atomic context.\n\nThe MAC address is already available in netdev-\u003edev_addr, so no need\nto query hardware. This avoids the sleeping call and resolves the bug.\n\nCall trace:\n  BUG: scheduling while atomic: kworker/u112:2/69344/0x00000200\n  __schedule+0x7ab/0xa20\n  schedule+0x1c/0xb0\n  schedule_timeout+0x6e/0xf0\n  __wait_for_common+0x91/0x1b0\n  cmd_exec+0xa85/0xff0 [mlx5_core]\n  mlx5_cmd_exec+0x1f/0x50 [mlx5_core]\n  mlx5_query_nic_vport_mac_address+0x7b/0xd0 [mlx5_core]\n  mlx5_query_mac_address+0x19/0x30 [mlx5_core]\n  mlx5e_ipsec_init_macs+0xc1/0x720 [mlx5_core]\n  mlx5e_ipsec_build_accel_xfrm_attrs+0x422/0x670 [mlx5_core]\n  mlx5e_ipsec_handle_event+0x2b9/0x460 [mlx5_core]\n  process_one_work+0x178/0x2e0\n  worker_thread+0x2ea/0x430",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43199",
          "url": "https://www.suse.com/security/cve/CVE-2026-43199"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264556 for CVE-2026-43199",
          "url": "https://bugzilla.suse.com/1264556"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43199"
    },
    {
      "cve": "CVE-2026-43204",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43204"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: q6asm: drop DSP responses for closed data streams\n\n\u0027Commit a354f030dbce (\"ASoC: qcom: q6asm: handle the responses\nafter closing\")\u0027 attempted to ignore DSP responses arriving\nafter a stream had been closed.\n\nHowever, those responses were still handled, causing lockups.\n\nFix this by unconditionally dropping all DSP responses associated with\nclosed data streams.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43204",
          "url": "https://www.suse.com/security/cve/CVE-2026-43204"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264531 for CVE-2026-43204",
          "url": "https://bugzilla.suse.com/1264531"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43204"
    },
    {
      "cve": "CVE-2026-43205",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43205"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: validate num_ifs to prevent out-of-bounds write\n\nThe driver obtains sw_attr.num_ifs from firmware via dpsw_get_attributes()\nbut never validates it against DPSW_MAX_IF (64). This value controls\niteration in dpaa2_switch_fdb_get_flood_cfg(), which writes port indices\ninto the fixed-size cfg-\u003eif_id[DPSW_MAX_IF] array. When firmware reports\nnum_ifs \u003e= 64, the loop can write past the array bounds.\n\nAdd a bound check for num_ifs in dpaa2_switch_init().\n\ndpaa2_switch_fdb_get_flood_cfg() appends the control interface (port\nnum_ifs) after all matched ports. When num_ifs == DPSW_MAX_IF and all\nports match the flood filter, the loop fills all 64 slots and the control\ninterface write overflows by one entry.\n\nThe check uses \u003e= because num_ifs == DPSW_MAX_IF is also functionally\nbroken.\n\nbuild_if_id_bitmap() silently drops any ID \u003e= 64:\n      if (id[i] \u003c DPSW_MAX_IF)\n          bmap[id[i] / 64] |= ...",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43205",
          "url": "https://www.suse.com/security/cve/CVE-2026-43205"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264328 for CVE-2026-43205",
          "url": "https://bugzilla.suse.com/1264328"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43205"
    },
    {
      "cve": "CVE-2026-43226",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43226"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: No shortcut out of RDS_CONN_ERROR\n\nRDS connections carry a state \"rds_conn_path::cp_state\"\nand transitions from one state to another and are conditional\nupon an expected state: \"rds_conn_path_transition.\"\n\nThere is one exception to this conditionality, which is\n\"RDS_CONN_ERROR\" that can be enforced by \"rds_conn_path_drop\"\nregardless of what state the condition is currently in.\n\nBut as soon as a connection enters state \"RDS_CONN_ERROR\",\nthe connection handling code expects it to go through the\nshutdown-path.\n\nThe RDS/TCP multipath changes added a shortcut out of\n\"RDS_CONN_ERROR\" straight back to \"RDS_CONN_CONNECTING\"\nvia \"rds_tcp_accept_one_path\" (e.g. after \"rds_tcp_state_change\").\n\nA subsequent \"rds_tcp_reset_callbacks\" can then transition\nthe state to \"RDS_CONN_RESETTING\" with a shutdown-worker queued.\n\nThat\u0027ll trip up \"rds_conn_init_shutdown\", which was\nnever adjusted to handle \"RDS_CONN_RESETTING\" and subsequently\ndrops the connection with the dreaded \"DR_INV_CONN_STATE\",\nwhich leaves \"RDS_SHUTDOWN_WORK_QUEUED\" on forever.\n\nSo we do two things here:\n\na) Don\u0027t shortcut \"RDS_CONN_ERROR\", but take the longer\n   path through the shutdown code.\n\nb) Add \"RDS_CONN_RESETTING\" to the expected states in\n  \"rds_conn_init_shutdown\" so that we won\u0027t error out\n  and get stuck, if we ever hit weird state transitions\n  like this again.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43226",
          "url": "https://www.suse.com/security/cve/CVE-2026-43226"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264544 for CVE-2026-43226",
          "url": "https://bugzilla.suse.com/1264544"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43226"
    },
    {
      "cve": "CVE-2026-43240",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43240"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kexec: add a sanity check on previous kernel\u0027s ima kexec buffer\n\nWhen the second-stage kernel is booted via kexec with a limiting command\nline such as \"mem=\u003csize\u003e\", the physical range that contains the carried\nover IMA measurement list may fall outside the truncated RAM leading to a\nkernel panic.\n\n    BUG: unable to handle page fault for address: ffff97793ff47000\n    RIP: ima_restore_measurement_list+0xdc/0x45a\n    #PF: error_code(0x0000) - not-present page\n\nOther architectures already validate the range with page_is_ram(), as done\nin commit cbf9c4b9617b (\"of: check previous kernel\u0027s ima-kexec-buffer\nagainst memory bounds\") do a similar check on x86.\n\nWithout carrying the measurement list across kexec, the attestation\nwould fail.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43240",
          "url": "https://www.suse.com/security/cve/CVE-2026-43240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264386 for CVE-2026-43240",
          "url": "https://bugzilla.suse.com/1264386"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43240"
    },
    {
      "cve": "CVE-2026-43248",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43248"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost: move vdpa group bound check to vhost_vdpa\n\nRemove duplication by consolidating these here.  This reduces the\nposibility of a parent driver missing them.\n\nWhile we\u0027re at it, fix a bug in vdpa_sim where a valid ASID can be\nassigned to a group equal to ngroups, causing an out of bound write.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43248",
          "url": "https://www.suse.com/security/cve/CVE-2026-43248"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264302 for CVE-2026-43248",
          "url": "https://bugzilla.suse.com/1264302"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43248"
    },
    {
      "cve": "CVE-2026-43253",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43253"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: move wait_on_sem() out of spinlock\n\nWith iommu.strict=1, the existing completion wait path can cause soft\nlockups under stressed environment, as wait_on_sem() busy-waits under the\nspinlock with interrupts disabled.\n\nMove the completion wait in iommu_completion_wait() out of the spinlock.\nwait_on_sem() only polls the hardware-updated cmd_sem and does not require\niommu-\u003elock, so holding the lock during the busy wait unnecessarily\nincreases contention and extends the time with interrupts disabled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43253",
          "url": "https://www.suse.com/security/cve/CVE-2026-43253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264419 for CVE-2026-43253",
          "url": "https://bugzilla.suse.com/1264419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43253"
    },
    {
      "cve": "CVE-2026-43294",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43294"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels\n\nSince commit 56de5e305d4b (\"clk: renesas: r9a07g044: Add MSTOP for RZ/G2L\")\nwe may get the following kernel panic, for some panels, when rebooting:\n\n  systemd-shutdown[1]: Rebooting.\n  Call trace:\n   ...\n   do_serror+0x28/0x68\n   el1h_64_error_handler+0x34/0x50\n   el1h_64_error+0x6c/0x70\n   rzg2l_mipi_dsi_host_transfer+0x114/0x458 (P)\n   mipi_dsi_device_transfer+0x44/0x58\n   mipi_dsi_dcs_set_display_off_multi+0x9c/0xc4\n   ili9881c_unprepare+0x38/0x88\n   drm_panel_unprepare+0xbc/0x108\n\nThis happens for panels that need to send MIPI-DSI commands in their\nunprepare() callback. Since the MIPI-DSI interface is stopped at that\npoint, rzg2l_mipi_dsi_host_transfer() triggers the kernel panic.\n\nFix by moving rzg2l_mipi_dsi_stop() to new callback function\nrzg2l_mipi_dsi_atomic_post_disable().\n\nWith this change we now have the correct power-down/stop sequence:\n\n  systemd-shutdown[1]: Rebooting.\n  rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_disable(): entry\n  ili9881c-dsi 10850000.dsi.0: ili9881c_unprepare(): entry\n  rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_post_disable(): entry\n  reboot: Restarting system",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43294",
          "url": "https://www.suse.com/security/cve/CVE-2026-43294"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264853 for CVE-2026-43294",
          "url": "https://bugzilla.suse.com/1264853"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43294"
    },
    {
      "cve": "CVE-2026-43304",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43304"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: define and enforce CEPH_MAX_KEY_LEN\n\nWhen decoding the key, verify that the key material would fit into\na fixed-size buffer in process_auth_done() and generally has a sane\nlength.\n\nThe new CEPH_MAX_KEY_LEN check replaces the existing check for a key\nwith no key material which is a) not universal since CEPH_CRYPTO_NONE\nhas to be excluded and b) doesn\u0027t provide much value since a smaller\nthan needed key is just as invalid as no key -- this has to be handled\nelsewhere anyway.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43304",
          "url": "https://www.suse.com/security/cve/CVE-2026-43304"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264993 for CVE-2026-43304",
          "url": "https://bugzilla.suse.com/1264993"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43304"
    },
    {
      "cve": "CVE-2026-43320",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43320"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix dsc eDP issue\n\n[why]\nNeed to add function hook check before use",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43320",
          "url": "https://www.suse.com/security/cve/CVE-2026-43320"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264987 for CVE-2026-43320",
          "url": "https://bugzilla.suse.com/1264987"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43320"
    },
    {
      "cve": "CVE-2026-43373",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43373"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ncsi: fix skb leak in error paths\n\nEarly return paths in NCSI RX and AEN handlers fail to release\nthe received skb, resulting in a memory leak.\n\nSpecifically, ncsi_aen_handler() returns on invalid AEN packets\nwithout consuming the skb. Similarly, ncsi_rcv_rsp() exits early\nwhen failing to resolve the NCSI device, response handler, or\nrequest, leaving the skb unfreed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43373",
          "url": "https://www.suse.com/security/cve/CVE-2026-43373"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265079 for CVE-2026-43373",
          "url": "https://bugzilla.suse.com/1265079"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43373"
    },
    {
      "cve": "CVE-2026-43383",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43383"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/tcp-md5: Fix MAC comparison to be constant-time\n\nTo prevent timing attacks, MACs need to be compared in constant\ntime.  Use the appropriate helper function for this.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43383",
          "url": "https://www.suse.com/security/cve/CVE-2026-43383"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264744 for CVE-2026-43383",
          "url": "https://bugzilla.suse.com/1264744"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43383"
    },
    {
      "cve": "CVE-2026-43445",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43445"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ne1000/e1000e: Fix leak in DMA error cleanup\n\nIf an error is encountered while mapping TX buffers, the driver should\nunmap any buffers already mapped for that skb.\n\nBecause count is incremented after a successful mapping, it will always\nmatch the correct number of unmappings needed when dma_error is reached.\nDecrementing count before the while loop in dma_error causes an\noff-by-one error. If any mapping was successful before an unsuccessful\nmapping, exactly one DMA mapping would leak.\n\nIn these commits, a faulty while condition caused an infinite loop in\ndma_error:\nCommit 03b1320dfcee (\"e1000e: remove use of skb_dma_map from e1000e\ndriver\")\nCommit 602c0554d7b0 (\"e1000: remove use of skb_dma_map from e1000 driver\")\n\nCommit c1fa347f20f1 (\"e1000/e1000e/igb/igbvf/ixgb/ixgbe: Fix tests of\nunsigned in *_tx_map()\") fixed the infinite loop, but introduced the\noff-by-one error.\n\nThis issue may still exist in the igbvf driver, but I did not address it\nin this patch.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43445",
          "url": "https://www.suse.com/security/cve/CVE-2026-43445"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265041 for CVE-2026-43445",
          "url": "https://bugzilla.suse.com/1265041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43445"
    },
    {
      "cve": "CVE-2026-43449",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43449"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set\n\ndev-\u003eonline_queues is a count incremented in nvme_init_queue. Thus,\nvalid indices are 0 through dev-\u003eonline_queues \u2212 1.\n\nThis patch fixes the loop condition to ensure the index stays within the\nvalid range. Index 0 is excluded because it is the admin queue.\n\nKASAN splat:\n\n==================================================================\nBUG: KASAN: slab-out-of-bounds in nvme_dbbuf_free drivers/nvme/host/pci.c:377 [inline]\nBUG: KASAN: slab-out-of-bounds in nvme_dbbuf_set+0x39c/0x400 drivers/nvme/host/pci.c:404\nRead of size 2 at addr ffff88800592a574 by task kworker/u8:5/74\n\nCPU: 0 UID: 0 PID: 74 Comm: kworker/u8:5 Not tainted 6.19.0-dirty #10 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: nvme-reset-wq nvme_reset_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xea/0x150 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xce/0x5d0 mm/kasan/report.c:482\n kasan_report+0xdc/0x110 mm/kasan/report.c:595\n __asan_report_load2_noabort+0x18/0x20 mm/kasan/report_generic.c:379\n nvme_dbbuf_free drivers/nvme/host/pci.c:377 [inline]\n nvme_dbbuf_set+0x39c/0x400 drivers/nvme/host/pci.c:404\n nvme_reset_work+0x36b/0x8c0 drivers/nvme/host/pci.c:3252\n process_one_work+0x956/0x1aa0 kernel/workqueue.c:3257\n process_scheduled_works kernel/workqueue.c:3340 [inline]\n worker_thread+0x65c/0xe60 kernel/workqueue.c:3421\n kthread+0x41a/0x930 kernel/kthread.c:463\n ret_from_fork+0x6f8/0x8c0 arch/x86/kernel/process.c:158\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n \u003c/TASK\u003e\n\nAllocated by task 34 on cpu 1 at 4.241550s:\n kasan_save_stack+0x2c/0x60 mm/kasan/common.c:57\n kasan_save_track+0x1c/0x70 mm/kasan/common.c:78\n kasan_save_alloc_info+0x3c/0x50 mm/kasan/generic.c:570\n poison_kmalloc_redzone mm/kasan/common.c:398 [inline]\n __kasan_kmalloc+0xb5/0xc0 mm/kasan/common.c:415\n kasan_kmalloc include/linux/kasan.h:263 [inline]\n __do_kmalloc_node mm/slub.c:5657 [inline]\n __kmalloc_node_noprof+0x2bf/0x8d0 mm/slub.c:5663\n kmalloc_array_node_noprof include/linux/slab.h:1075 [inline]\n nvme_pci_alloc_dev drivers/nvme/host/pci.c:3479 [inline]\n nvme_probe+0x2f1/0x1820 drivers/nvme/host/pci.c:3534\n local_pci_probe+0xef/0x1c0 drivers/pci/pci-driver.c:324\n pci_call_probe drivers/pci/pci-driver.c:392 [inline]\n __pci_device_probe drivers/pci/pci-driver.c:417 [inline]\n pci_device_probe+0x743/0x920 drivers/pci/pci-driver.c:451\n call_driver_probe drivers/base/dd.c:583 [inline]\n really_probe+0x29b/0xb70 drivers/base/dd.c:661\n __driver_probe_device+0x3b0/0x4a0 drivers/base/dd.c:803\n driver_probe_device+0x56/0x1f0 drivers/base/dd.c:833\n __driver_attach_async_helper+0x155/0x340 drivers/base/dd.c:1159\n async_run_entry_fn+0xa6/0x4b0 kernel/async.c:129\n process_one_work+0x956/0x1aa0 kernel/workqueue.c:3257\n process_scheduled_works kernel/workqueue.c:3340 [inline]\n worker_thread+0x65c/0xe60 kernel/workqueue.c:3421\n kthread+0x41a/0x930 kernel/kthread.c:463\n ret_from_fork+0x6f8/0x8c0 arch/x86/kernel/process.c:158\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246\n\nThe buggy address belongs to the object at ffff88800592a000\n which belongs to the cache kmalloc-2k of size 2048\nThe buggy address is located 244 bytes to the right of\n allocated 1152-byte region [ffff88800592a000, ffff88800592a480)\n\nThe buggy address belongs to the physical page:\npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5928\nhead: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0\nanon flags: 0xfffffc0000040(head|node=0|zone=1|lastcpupid=0x1fffff)\npage_type: f5(slab)\nraw: 000fffffc0000040 ffff888001042000 0000000000000000 dead000000000001\nraw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000\nhead: 000fffffc0000040 ffff888001042000 00000\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43449",
          "url": "https://www.suse.com/security/cve/CVE-2026-43449"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265023 for CVE-2026-43449",
          "url": "https://bugzilla.suse.com/1265023"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43449"
    },
    {
      "cve": "CVE-2026-43450",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43450"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()\n\nnfnl_cthelper_dump_table() has a \u0027goto restart\u0027 that jumps to a label\ninside the for loop body.  When the \"last\" helper saved in cb-\u003eargs[1]\nis deleted between dump rounds, every entry fails the (cur != last)\ncheck, so cb-\u003eargs[1] is never cleared.  The for loop finishes with\ncb-\u003eargs[0] == nf_ct_helper_hsize, and the \u0027goto restart\u0027 jumps back\ninto the loop body bypassing the bounds check, causing an 8-byte\nout-of-bounds read on nf_ct_helper_hash[nf_ct_helper_hsize].\n\nThe \u0027goto restart\u0027 block was meant to re-traverse the current bucket\nwhen \"last\" is no longer found, but it was placed after the for loop\ninstead of inside it.  Move the block into the for loop body so that\nthe restart only occurs while cb-\u003eargs[0] is still within bounds.\n\n BUG: KASAN: slab-out-of-bounds in nfnl_cthelper_dump_table+0x9f/0x1b0\n Read of size 8 at addr ffff888104ca3000 by task poc_cthelper/131\n Call Trace:\n  nfnl_cthelper_dump_table+0x9f/0x1b0\n  netlink_dump+0x333/0x880\n  netlink_recvmsg+0x3e2/0x4b0\n  sock_recvmsg+0xde/0xf0\n  __sys_recvfrom+0x150/0x200\n  __x64_sys_recvfrom+0x76/0x90\n  do_syscall_64+0xc3/0x6e0\n\n Allocated by task 1:\n  __kvmalloc_node_noprof+0x21b/0x700\n  nf_ct_alloc_hashtable+0x65/0xd0\n  nf_conntrack_helper_init+0x21/0x60\n  nf_conntrack_init_start+0x18d/0x300\n  nf_conntrack_standalone_init+0x12/0xc0",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43450",
          "url": "https://www.suse.com/security/cve/CVE-2026-43450"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264794 for CVE-2026-43450",
          "url": "https://bugzilla.suse.com/1264794"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43450"
    },
    {
      "cve": "CVE-2026-43452",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43452"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: guard option walkers against 1-byte tail reads\n\nWhen the last byte of options is a non-single-byte option kind, walkers\nthat advance with i += op[i + 1] ? : 1 can read op[i + 1] past the end\nof the option area.\n\nAdd an explicit i == optlen - 1 check before dereferencing op[i + 1]\nin xt_tcpudp and xt_dccp option walkers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43452",
          "url": "https://www.suse.com/security/cve/CVE-2026-43452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265142 for CVE-2026-43452",
          "url": "https://bugzilla.suse.com/1265142"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43452"
    },
    {
      "cve": "CVE-2026-43465",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43465"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ\n\nXDP multi-buf programs can modify the layout of the XDP buffer when the\nprogram calls bpf_xdp_pull_data() or bpf_xdp_adjust_tail(). The\nreferenced commit in the fixes tag corrected the assumption in the mlx5\ndriver that the XDP buffer layout doesn\u0027t change during a program\nexecution. However, this fix introduced another issue: the dropped\nfragments still need to be counted on the driver side to avoid page\nfragment reference counting issues.\n\nThe issue was discovered by the drivers/net/xdp.py selftest,\nmore specifically the test_xdp_native_tx_mb:\n- The mlx5 driver allocates a page_pool page and initializes it with\n  a frag counter of 64 (pp_ref_count=64) and the internal frag counter\n  to 0.\n- The test sends one packet with no payload.\n- On RX (mlx5e_skb_from_cqe_mpwrq_nonlinear()), mlx5 configures the XDP\n  buffer with the packet data starting in the first fragment which is the\n  page mentioned above.\n- The XDP program runs and calls bpf_xdp_pull_data() which moves the\n  header into the linear part of the XDP buffer. As the packet doesn\u0027t\n  contain more data, the program drops the tail fragment since it no\n  longer contains any payload (pp_ref_count=63).\n- mlx5 device skips counting this fragment. Internal frag counter\n  remains 0.\n- mlx5 releases all 64 fragments of the page but page pp_ref_count is\n  63 =\u003e negative reference counting error.\n\nResulting splat during the test:\n\n  WARNING: CPU: 0 PID: 188225 at ./include/net/page_pool/helpers.h:297 mlx5e_page_release_fragmented.isra.0+0xbd/0xe0 [mlx5_core]\n  Modules linked in: [...]\n  CPU: 0 UID: 0 PID: 188225 Comm: ip Not tainted 6.18.0-rc7_for_upstream_min_debug_2025_12_08_11_44 #1 NONE\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n  RIP: 0010:mlx5e_page_release_fragmented.isra.0+0xbd/0xe0 [mlx5_core]\n  [...]\n  Call Trace:\n   \u003cTASK\u003e\n   mlx5e_free_rx_mpwqe+0x20a/0x250 [mlx5_core]\n   mlx5e_dealloc_rx_mpwqe+0x37/0xb0 [mlx5_core]\n   mlx5e_free_rx_descs+0x11a/0x170 [mlx5_core]\n   mlx5e_close_rq+0x78/0xa0 [mlx5_core]\n   mlx5e_close_queues+0x46/0x2a0 [mlx5_core]\n   mlx5e_close_channel+0x24/0x90 [mlx5_core]\n   mlx5e_close_channels+0x5d/0xf0 [mlx5_core]\n   mlx5e_safe_switch_params+0x2ec/0x380 [mlx5_core]\n   mlx5e_change_mtu+0x11d/0x490 [mlx5_core]\n   mlx5e_change_nic_mtu+0x19/0x30 [mlx5_core]\n   netif_set_mtu_ext+0xfc/0x240\n   do_setlink.isra.0+0x226/0x1100\n   rtnl_newlink+0x7a9/0xba0\n   rtnetlink_rcv_msg+0x220/0x3c0\n   netlink_rcv_skb+0x4b/0xf0\n   netlink_unicast+0x255/0x380\n   netlink_sendmsg+0x1f3/0x420\n   __sock_sendmsg+0x38/0x60\n   ____sys_sendmsg+0x1e8/0x240\n   ___sys_sendmsg+0x7c/0xb0\n   [...]\n   __sys_sendmsg+0x5f/0xb0\n   do_syscall_64+0x55/0xc70\n\nThe problem applies for XDP_PASS as well which is handled in a different\ncode path in the driver.\n\nThis patch fixes the issue by doing page frag counting on all the\noriginal XDP buffer fragments for all relevant XDP actions (XDP_TX ,\nXDP_REDIRECT and XDP_PASS). This is basically reverting to the original\ncounting before the commit in the fixes tag.\n\nAs frag_page is still pointing to the original tail, the nr_frags\nparameter to xdp_update_skb_frags_info() needs to be calculated\nin a different way to reflect the new nr_frags.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43465",
          "url": "https://www.suse.com/security/cve/CVE-2026-43465"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264997 for CVE-2026-43465",
          "url": "https://bugzilla.suse.com/1264997"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43465"
    },
    {
      "cve": "CVE-2026-43466",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43466"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery\n\nIn case of a TX error CQE, a recovery flow is triggered,\nmlx5e_reset_txqsq_cc_pc() resets dma_fifo_cc to 0 but not dma_fifo_pc,\ndesyncing the DMA FIFO producer and consumer.\n\nAfter recovery, the producer pushes new DMA entries at the old\ndma_fifo_pc, while the consumer reads from position 0.\nThis causes us to unmap stale DMA addresses from before the recovery.\n\nThe DMA FIFO is a purely software construct with no HW counterpart.\nAt the point of reset, all WQEs have been flushed so dma_fifo_cc is\nalready equal to dma_fifo_pc. There is no need to reset either counter,\nsimilar to how skb_fifo pc/cc are untouched.\n\nRemove the \u0027dma_fifo_cc = 0\u0027 reset.\n\nThis fixes the following WARNING:\n    WARNING: CPU: 0 PID: 0 at drivers/iommu/dma-iommu.c:1240 iommu_dma_unmap_page+0x79/0x90\n    Modules linked in: mlx5_vdpa vringh vdpa bonding mlx5_ib mlx5_vfio_pci ipip mlx5_fwctl tunnel4 mlx5_core ib_ipoib geneve ip6_gre ip_gre gre nf_tables ip6_tunnel rdma_ucm ib_uverbs ib_umad vfio_pci vfio_pci_core act_mirred act_skbedit act_vlan vhost_net vhost tap ip6table_mangle ip6table_nat ip6table_filter ip6_tables iptable_mangle cls_matchall nfnetlink_cttimeout act_gact cls_flower sch_ingress vhost_iotlb iptable_raw tunnel6 vfio_iommu_type1 vfio openvswitch nsh rpcsec_gss_krb5 auth_rpcgss oid_registry xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink iptable_nat nf_nat xt_addrtype br_netfilter overlay zram zsmalloc rpcrdma ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_cm ib_core fuse [last unloaded: nf_tables]\n    CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc5_for_upstream_min_debug_2024_12_30_21_33 #1\n    Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n    RIP: 0010:iommu_dma_unmap_page+0x79/0x90\n    Code: 2b 4d 3b 21 72 26 4d 3b 61 08 73 20 49 89 d8 44 89 f9 5b 4c 89 f2 4c 89 e6 48 89 ef 5d 41 5c 41 5d 41 5e 41 5f e9 c7 ae 9e ff \u003c0f\u003e 0b 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00\n    Call Trace:\n     \u003cIRQ\u003e\n     ? __warn+0x7d/0x110\n     ? iommu_dma_unmap_page+0x79/0x90\n     ? report_bug+0x16d/0x180\n     ? handle_bug+0x4f/0x90\n     ? exc_invalid_op+0x14/0x70\n     ? asm_exc_invalid_op+0x16/0x20\n     ? iommu_dma_unmap_page+0x79/0x90\n     ? iommu_dma_unmap_page+0x2e/0x90\n     dma_unmap_page_attrs+0x10d/0x1b0\n     mlx5e_tx_wi_dma_unmap+0xbe/0x120 [mlx5_core]\n     mlx5e_poll_tx_cq+0x16d/0x690 [mlx5_core]\n     mlx5e_napi_poll+0x8b/0xac0 [mlx5_core]\n     __napi_poll+0x24/0x190\n     net_rx_action+0x32a/0x3b0\n     ? mlx5_eq_comp_int+0x7e/0x270 [mlx5_core]\n     ? notifier_call_chain+0x35/0xa0\n     handle_softirqs+0xc9/0x270\n     irq_exit_rcu+0x71/0xd0\n     common_interrupt+0x7f/0xa0\n     \u003c/IRQ\u003e\n     \u003cTASK\u003e\n     asm_common_interrupt+0x22/0x40",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43466",
          "url": "https://www.suse.com/security/cve/CVE-2026-43466"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264790 for CVE-2026-43466",
          "url": "https://bugzilla.suse.com/1264790"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43466"
    },
    {
      "cve": "CVE-2026-43468",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43468"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix deadlock between devlink lock and esw-\u003ewq\n\nesw-\u003ework_queue executes esw_functions_changed_event_handler -\u003e\nesw_vfs_changed_event_handler and acquires the devlink lock.\n\n.eswitch_mode_set (acquires devlink lock in devlink_nl_pre_doit) -\u003e\nmlx5_devlink_eswitch_mode_set -\u003e mlx5_eswitch_disable_locked -\u003e\nmlx5_eswitch_event_handler_unregister -\u003e flush_workqueue deadlocks\nwhen esw_vfs_changed_event_handler executes.\n\nFix that by no longer flushing the work to avoid the deadlock, and using\na generation counter to keep track of work relevance. This avoids an old\nhandler manipulating an esw that has undergone one or more mode changes:\n- the counter is incremented in mlx5_eswitch_event_handler_unregister.\n- the counter is read and passed to the ephemeral mlx5_host_work struct.\n- the work handler takes the devlink lock and bails out if the current\n  generation is different than the one it was scheduled to operate on.\n- mlx5_eswitch_cleanup does the final draining before destroying the wq.\n\nNo longer flushing the workqueue has the side effect of maybe no longer\ncancelling pending vport_change_handler work items, but that\u0027s ok since\nthose are disabled elsewhere:\n- mlx5_eswitch_disable_locked disables the vport eq notifier.\n- mlx5_esw_vport_disable disarms the HW EQ notification and marks\n  vport-\u003eenabled under state_lock to false to prevent pending vport\n  handler from doing anything.\n- mlx5_eswitch_cleanup destroys the workqueue and makes sure all events\n  are disabled/finished.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43468",
          "url": "https://www.suse.com/security/cve/CVE-2026-43468"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264978 for CVE-2026-43468",
          "url": "https://bugzilla.suse.com/1264978"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43468"
    },
    {
      "cve": "CVE-2026-43473",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43473"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Add NULL checks when resetting request and reply queues\n\nThe driver encountered a crash during resource cleanup when the reply and\nrequest queues were NULL due to freed memory.  This issue occurred when the\ncreation of reply or request queues failed, and the driver freed the memory\nfirst, but attempted to mem set the content of the freed memory, leading to\na system crash.\n\nAdd NULL pointer checks for reply and request queues before accessing the\nreply/request memory during cleanup",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43473",
          "url": "https://www.suse.com/security/cve/CVE-2026-43473"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264731 for CVE-2026-43473",
          "url": "https://bugzilla.suse.com/1264731"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43473"
    },
    {
      "cve": "CVE-2026-45857",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45857"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: csiostor: Fix dereference of null pointer rn\n\nThe error exit path when rn is NULL ends up deferencing the null pointer rn\nvia the use of the macro CSIO_INC_STATS. Fix this by adding a new error\nreturn path label after the use of the macro to avoid the deference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45857",
          "url": "https://www.suse.com/security/cve/CVE-2026-45857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266458 for CVE-2026-45857",
          "url": "https://bugzilla.suse.com/1266458"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45857"
    },
    {
      "cve": "CVE-2026-45858",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45858"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: don\u0027t zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1\n\nWhen allocating initialized blocks from a large unwritten extent, or\nwhen splitting an unwritten extent during end I/O and converting it to\ninitialized, there is currently a potential issue of stale data if the\nextent needs to be split in the middle.\n\n       0  A      B  N\n       [UUUUUUUUUUUU]    U: unwritten extent\n       [--DDDDDDDD--]    D: valid data\n          |\u003c-  -\u003e| ----\u003e this range needs to be initialized\n\next4_split_extent() first try to split this extent at B with\nEXT4_EXT_DATA_ENTIRE_VALID1 and EXT4_EXT_MAY_ZEROOUT flag set, but\next4_split_extent_at() failed to split this extent due to temporary lack\nof space. It zeroout B to N and mark the entire extent from 0 to N\nas written.\n\n       0  A      B  N\n       [WWWWWWWWWWWW]    W: written extent\n       [SSDDDDDDDDZZ]    Z: zeroed, S: stale data\n\next4_split_extent() then try to split this extent at A with\nEXT4_EXT_DATA_VALID2 flag set. This time, it split successfully and left\na stale written extent from 0 to A.\n\n       0  A      B   N\n       [WW|WWWWWWWWWW]\n       [SS|DDDDDDDDZZ]\n\nFix this by pass EXT4_EXT_DATA_PARTIAL_VALID1 to ext4_split_extent_at()\nwhen splitting at B, don\u0027t convert the entire extent to written and left\nit as unwritten after zeroing out B to N. The remaining work is just\nlike the standard two-part split. ext4_split_extent() will pass the\nEXT4_EXT_DATA_VALID2 flag when it calls ext4_split_extent_at() for the\nsecond time, allowing it to properly handle the split. If the split is\nsuccessful, it will keep extent from 0 to A as unwritten.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45858",
          "url": "https://www.suse.com/security/cve/CVE-2026-45858"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266773 for CVE-2026-45858",
          "url": "https://bugzilla.suse.com/1266773"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45858"
    },
    {
      "cve": "CVE-2026-45899",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45899"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: drop extent cache when splitting extent fails\n\nWhen the split extent fails, we might leave some extents still being\nprocessed and return an error directly, which will result in stale\nextent entries remaining in the extent status tree. So drop all of the\nremaining potentially stale extents if the splitting fails.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45899",
          "url": "https://www.suse.com/security/cve/CVE-2026-45899"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266883 for CVE-2026-45899",
          "url": "https://bugzilla.suse.com/1266883"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45899"
    },
    {
      "cve": "CVE-2026-45920",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45920"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix dirtyclusters double decrement on fs shutdown\n\nfstests test generic/388 occasionally reproduces a warning in\next4_put_super() associated with the dirty clusters count:\n\n  WARNING: CPU: 7 PID: 76064 at fs/ext4/super.c:1324 ext4_put_super+0x48c/0x590 [ext4]\n\nTracing the failure shows that the warning fires due to an\ns_dirtyclusters_counter value of -1. IOW, this appears to be a\nspurious decrement as opposed to some sort of leak. Further tracing\nof the dirty cluster count deltas and an LLM scan of the resulting\noutput identified the cause as a double decrement in the error path\nbetween ext4_mb_mark_diskspace_used() and the caller\next4_mb_new_blocks().\n\nFirst, note that generic/388 is a shutdown vs. fsstress test and so\nproduces a random set of operations and shutdown injections. In the\nproblematic case, the shutdown triggers an error return from the\next4_handle_dirty_metadata() call(s) made from\next4_mb_mark_context(). The changed value is non-zero at this point,\nso ext4_mb_mark_diskspace_used() does not exit after the error\nbubbles up from ext4_mb_mark_context(). Instead, the former\ndecrements both cluster counters and returns the error up to\next4_mb_new_blocks(). The latter falls into the !ar-\u003elen out path\nwhich decrements the dirty clusters counter a second time, creating\nthe inconsistency.\n\nTo avoid this problem and simplify ownership of the cluster\nreservation in this codepath, lift the counter reduction to a single\nplace in the caller. This makes it more clear that\next4_mb_new_blocks() is responsible for acquiring cluster\nreservation (via ext4_claim_free_clusters()) in the !delalloc case\nas well as releasing it, regardless of whether it ends up consumed\nor returned due to failure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45920",
          "url": "https://www.suse.com/security/cve/CVE-2026-45920"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266893 for CVE-2026-45920",
          "url": "https://bugzilla.suse.com/1266893"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45920"
    },
    {
      "cve": "CVE-2026-45987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2\n\nAfter VMRUN in guest mode, nested_sync_control_from_vmcb02() syncs\nfields written by the CPU from vmcb02 to the cached vmcb12. This is\nbecause the cached vmcb12 is used as the authoritative copy of some of\nthe controls, and is the payload when saving/restoring nested state.\n\nint_state is also written by the CPU, specifically bit 0 (i.e.\nSVM_INTERRUPT_SHADOW_MASK) for nested VMs, but it is not sync\u0027d to\ncached vmcb12. This does not cause a problem if KVM_SET_NESTED_STATE\npreceeds KVM_SET_VCPU_EVENTS in the restore path, as an interrupt shadow\nwould be correctly restored to vmcb02 (KVM_SET_VCPU_EVENTS overwrites\nwhat KVM_SET_NESTED_STATE restored in int_state).\n\nHowever, if KVM_SET_VCPU_EVENTS preceeds KVM_SET_NESTED_STATE, an\ninterrupt shadow would be restored into vmcb01 instead of vmcb02. This\nwould mostly be benign for L1 (delays an interrupt), but not for L2. For\nL2, the vCPU could hang (e.g. if a wakeup interrupt is delivered before\na HLT that should have been in an interrupt shadow).\n\nSync int_state to the cached vmcb12 in nested_sync_control_from_vmcb02()\nto avoid this problem. With that, KVM_SET_NESTED_STATE restores the\ncorrect interrupt shadow state, and if KVM_SET_VCPU_EVENTS follows it\nwould overwrite it with the same value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45987",
          "url": "https://www.suse.com/security/cve/CVE-2026-45987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267213 for CVE-2026-45987",
          "url": "https://bugzilla.suse.com/1267213"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45987"
    },
    {
      "cve": "CVE-2026-45997",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45997"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: fix missing put_disk() when device_add(\u0026disk_dev) fails\n\nIf device_add(\u0026sdkp-\u003edisk_dev) fails, put_device() runs\nscsi_disk_release(), which frees the scsi_disk but leaves the gendisk\nreferenced. The device_add_disk() error path in sd_probe() calls\nput_disk(gd); call put_disk(gd) here to mirror that cleanup.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45997",
          "url": "https://www.suse.com/security/cve/CVE-2026-45997"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266740 for CVE-2026-45997",
          "url": "https://bugzilla.suse.com/1266740"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45997"
    },
    {
      "cve": "CVE-2026-46046",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46046"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()\n\nThe commit c8e008b60492 (\"ext4: ignore xattrs past end\")\nintroduced a refcount leak in when block_csum is false.\n\next4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to\nget iloc.bh, but never releases it with brelse().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46046",
          "url": "https://www.suse.com/security/cve/CVE-2026-46046"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266726 for CVE-2026-46046",
          "url": "https://bugzilla.suse.com/1266726"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46046"
    },
    {
      "cve": "CVE-2026-46050",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46050"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix deadlock with check operation and nowait requests\n\nWhen an array check is running it will raise the barrier at which point\nnormal requests will become blocked and increment the nr_pending value to\nsignal there is work pending inside of wait_barrier(). NOWAIT requests\ndo not block and so will return immediately with an error, and additionally\ndo not increment nr_pending in wait_barrier(). Upstream change commit\n43806c3d5b9b (\"raid10: cleanup memleak at raid10_make_request\") added a\ncall to raid_end_bio_io() to fix a memory leak when NOWAIT requests hit\nthis condition. raid_end_bio_io() eventually calls allow_barrier() and\nit will unconditionally do an atomic_dec_and_test(\u0026conf-\u003enr_pending) even\nthough the corresponding increment on nr_pending didn\u0027t happen in the\nNOWAIT case.\n\nThis can be easily seen by starting a check operation while an application\nis doing nowait IO on the same array. This results in a deadlocked state\ndue to nr_pending value underflowing and so the md resync thread gets stuck\nwaiting for nr_pending to == 0.\n\nOutput of r10conf state of the array when we hit this condition:\n\ncrash\u003e struct r10conf\n\tbarrier = 1,\n        nr_pending = {\n          counter = -41\n        },\n        nr_waiting = 15,\n        nr_queued = 0,\n\nExample of md_sync thread stuck waiting on raise_barrier() and other\nrequests stuck in wait_barrier():\n\nmd1_resync\n[\u003c0\u003e] raise_barrier+0xce/0x1c0\n[\u003c0\u003e] raid10_sync_request+0x1ca/0x1ed0\n[\u003c0\u003e] md_do_sync+0x779/0x1110\n[\u003c0\u003e] md_thread+0x90/0x160\n[\u003c0\u003e] kthread+0xbe/0xf0\n[\u003c0\u003e] ret_from_fork+0x34/0x50\n[\u003c0\u003e] ret_from_fork_asm+0x1a/0x30\n\nkworker/u1040:2+flush-253:4\n[\u003c0\u003e] wait_barrier+0x1de/0x220\n[\u003c0\u003e] regular_request_wait+0x30/0x180\n[\u003c0\u003e] raid10_make_request+0x261/0x1000\n[\u003c0\u003e] md_handle_request+0x13b/0x230\n[\u003c0\u003e] __submit_bio+0x107/0x1f0\n[\u003c0\u003e] submit_bio_noacct_nocheck+0x16f/0x390\n[\u003c0\u003e] ext4_io_submit+0x24/0x40\n[\u003c0\u003e] ext4_do_writepages+0x254/0xc80\n[\u003c0\u003e] ext4_writepages+0x84/0x120\n[\u003c0\u003e] do_writepages+0x7a/0x260\n[\u003c0\u003e] __writeback_single_inode+0x3d/0x300\n[\u003c0\u003e] writeback_sb_inodes+0x1dd/0x470\n[\u003c0\u003e] __writeback_inodes_wb+0x4c/0xe0\n[\u003c0\u003e] wb_writeback+0x18b/0x2d0\n[\u003c0\u003e] wb_workfn+0x2a1/0x400\n[\u003c0\u003e] process_one_work+0x149/0x330\n[\u003c0\u003e] worker_thread+0x2d2/0x410\n[\u003c0\u003e] kthread+0xbe/0xf0\n[\u003c0\u003e] ret_from_fork+0x34/0x50\n[\u003c0\u003e] ret_from_fork_asm+0x1a/0x30",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46050",
          "url": "https://www.suse.com/security/cve/CVE-2026-46050"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266686 for CVE-2026-46050",
          "url": "https://bugzilla.suse.com/1266686"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46050"
    },
    {
      "cve": "CVE-2026-46051",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46051"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5: fix soft lockup in retry_aligned_read()\n\nWhen retry_aligned_read() encounters an overlapped stripe, it releases\nthe stripe via raid5_release_stripe() which puts it on the lockless\nreleased_stripes llist. In the next raid5d loop iteration,\nrelease_stripe_list() drains the stripe onto handle_list (since\nSTRIPE_HANDLE is set by the original IO), but retry_aligned_read()\nruns before handle_active_stripes() and removes the stripe from\nhandle_list via find_get_stripe() -\u003e list_del_init(). This prevents\nhandle_stripe() from ever processing the stripe to resolve the\noverlap, causing an infinite loop and soft lockup.\n\nFix this by using __release_stripe() with temp_inactive_list instead\nof raid5_release_stripe() in the failure path, so the stripe does not\ngo through the released_stripes llist. This allows raid5d to break out\nof its loop, and the overlap will be resolved when the stripe is\neventually processed by handle_stripe().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46051",
          "url": "https://www.suse.com/security/cve/CVE-2026-46051"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267360 for CVE-2026-46051",
          "url": "https://bugzilla.suse.com/1267360"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46051"
    },
    {
      "cve": "CVE-2026-46052",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46052"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: only d_add() negative dentries when they are unhashed\n\nCeph can call d_add(dentry, NULL) on a negative dentry that is already\npresent in the primary dcache hash.\n\nIn the current VFS that is not safe.  d_add() goes through __d_add()\nto __d_rehash(), which unconditionally reinserts dentry-\u003ed_hash into\nthe hlist_bl bucket.  If the dentry is already hashed, reinserting the\nsame node can corrupt the bucket, including creating a self-loop.\nOnce that happens, __d_lookup() can spin forever in the hlist_bl walk,\ntypically looping only on the d_name.hash mismatch check and\neventually triggering RCU stall reports like this one:\n\n rcu: INFO: rcu_sched self-detected stall on CPU\n rcu:         87-....: (2100 ticks this GP) idle=3a4c/1/0x4000000000000000 softirq=25003319/25003319 fqs=829\n rcu:         (t=2101 jiffies g=79058445 q=698988 ncpus=192)\n CPU: 87 UID: 2952868916 PID: 3933303 Comm: php-cgi8.3 Not tainted 6.18.17-i1-amd #950 NONE\n Hardware name: Dell Inc. PowerEdge R7615/0G9DHV, BIOS 1.6.6 09/22/2023\n RIP: 0010:__d_lookup+0x46/0xb0\n Code: c1 e8 07 48 8d 04 c2 48 8b 00 49 89 fc 49 89 f5 48 89 c3 48 83 e3 fe 48 83 f8 01 77 0f eb 2d 0f 1f 44 00 00 48 8b 1b 48 85 db \u003c74\u003e 20 39 6b 18 75 f3 48 8d 7b 78 e8 ba 85 d0 00 4c 39 63 10 74 1f\n RSP: 0018:ff745a70c8253898 EFLAGS: 00000282\n RAX: ff26e470054cb208 RBX: ff26e470054cb208 RCX: 000000006e958966\n RDX: ff26e48267340000 RSI: ff745a70c82539b0 RDI: ff26e458f74655c0\n RBP: 000000006e958966 R08: 0000000000000180 R09: 9cd08d909b919a89\n R10: ff26e458f74655c0 R11: 0000000000000000 R12: ff26e458f74655c0\n R13: ff745a70c82539b0 R14: d0d0d0d0d0d0d0d0 R15: 2f2f2f2f2f2f2f2f\n FS:  00007f5770896980(0000) GS:ff26e482c5d88000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f5764de50c0 CR3: 000000a72abb5001 CR4: 0000000000771ef0\n PKRU: 55555554\n Call Trace:\n  \u003cTASK\u003e\n  lookup_fast+0x9f/0x100\n  walk_component+0x1f/0x150\n  link_path_walk+0x20e/0x3d0\n  path_lookupat+0x68/0x180\n  filename_lookup+0xdc/0x1e0\n  vfs_statx+0x6c/0x140\n  vfs_fstatat+0x67/0xa0\n  __do_sys_newfstatat+0x24/0x60\n  do_syscall_64+0x6a/0x230\n  entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThis is reachable with reused cached negative dentries.  A Ceph lookup\nor atomic_open can be handed a negative dentry that is already hashed,\nand fs/ceph/dir.c then hits one of two paths that incorrectly assume\n\"negative\" also means \"unhashed\":\n\n  - ceph_finish_lookup():\n      MDS reply is -ENOENT with no trace\n      -\u003e d_add(dentry, NULL)\n\n  - ceph_lookup():\n      local ENOENT fast path for a complete directory with shared caps\n      -\u003e d_add(dentry, NULL)\n\nBoth paths can therefore re-add an already-hashed negative dentry.\n\nCeph already uses the correct pattern elsewhere: ceph_fill_trace() only\ncalls d_add(dn, NULL) for a negative null-dentry reply when d_unhashed(dn)\nis true.\n\nFix both fs/ceph/dir.c sites the same way: only call d_add() for a\nnegative dentry when it is actually unhashed.  If the negative dentry\nis already hashed, leave it in place and reuse it as-is.\n\nThis preserves the existing behavior for unhashed dentries while\navoiding d_hash list corruption for reused hashed negatives.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46052",
          "url": "https://www.suse.com/security/cve/CVE-2026-46052"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267494 for CVE-2026-46052",
          "url": "https://bugzilla.suse.com/1267494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267886 for CVE-2026-46052",
          "url": "https://bugzilla.suse.com/1267886"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46052"
    },
    {
      "cve": "CVE-2026-46059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Always use NextRIP as vmcb02\u0027s NextRIP after first L2 VMRUN\n\nFor guests with NRIPS disabled, L1 does not provide NextRIP when running\nan L2 with an injected soft interrupt, instead it advances the current RIP\nbefore running it. KVM uses the current RIP as the NextRIP in vmcb02 to\nemulate a CPU without NRIPS.\n\nHowever, after L2 runs the first time, NextRIP will be updated by the CPU\nand/or KVM, and the current RIP is no longer the correct value to use in\nvmcb02.  Hence, after save/restore, use the current RIP if and only if a\nnested run is pending, otherwise use NextRIP.  Give soft_int_next_rip the\nsame treatment, as it\u0027s the same logic, just for a narrower use case.\n\n[sean: give soft_int_next_rip the same treatment]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46059",
          "url": "https://www.suse.com/security/cve/CVE-2026-46059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267495 for CVE-2026-46059",
          "url": "https://bugzilla.suse.com/1267495"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46059"
    },
    {
      "cve": "CVE-2026-46099",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46099"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels\n\nseg6_input_core() and rpl_input() call ip6_route_input() which sets a\nNOREF dst on the skb, then pass it to dst_cache_set_ip6() invoking\ndst_hold() unconditionally.\nOn PREEMPT_RT, ksoftirqd is preemptible and a higher-priority task can\nrelease the underlying pcpu_rt between the lookup and the caching\nthrough a concurrent FIB lookup on a shared nexthop.\nSimplified race sequence:\n\n  ksoftirqd/X                       higher-prio task (same CPU X)\n  -----------                       --------------------------------\n  seg6_input_core(,skb)/rpl_input(skb)\n    dst_cache_get()\n      -\u003e miss\n    ip6_route_input(skb)\n      -\u003e ip6_pol_route(,skb,flags)\n         [RT6_LOOKUP_F_DST_NOREF in flags]\n        -\u003e FIB lookup resolves fib6_nh\n           [nhid=N route]\n        -\u003e rt6_make_pcpu_route()\n           [creates pcpu_rt, refcount=1]\n             pcpu_rt-\u003esernum = fib6_sernum\n             [fib6_sernum=W]\n           -\u003e cmpxchg(fib6_nh.rt6i_pcpu,\n                      NULL, pcpu_rt)\n              [slot was empty, store succeeds]\n      -\u003e skb_dst_set_noref(skb, dst)\n         [dst is pcpu_rt, refcount still 1]\n\n                                    rt_genid_bump_ipv6()\n                                      -\u003e bumps fib6_sernum\n                                         [fib6_sernum from W to Z]\n                                    ip6_route_output()\n                                      -\u003e ip6_pol_route()\n                                        -\u003e FIB lookup resolves fib6_nh\n                                           [nhid=N]\n                                        -\u003e rt6_get_pcpu_route()\n                                             pcpu_rt-\u003esernum != fib6_sernum\n                                             [W \u003c\u003e Z, stale]\n                                          -\u003e prev = xchg(rt6i_pcpu, NULL)\n                                          -\u003e dst_release(prev)\n                                             [prev is pcpu_rt,\n                                              refcount 1-\u003e0, dead]\n\n    dst = skb_dst(skb)\n    [dst is the dead pcpu_rt]\n    dst_cache_set_ip6(dst)\n      -\u003e dst_hold() on dead dst\n      -\u003e WARN / use-after-free\n\nFor the race to occur, ksoftirqd must be preemptible (PREEMPT_RT without\nPREEMPT_RT_NEEDS_BH_LOCK) and a concurrent task must be able to release\nthe pcpu_rt. Shared nexthop objects provide such a path, as two routes\npointing to the same nhid share the same fib6_nh and its rt6i_pcpu\nentry.\n\nFix seg6_input_core() and rpl_input() by calling skb_dst_force() after\nip6_route_input() to force the NOREF dst into a refcounted one before\ncaching.\nThe output path is not affected as ip6_route_output() already returns a\nrefcounted dst.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46099",
          "url": "https://www.suse.com/security/cve/CVE-2026-46099"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266722 for CVE-2026-46099",
          "url": "https://bugzilla.suse.com/1266722"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46099"
    },
    {
      "cve": "CVE-2026-46161",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46161"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix divide-by-zero in setup_geo() with zero far_copies\n\nsetup_geo() extracts near_copies (nc) and far_copies (fc) from the\nuser-provided layout parameter without checking for zero. When fc=0\nwith the \"improved\" far set layout selected, \u0027geo-\u003efar_set_size =\ndisks / fc\u0027 triggers a divide-by-zero.\n\nValidate nc and fc immediately after extraction, returning -1 if\neither is zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46161",
          "url": "https://www.suse.com/security/cve/CVE-2026-46161"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266838 for CVE-2026-46161",
          "url": "https://bugzilla.suse.com/1266838"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46161"
    },
    {
      "cve": "CVE-2026-46178",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46178"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()\n\nSashiko points out that mlx4_srq_alloc() was not undone during error\nunwind, add the missing call to mlx4_srq_free().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46178",
          "url": "https://www.suse.com/security/cve/CVE-2026-46178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267493 for CVE-2026-46178",
          "url": "https://bugzilla.suse.com/1267493"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46178"
    },
    {
      "cve": "CVE-2026-46242",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46242"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\neventpoll: fix ep_remove struct eventpoll / struct file UAF\n\nep_remove() (via ep_remove_file()) cleared file-\u003ef_ep under\nfile-\u003ef_lock but then kept using @file inside the critical section\n(is_file_epoll(), hlist_del_rcu() through the head, spin_unlock).\nA concurrent __fput() taking the eventpoll_release() fastpath in\nthat window observed the transient NULL, skipped\neventpoll_release_file() and ran to f_op-\u003erelease / file_free().\n\nFor the epoll-watches-epoll case, f_op-\u003erelease is\nep_eventpoll_release() -\u003e ep_clear_and_put() -\u003e ep_free(), which\nkfree()s the watched struct eventpoll. Its embedded -\u003erefs\nhlist_head is exactly where epi-\u003efllink.pprev points, so the\nsubsequent hlist_del_rcu()\u0027s \"*pprev = next\" scribbles into freed\nkmalloc-192 memory.\n\nIn addition, struct file is SLAB_TYPESAFE_BY_RCU, so the slot\nbacking @file could be recycled by alloc_empty_file() --\nreinitializing f_lock and f_ep -- while ep_remove() is still\nnominally inside that lock. The upshot is an attacker-controllable\nkmem_cache_free() against the wrong slab cache.\n\nPin @file via epi_fget() at the top of ep_remove() and gate the\ncritical section on the pin succeeding. With the pin held @file\ncannot reach refcount zero, which holds __fput() off and\ntransitively keeps the watched struct eventpoll alive across the\nhlist_del_rcu() and the f_lock use, closing both UAFs.\n\nIf the pin fails @file has already reached refcount zero and its\n__fput() is in flight. Because we bailed before clearing f_ep,\nthat path takes the eventpoll_release() slow path into\neventpoll_release_file() and blocks on ep-\u003emtx until the waiter\nside\u0027s ep_clear_and_put() drops it. The bailed epi\u0027s share of\nep-\u003erefcount stays intact, so the trailing ep_refcount_dec_and_test()\nin ep_clear_and_put() cannot free the eventpoll out from under\neventpoll_release_file(); the orphaned epi is then cleaned up\nthere.\n\nA successful pin also proves we are not racing\neventpoll_release_file() on this epi, so drop the now-redundant\nre-check of epi-\u003edying under f_lock. The cheap lockless\nREAD_ONCE(epi-\u003edying) fast-path bailout stays.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46242",
          "url": "https://www.suse.com/security/cve/CVE-2026-46242"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267618 for CVE-2026-46242",
          "url": "https://bugzilla.suse.com/1267618"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270352 for CVE-2026-46242",
          "url": "https://bugzilla.suse.com/1270352"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271279 for CVE-2026-46242",
          "url": "https://bugzilla.suse.com/1271279"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46242"
    },
    {
      "cve": "CVE-2026-46314",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46314"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Reject empty multisync extension to prevent infinite loop\n\nv3d_get_extensions() walks a userspace-provided singly-linked list of\nioctl extensions without any bound on the chain length. A local user\ncan craft a self-referential extension (ext-\u003enext == \u0026ext) with zero\nin_sync_count and out_sync_count, which bypasses the existing duplicate-\nextension guard:\n\n    if (se-\u003ein_sync_count || se-\u003eout_sync_count)\n            return -EINVAL;\n\nThe guard never fires because v3d_get_multisync_post_deps() returns\nimmediately when count is zero, leaving both fields at zero on every\niteration. The result is an infinite loop in kernel context, blocking\nthe calling thread and pegging a CPU core indefinitely.\n\nFix this by rejecting a multisync extension where both in_sync_count\nand out_sync_count are zero in v3d_get_multisync_submit_deps(). An\nempty multisync carries no synchronization information and serves no\nuseful purpose, so returning -EINVAL for such an extension is the\ncorrect defense against this attack vector.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46314",
          "url": "https://www.suse.com/security/cve/CVE-2026-46314"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267992 for CVE-2026-46314",
          "url": "https://bugzilla.suse.com/1267992"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46314"
    },
    {
      "cve": "CVE-2026-46322",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46322"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on build_skb failure in tun_xdp_one()\n\nWhen build_skb() fails in tun_xdp_one(), the function sets ret to\n-ENOMEM and jumps to the out label, which returns without freeing the\npage that vhost_net_build_xdp() allocated for the frame. As with the\nshort-frame rejection path, tun_sendmsg() discards the per-buffer error\nand still returns total_len, so vhost_tx_batch() takes the success path\nand never frees the page. Each build_skb() failure in a batch leaks one\npage-frag chunk.\n\nFree the page before taking the error path, matching the put_page() the\nother error exits of tun_xdp_one() already perform.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46322",
          "url": "https://www.suse.com/security/cve/CVE-2026-46322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267994 for CVE-2026-46322",
          "url": "https://bugzilla.suse.com/1267994"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-46322"
    },
    {
      "cve": "CVE-2026-52924",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52924"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: purge outqueue on stale COOKIE-ECHO handling\n\nsctp_stream_update() is only invoked when the association is moved into\nCOOKIE_WAIT during association setup/reconfiguration. In this path, the\noutbound stream scheduler state (stream-\u003eout_curr) is expected to be\nclean, since no user data should have been transmitted yet unless the\nstate machine has already partially progressed.\n\nHowever, a corner case exists in sctp_sf_do_5_2_6_stale(): when a\nStale Cookie ERROR is received, the association is rolled back from\nCOOKIE_ECHOED to COOKIE_WAIT. In this scenario, user data may already\nhave been queued and even bundled with the COOKIE-ECHO chunk.\n\nDuring the rollback, sctp_stream_update() frees the old stream table\nand installs a new one, but it does not invalidate stream-\u003eout_curr.\nAs a result, out_curr may still point to a freed sctp_stream_out\nentry from the previous stream state.\n\nLater, SCTP scheduler dequeue paths (FCFS, RR, PRIO, etc.) rely on\nstream-\u003eout_curr-\u003eext, which can lead to use-after-free once the old\nstream state has been released via sctp_stream_free().\n\nThis results in crashes such as (reported by Yuqi):\n\n  BUG: KASAN: slab-use-after-free in sctp_sched_fcfs_dequeue+0x13a/0x140\n  Read of size 8 at addr ff1100004d4d3208 by task mini_poc/9312\n  CPU: 1 UID: 1001 PID: 9312 Comm: mini_poc Not tainted\n     7.1.0-rc1-00305-gbd3a4795d574 #5 PREEMPT(full)\n   sctp_sched_fcfs_dequeue+0x13a/0x140\n   sctp_outq_flush+0x1603/0x33e0\n   sctp_do_sm+0x31c9/0x5d30\n   sctp_assoc_bh_rcv+0x392/0x6f0\n   sctp_inq_push+0x1db/0x270\n   sctp_rcv+0x138d/0x3c10\n\nFix this by fully purging the association outqueue when handling the\nStale Cookie case. This ensures all pending transmit and retransmit\nstate is dropped, and any scheduler cached pointers are invalidated,\nmaking it safe to rebuild stream state during COOKIE_WAIT restart.\n\nUpdating only stream-\u003eout_curr would be insufficient, since queued\nand retransmittable data would still reference the old stream state and\ntrigger later use-after-free in dequeue paths.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52924",
          "url": "https://www.suse.com/security/cve/CVE-2026-52924"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269036 for CVE-2026-52924",
          "url": "https://bugzilla.suse.com/1269036"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269037 for CVE-2026-52924",
          "url": "https://bugzilla.suse.com/1269037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52924"
    },
    {
      "cve": "CVE-2026-52933",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52933"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/poll: fix signed comparison in io_poll_get_ownership()\n\nio_poll_get_ownership() uses a signed comparison to check whether\npoll_refs has reached the threshold for the slowpath:\n\n    if (unlikely(atomic_read(\u0026req-\u003epoll_refs) \u003e= IO_POLL_REF_BIAS))\n\natomic_read() returns int (signed). When IO_POLL_CANCEL_FLAG\n(BIT(31)) is set in poll_refs, the value becomes negative in\nsigned arithmetic, so the \u003e= 128 comparison always evaluates to\nfalse and the slowpath is never taken.\n\nFix this by casting the atomic_read() result to unsigned int\nbefore the comparison, so that the cancel flag is treated as a\nlarge positive value and correctly triggers the slowpath.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52933",
          "url": "https://www.suse.com/security/cve/CVE-2026-52933"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268989 for CVE-2026-52933",
          "url": "https://bugzilla.suse.com/1268989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279859 for CVE-2026-52933",
          "url": "https://bugzilla.suse.com/1279859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52933"
    },
    {
      "cve": "CVE-2026-52955",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52955"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Fix potential out-of-bounds access in crush_decode()\n\nA message of type CEPH_MSG_OSD_MAP containing a crush map with at least\none bucket has two fields holding the bucket algorithm. If the values\nin these two fields differ, an out-of-bounds access can occur. This is\nthe case because the first algorithm field (alg) is used to allocate\nthe correct amount of memory for a bucket of this type, while the second\nalgorithm field inside the bucket (b-\u003ealg) is used in the subsequent\nprocessing.\n\nThis patch fixes the issue by adding a check that compares alg and\nb-\u003ealg and aborts the processing in case they differ. Furthermore,\nb-\u003ealg is set to 0 in this case, because the destruction of the crush\nmap also uses this field to determine the bucket type, which can again\nresult in an out-of-bounds access when trying to free the memory pointed\nto by the fields of the bucket. To correctly free the memory allocated\nfor the bucket in such a case, the corresponding call to kfree is moved\nfrom the algorithm-specific crush_destroy_bucket functions to the\ngeneric crush_destroy_bucket().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52955",
          "url": "https://www.suse.com/security/cve/CVE-2026-52955"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269159 for CVE-2026-52955",
          "url": "https://bugzilla.suse.com/1269159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270388 for CVE-2026-52955",
          "url": "https://bugzilla.suse.com/1270388"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52955"
    },
    {
      "cve": "CVE-2026-52956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Fix potential out-of-bounds access in __ceph_x_decrypt()\n\nIn __ceph_x_decrypt(), a part of the buffer p is interpreted as a\nceph_x_encrypt_header, and the magic field of this struct is accessed.\nThis happens without any guarantee that the buffer is large enough to\nhold this struct. The function parameter ciphertext_len represents the\nlength of the ciphertext to decrypt and is guaranteed to be at most the\nremaining size of the allocated buffer p. However, this value is not\nnecessarily greater than sizeof(ceph_x_encrypt_header). E.g., a message\nframe of type FRAME_TAG_AUTH_REPLY_MORE, that is just as long to hold\nthe ciphertext at its end with a ciphertext_len of 8 or less, can\ntrigger an out-of-bounds memory access when accessing hdr-\u003emagic.\n\nThis patch fixes the issue by adding a check to ensure that the\ndecrypted plaintext in the buffer is large enough to represent at least\nthe ceph_x_encrypt_header.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52956",
          "url": "https://www.suse.com/security/cve/CVE-2026-52956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269172 for CVE-2026-52956",
          "url": "https://bugzilla.suse.com/1269172"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272139 for CVE-2026-52956",
          "url": "https://bugzilla.suse.com/1272139"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52956"
    },
    {
      "cve": "CVE-2026-52958",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52958"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Fix potential out-of-bounds access in osdmap_decode()\n\nWhen decoding osd_state and osd_weight from an incoming osdmap in\nosdmap_decode(), both are decoded for each osd, i.e., map-\u003emax_osd\ntimes. The ceph_decode_need() check only accounts for\nsizeof(*map-\u003eosd_weight) once. This can potentially result in an\nout-of-bounds memory access if the incoming message is corrupted such\nthat the max_osd value exceeds the actual content of the osdmap message.\n\nThis patch fixes the issue by changing the corresponding part in the\nceph_decode_need() check to account for\nmap-\u003emax_osd*sizeof(*map-\u003eosd_weight).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52958",
          "url": "https://www.suse.com/security/cve/CVE-2026-52958"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269174 for CVE-2026-52958",
          "url": "https://bugzilla.suse.com/1269174"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270387 for CVE-2026-52958",
          "url": "https://bugzilla.suse.com/1270387"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52958"
    },
    {
      "cve": "CVE-2026-52961",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52961"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size\n\nThe generic/642 test-case can reproduce the kernel crash:\n\n[40243.605254] ------------[ cut here ]------------\n[40243.605956] kernel BUG at fs/ceph/xattr.c:918!\n[40243.607142] Oops: invalid opcode: 0000 [#1] SMP PTI\n[40243.608067] CPU: 7 UID: 0 PID: 498762 Comm: kworker/7:1 Not tainted 7.0.0-rc7+ #3 PREEMPT(full)\n[40243.609700] Hardware name: QEMU Ubuntu 25.10 PC v2 (i440FX + PIIX, + 10.1 machine, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[40243.611820] Workqueue: ceph-msgr ceph_con_workfn\n[40243.612715] RIP: 0010:__ceph_build_xattrs_blob+0x1b8/0x1e0\n[40243.613731] Code: 0f 84 82 fe ff ff e9 cf 8e 56 ff 48 8d 65 e8 31 c0 5b 41 5c 41 5d 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 c3 cc cc cc cc \u003c0f\u003e 0b 4c 8b 62 08 41 8b 85 24 07 00 00 49 83 c4 04 41 89 44 24 fc\n[40243.616888] RSP: 0018:ffffcc80c4d4b688 EFLAGS: 00010287\n[40243.617773] RAX: 0000000000010026 RBX: 0000000000000001 RCX: 0000000000000000\n[40243.618928] RDX: ffff8a773798dee0 RSI: 0000000000000000 RDI: 0000000000000000\n[40243.620158] RBP: ffffcc80c4d4b6a0 R08: 0000000000000000 R09: 0000000000000000\n[40243.621573] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8a75f3b58000\n[40243.622907] R13: ffff8a75f3b58000 R14: 0000000000000080 R15: 000000000000bffd\n[40243.624054] FS:  0000000000000000(0000) GS:ffff8a787d1b4000(0000) knlGS:0000000000000000\n[40243.625331] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[40243.626269] CR2: 000072f390b623c0 CR3: 000000011c02a003 CR4: 0000000000372ef0\n[40243.627408] Call Trace:\n[40243.627839]  \u003cTASK\u003e\n[40243.628188]  __prep_cap+0x3fd/0x4a0\n[40243.628789]  ? do_raw_spin_unlock+0x4e/0xe0\n[40243.629474]  ceph_check_caps+0x46a/0xc80\n[40243.630094]  ? __lock_acquire+0x4a2/0x2650\n[40243.630773]  ? find_held_lock+0x31/0x90\n[40243.631347]  ? handle_cap_grant+0x79f/0x1060\n[40243.632068]  ? lock_release+0xd9/0x300\n[40243.632696]  ? __mutex_unlock_slowpath+0x3e/0x340\n[40243.633429]  ? lock_release+0xd9/0x300\n[40243.634052]  handle_cap_grant+0xcf6/0x1060\n[40243.634745]  ceph_handle_caps+0x122b/0x2110\n[40243.635415]  mds_dispatch+0x5bd/0x2160\n[40243.636034]  ? ceph_con_process_message+0x65/0x190\n[40243.636828]  ? lock_release+0xd9/0x300\n[40243.637431]  ceph_con_process_message+0x7a/0x190\n[40243.638184]  ? kfree+0x311/0x4f0\n[40243.638749]  ? kfree+0x311/0x4f0\n[40243.639268]  process_message+0x16/0x1a0\n[40243.639915]  ? sg_free_table+0x39/0x90\n[40243.640572]  ceph_con_v2_try_read+0xf58/0x2120\n[40243.641255]  ? lock_acquire+0xc8/0x300\n[40243.641863]  ceph_con_workfn+0x151/0x820\n[40243.642493]  process_one_work+0x22f/0x630\n[40243.643093]  ? process_one_work+0x254/0x630\n[40243.643770]  worker_thread+0x1e2/0x400\n[40243.644332]  ? __pfx_worker_thread+0x10/0x10\n[40243.645020]  kthread+0x109/0x140\n[40243.645560]  ? __pfx_kthread+0x10/0x10\n[40243.646125]  ret_from_fork+0x3f8/0x480\n[40243.646752]  ? __pfx_kthread+0x10/0x10\n[40243.647316]  ? __pfx_kthread+0x10/0x10\n[40243.647919]  ret_from_fork_asm+0x1a/0x30\n[40243.648556]  \u003c/TASK\u003e\n[40243.648902] Modules linked in: overlay hctr2 libpolyval chacha libchacha adiantum libnh libpoly1305 essiv intel_rapl_msr intel_rapl_common intel_uncore_frequency_common skx_edac_common nfit kvm_intel kvm irqbypass joydev ghash_clmulni_intel aesni_intel rapl input_leds mac_hid psmouse vga16fb serio_raw vgastate floppy i2c_piix4 pata_acpi bochs qemu_fw_cfg i2c_smbus sch_fq_codel rbd dm_crypt msr parport_pc ppdev lp parport efi_pstore\n[40243.654766] ---[ end trace 0000000000000000 ]---\n\nCommit d93231a6bc8a (\"ceph: prevent a client from exceeding the MDS\nmaximum xattr size\") moved the required_blob_size computation to before\nthe __build_xattrs() call, introducing a race.\n\n__build_xattrs() releases and reacquires i_ceph_lock during execution.\nIn that window, handle_cap_grant() may update i_xattrs.blob with a\nnewer MDS-provided blob and bump i_xattrs.version.  When\n__bui\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52961",
          "url": "https://www.suse.com/security/cve/CVE-2026-52961"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269129 for CVE-2026-52961",
          "url": "https://bugzilla.suse.com/1269129"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-52961"
    },
    {
      "cve": "CVE-2026-52993",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52993"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix double-free in tipc_buf_append()\n\ntipc_msg_validate() can potentially reallocate the skb it is validating,\nfreeing the old one.  In tipc_buf_append(), it was being called with a\npointer to a local variable which was a copy of the caller\u0027s skb\npointer.\n\nIf the skb was reallocated and validation subsequently failed, the error\nhandling path would free the original skb pointer, which had already\nbeen freed, leading to double-free.\n\nFix this by checking if head now points to a newly allocated reassembled\nskb.  If it does, reassign *headbuf for later freeing operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52993",
          "url": "https://www.suse.com/security/cve/CVE-2026-52993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269193 for CVE-2026-52993",
          "url": "https://bugzilla.suse.com/1269193"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269194 for CVE-2026-52993",
          "url": "https://bugzilla.suse.com/1269194"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52993"
    },
    {
      "cve": "CVE-2026-53021",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53021"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: core: Fix integer overflow in UNMAP bounds check\n\nsbc_execute_unmap() checks LBA + range does not exceed the device capacity,\nbut does not guard against LBA + range wrapping around on 64-bit overflow.\n\nAdd an overflow check matching the pattern already used for WRITE_SAME in\nthe same file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53021",
          "url": "https://www.suse.com/security/cve/CVE-2026-53021"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269151 for CVE-2026-53021",
          "url": "https://bugzilla.suse.com/1269151"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53021"
    },
    {
      "cve": "CVE-2026-53035",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53035"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix af_unix iter deadlock\n\nbpf_iter_unix_seq_show() may deadlock when lock_sock_fast() takes the fast\npath and the iter prog attempts to update a sockmap. Which ends up spinning\nat sock_map_update_elem()\u0027s bh_lock_sock():\n\nWARNING: possible recursive locking detected\ntest_progs/1393 is trying to acquire lock:\nffff88811ec25f58 (slock-AF_UNIX){+...}-{3:3}, at: sock_map_update_elem+0xdb/0x1f0\n\nbut task is already holding lock:\nffff88811ec25f58 (slock-AF_UNIX){+...}-{3:3}, at: __lock_sock_fast+0x37/0xe0\n\nother info that might help us debug this:\n Possible unsafe locking scenario:\n\n       CPU0\n       ----\n  lock(slock-AF_UNIX);\n  lock(slock-AF_UNIX);\n\n *** DEADLOCK ***\n\n May be due to missing lock nesting notation\n\n4 locks held by test_progs/1393:\n #0: ffff88814b59c790 (\u0026p-\u003elock){+.+.}-{4:4}, at: bpf_seq_read+0x59/0x10d0\n #1: ffff88811ec25fd8 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: bpf_seq_read+0x42c/0x10d0\n #2: ffff88811ec25f58 (slock-AF_UNIX){+...}-{3:3}, at: __lock_sock_fast+0x37/0xe0\n #3: ffffffff85a6a7c0 (rcu_read_lock){....}-{1:3}, at: bpf_iter_run_prog+0x51d/0xb00\n\nCall Trace:\n dump_stack_lvl+0x5d/0x80\n print_deadlock_bug.cold+0xc0/0xce\n __lock_acquire+0x130f/0x2590\n lock_acquire+0x14e/0x2b0\n _raw_spin_lock+0x30/0x40\n sock_map_update_elem+0xdb/0x1f0\n bpf_prog_2d0075e5d9b721cd_dump_unix+0x55/0x4f4\n bpf_iter_run_prog+0x5b9/0xb00\n bpf_iter_unix_seq_show+0x1f7/0x2e0\n bpf_seq_read+0x42c/0x10d0\n vfs_read+0x171/0xb20\n ksys_read+0xff/0x200\n do_syscall_64+0x6b/0x3a0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53035",
          "url": "https://www.suse.com/security/cve/CVE-2026-53035"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269190 for CVE-2026-53035",
          "url": "https://bugzilla.suse.com/1269190"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53035"
    },
    {
      "cve": "CVE-2026-53036",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53036"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Fix off-by-one in check_imm signed range check\n\ncheck_imm(bits, imm) is used in the arm64 BPF JIT to verify that\na branch displacement (in arm64 instruction units) fits into the\nsigned N-bit immediate field of a B, B.cond or CBZ/CBNZ encoding\nbefore it is handed to the encoder. The macro currently tests for\n(imm \u003e 0 \u0026\u0026 imm \u003e\u003e bits) || (imm \u003c 0 \u0026\u0026 ~imm \u003e\u003e bits) which admits\nvalues in [-2^N, 2^N) - effectively a signed (N+1)-bit range. A\nsigned N-bit field only holds [-2^(N-1), 2^(N-1)), so the check\nadmits one extra bit of range on each side.\n\nIn particular, for check_imm19(), values in [2^18, 2^19) slip past\nthe check but do not fit into the 19-bit signed imm19 field of\nB.cond. aarch64_insn_encode_immediate() then masks the raw value\ninto the 19-bit field, setting bit 18 (the sign bit) and flipping\na forward branch into a backward one. Same class of issue exists\nfor check_imm26() and the B/BL encoding. Shift by (bits - 1)\ninstead of bits so the actual signed N-bit range is enforced.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53036",
          "url": "https://www.suse.com/security/cve/CVE-2026-53036"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269389 for CVE-2026-53036",
          "url": "https://bugzilla.suse.com/1269389"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270380 for CVE-2026-53036",
          "url": "https://bugzilla.suse.com/1270380"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53036"
    },
    {
      "cve": "CVE-2026-53039",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53039"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: validate group add input before caching\n\n[BUG]\nOCFS2_IOC_GROUP_ADD can trigger a BUG_ON in\nocfs2_set_new_buffer_uptodate():\n\nkernel BUG at fs/ocfs2/uptodate.c:509!\nOops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\nRIP: 0010:ocfs2_set_new_buffer_uptodate+0x194/0x1e0 fs/ocfs2/uptodate.c:509\nCode: ffffe88f 42b9fe4c 89e64889 dfe8b4df\nCall Trace:\n ocfs2_group_add+0x3f1/0x1510 fs/ocfs2/resize.c:507\n ocfs2_ioctl+0x309/0x6e0 fs/ocfs2/ioctl.c:887\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x197/0x1e0 fs/ioctl.c:583\n x64_sys_call+0x1144/0x26a0 arch/x86/include/generated/asm/syscalls_64.h:17\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x93/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\nRIP: 0033:0x7bbfb55a966d\n\n[CAUSE]\nocfs2_group_add() calls ocfs2_set_new_buffer_uptodate() on a\nuser-controlled group block before ocfs2_verify_group_and_input()\nvalidates that block number. That helper is only valid for newly\nallocated metadata and asserts that the block is not already present in\nthe chosen metadata cache. The code also uses INODE_CACHE(inode) even\nthough the group descriptor belongs to main_bm_inode and later journal\naccesses use that cache context instead.\n\n[FIX]\nValidate the on-disk group descriptor before caching it, then add it to\nthe metadata cache tracked by INODE_CACHE(main_bm_inode). Keep the\nvalidation failure path separate from the later cleanup path so we only\nremove the buffer from that cache after it has actually been inserted.\nThis keeps the group buffer lifetime consistent across validation,\njournaling, and cleanup.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53039",
          "url": "https://www.suse.com/security/cve/CVE-2026-53039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269392 for CVE-2026-53039",
          "url": "https://bugzilla.suse.com/1269392"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53039"
    },
    {
      "cve": "CVE-2026-53049",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53049"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: add some missing log locking\n\nFunction gfs2_logd() calls the log flushing functions gfs2_ail1_start(),\ngfs2_ail1_wait(), and gfs2_ail1_empty() without holding sdp-\u003esd_log_flush_lock,\nbut these functions require exclusion against concurrent transactions.\n\nTo fix that, add a non-locking __gfs2_log_flush() function.  Then, in\ngfs2_logd(), take sdp-\u003esd_log_flush_lock before calling the above mentioned log\nflushing functions and __gfs2_log_flush().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53049",
          "url": "https://www.suse.com/security/cve/CVE-2026-53049"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269646 for CVE-2026-53049",
          "url": "https://bugzilla.suse.com/1269646"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53049"
    },
    {
      "cve": "CVE-2026-53050",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53050"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: Fix race of dquot_scan_active() with quota deactivation\n\ndquot_scan_active() can race with quota deactivation in\nquota_release_workfn() like:\n\n  CPU0 (quota_release_workfn)         CPU1 (dquot_scan_active)\n  ==============================      ==============================\n  spin_lock(\u0026dq_list_lock);\n  list_replace_init(\n    \u0026releasing_dquots, \u0026rls_head);\n    /* dquot X on rls_head,\n       dq_count == 0,\n       DQ_ACTIVE_B still set */\n  spin_unlock(\u0026dq_list_lock);\n  synchronize_srcu(\u0026dquot_srcu);\n                                      spin_lock(\u0026dq_list_lock);\n                                      list_for_each_entry(dquot,\n                                          \u0026inuse_list, dq_inuse) {\n                                        /* finds dquot X */\n                                        dquot_active(X) -\u003e true\n                                        atomic_inc(\u0026X-\u003edq_count);\n                                      }\n                                      spin_unlock(\u0026dq_list_lock);\n  spin_lock(\u0026dq_list_lock);\n  dquot = list_first_entry(\u0026rls_head);\n  WARN_ON_ONCE(atomic_read(\u0026dquot-\u003edq_count));\n\nThe problem is not only a cosmetic one as under memory pressure the\ncaller of dquot_scan_active() can end up working on freed dquot.\n\nFix the problem by making sure the dquot is removed from releasing list\nwhen we acquire a reference to it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53050",
          "url": "https://www.suse.com/security/cve/CVE-2026-53050"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269188 for CVE-2026-53050",
          "url": "https://bugzilla.suse.com/1269188"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269189 for CVE-2026-53050",
          "url": "https://bugzilla.suse.com/1269189"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53050"
    },
    {
      "cve": "CVE-2026-53060",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53060"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache metadata: fix memory leak on metadata abort retry\n\nWhen failing to acquire the root_lock in dm_cache_metadata_abort because\nthe block_manager is read-only, the temporary block_manager created\noutside the root_lock is not properly released, causing a memory leak.\n\nReproduce steps:\n\nThis can be reproduced by reloading a new table while the metadata\nis read-only. While the second call to dm_cache_metadata_abort is\ncaused by lack of support for table preload in dm-cache, mentioned\nin commit 9b1cc9f251af (\"dm cache: share cache-metadata object across\ninactive and active DM tables\"), it exposes the memory leak in\ndm_cache_metadata_abort when the function is called multiple times.\nSpecifically, dm-cache fails to sync the new cache object\u0027s mode during\npreresume, creating the reproducer condition.\n\nThis issue could also occur through concurrent metadata_operation_failed\ncalls due to races in cache mode updates, but the table preload scenario\nbelow provides a reliable reproducer.\n\n1. Create a cache device with some faulty trailing metadata blocks\n\ndmsetup create cmeta \u003c\u003cEOF\n0 200 linear /dev/sdc 0\n200 7992 error\nEOF\ndmsetup create cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 262144 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 131072 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 1 writethrough smq 0\"\n\n2. Suspend and resume the cache to start a new metadata transaction and\n   trigger metadata io errors on the next metadata commit.\n\ndmsetup suspend cache\ndmsetup resume cache\n\n3. Write to the cache device to update metadata\n\nfio --filename=/dev/mapper/cache --name test --rw=randwrite --bs=4k \\\n--randrepeat=0 --direct=1 --size 64k\n\n4. Preload the same table\n\ndmsetup reload cache --table \"$(dmsetup table cache)\"\n\n5. Resume the new table. This triggers the memory leak.\n\ndmsetup suspend cache\ndmsetup resume cache\n\nkmemleak logs:\n\n\u003csnip\u003e\nunreferenced object 0xffff8880080c2010 (size 16):\n  comm \"dmsetup\", pid 132, jiffies 4294982580\n  hex dump (first 16 bytes):\n    00 38 b9 07 80 88 ff ff 6a 6b 6b 6b 6b 6b 6b a5 ...\n  backtrace (crc 3118f31c):\n    kmemleak_alloc+0x28/0x40\n    __kmalloc_cache_noprof+0x3d9/0x510\n    dm_block_manager_create+0x51/0x140\n    dm_cache_metadata_abort+0x85/0x320\n    metadata_operation_failed+0x103/0x1e0\n    cache_preresume+0xacd/0xe70\n    dm_table_resume_targets+0xd3/0x320\n    __dm_resume+0x1b/0xf0\n    dm_resume+0x127/0x170\n\u003csnip\u003e",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53060",
          "url": "https://www.suse.com/security/cve/CVE-2026-53060"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269164 for CVE-2026-53060",
          "url": "https://bugzilla.suse.com/1269164"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53060"
    },
    {
      "cve": "CVE-2026-53075",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53075"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nppp: require CAP_NET_ADMIN in target netns for unattached ioctls\n\n/dev/ppp open is currently authorized against file-\u003ef_cred-\u003euser_ns,\nwhile unattached administrative ioctls operate on current-\u003ensproxy-\u003enet_ns.\n\nAs a result, a local unprivileged user can create a new user namespace\nwith CLONE_NEWUSER, gain CAP_NET_ADMIN only in that new user namespace,\nand still issue PPPIOCNEWUNIT, PPPIOCATTACH, or PPPIOCATTCHAN against\nan inherited network namespace.\n\nRequire CAP_NET_ADMIN in the user namespace that owns the target network\nnamespace before handling unattached PPP administrative ioctls.\n\nThis preserves normal pppd operation in the network namespace it is\nactually privileged in, while rejecting the userns-only inherited-netns\ncase.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53075",
          "url": "https://www.suse.com/security/cve/CVE-2026-53075"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269690 for CVE-2026-53075",
          "url": "https://bugzilla.suse.com/1269690"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53075"
    },
    {
      "cve": "CVE-2026-53078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix same-register dst/src OOB read and pointer leak in sock_ops\n\nWhen a BPF sock_ops program accesses ctx fields with dst_reg == src_reg,\nthe SOCK_OPS_GET_SK() and SOCK_OPS_GET_FIELD() macros fail to zero the\ndestination register in the !fullsock / !locked_tcp_sock path.\n\nBoth macros borrow a temporary register to check is_fullsock /\nis_locked_tcp_sock when dst_reg == src_reg, because dst_reg holds the\nctx pointer. When the check is false (e.g., TCP_NEW_SYN_RECV state with\na request_sock), dst_reg should be zeroed but is not, leaving the stale\nctx pointer:\n\n - SOCK_OPS_GET_SK: dst_reg retains the ctx pointer, passes NULL checks\n   as PTR_TO_SOCKET_OR_NULL, and can be used as a bogus socket pointer,\n   leading to stack-out-of-bounds access in helpers like\n   bpf_skc_to_tcp6_sock().\n\n - SOCK_OPS_GET_FIELD: dst_reg retains the ctx pointer which the\n   verifier believes is a SCALAR_VALUE, leaking a kernel pointer.\n\nFix both macros by:\n - Changing JMP_A(1) to JMP_A(2) in the fullsock path to skip the\n   added instruction.\n - Adding BPF_MOV64_IMM(si-\u003edst_reg, 0) after the temp register\n   restore in the !fullsock path, placed after the restore because\n   dst_reg == src_reg means we need src_reg intact to read ctx-\u003etemp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53078",
          "url": "https://www.suse.com/security/cve/CVE-2026-53078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269700 for CVE-2026-53078",
          "url": "https://bugzilla.suse.com/1269700"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53078"
    },
    {
      "cve": "CVE-2026-53086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bcmgenet: fix racing timeout handler\n\nThe bcmgenet_timeout handler tries to take down all tx queues when\na single queue times out. This is over zealous and causes many race\nconditions with queues that are still chugging along. Instead lets\nonly restart the timed out queue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53086",
          "url": "https://www.suse.com/security/cve/CVE-2026-53086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269537 for CVE-2026-53086",
          "url": "https://bugzilla.suse.com/1269537"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53086"
    },
    {
      "cve": "CVE-2026-53090",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53090"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix ld_{abs,ind} failure path analysis in subprogs\n\nUsage of ld_{abs,ind} instructions got extended into subprogs some time\nago via commit 09b28d76eac4 (\"bpf: Add abnormal return checks.\"). These\nare only allowed in subprograms when the latter are BTF annotated and\nhave scalar return types.\n\nThe code generator in bpf_gen_ld_abs() has an abnormal exit path (r0=0 +\nexit) from legacy cBPF times. While the enforcement is on scalar return\ntypes, the verifier must also simulate the path of abnormal exit if the\npacket data load via ld_{abs,ind} failed.\n\nThis is currently not the case. Fix it by having the verifier simulate\nboth success and failure paths, and extend it in similar ways as we do\nfor tail calls. The success path (r0=unknown, continue to next insn) is\npushed onto stack for later validation and the r0=0 and return to the\ncaller is done on the fall-through side.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53090",
          "url": "https://www.suse.com/security/cve/CVE-2026-53090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269532 for CVE-2026-53090",
          "url": "https://bugzilla.suse.com/1269532"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53090"
    },
    {
      "cve": "CVE-2026-53139",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53139"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Skip CSD when it has zeroed workgroups\n\nA compute shader dispatch encodes its workgroup counts in the CFG0..CFG2\nregisters. Kicking off a dispatch with a zero count in any of the three\ndimensions is invalid. First, the hardware will process 0 as 65536,\nwhile the user-space driver exposes a maximum of 65535. Over that, a\nsubmission with a zeroed workgroup dimension should be a no-op.\n\nThese zeroed counts can reach the dispatch path through an indirect CSD\njob, whose workgroup counts are only known once the indirect buffer is\nread and may legitimately be zero, but such scenario should only result in\na no-op.\n\nOverwrite the indirect CSD job workgroup counts with the indirect BO\nones, even if they are zeroed, and don\u0027t submit the job to the hardware\nwhen any of the workgroup counts is zero, so the job completes immediately\ninstead of running the shader.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53139",
          "url": "https://www.suse.com/security/cve/CVE-2026-53139"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269262 for CVE-2026-53139",
          "url": "https://bugzilla.suse.com/1269262"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53139"
    },
    {
      "cve": "CVE-2026-53167",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53167"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios\n\nFUSE_NOTIFY_RETRIEVE must be limited to uptodate folios; !uptodate folios\ncan contain uninitialized data.\nSince FUSE_NOTIFY_RETRIEVE is intended to only return data that is already\nin the page cache and not wait for data from the FUSE daemon, treat\n!uptodate folios as if they weren\u0027t present.\n\nThis only has security impact on systems that don\u0027t enable automatic\nzero-initialization of all page allocations via\nCONFIG_INIT_ON_ALLOC_DEFAULT_ON or init_on_alloc=1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53167",
          "url": "https://www.suse.com/security/cve/CVE-2026-53167"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269768 for CVE-2026-53167",
          "url": "https://bugzilla.suse.com/1269768"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53167"
    },
    {
      "cve": "CVE-2026-53168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject fuse_notify() pagecache ops on directories\n\nThe operations FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE allow the\nFUSE daemon to actively write/read pagecache contents.\n\nFor directories with FOPEN_CACHE_DIR, the pagecache is used as\nkernel-internal cache storage, and userspace is not supposed to have\ndirect access to this cache - in particular, fuse_parse_cache() will hit\nWARN_ON() if the cache contains bogus data.\n\nReject FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE on anything other than\nregular files with -EINVAL.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53168",
          "url": "https://www.suse.com/security/cve/CVE-2026-53168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269645 for CVE-2026-53168",
          "url": "https://bugzilla.suse.com/1269645"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53168"
    },
    {
      "cve": "CVE-2026-53176",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53176"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN\n\nIn drivers/infiniband/ulp/isert/ib_isert.c, isert_login_recv_done()\ncomputes the login request payload length as wc-\u003ebyte_len minus\nISER_HEADERS_LEN with no lower bound, and login_req_len is a signed int.\nA remote iSER initiator can post a login Send work request carrying\nfewer than ISER_HEADERS_LEN (76) bytes, so the subtraction underflows\nand login_req_len becomes negative.\n\nisert_rx_login_req() then reads that negative length back into a signed\nint, takes size = min(rx_buflen, MAX_KEY_VALUE_PAIRS), and because the\nmin() is signed it keeps the negative value; the value is then passed as\nthe memcpy() length and sign-extended to a multi-gigabyte size_t. The\ncopy into the 8192-byte login-\u003ereq_buf runs far out of bounds and\nfaults, crashing the target node. The login phase precedes iSCSI\nauthentication, so no credentials are required to reach this path.\n\nReject any login PDU shorter than ISER_HEADERS_LEN before the\nsubtraction, mirroring the existing early return on a failed work\ncompletion, so login_req_len can never go negative. The upper bound was\nalready safe: a posted login buffer cannot deliver more than\nISER_RX_PAYLOAD_SIZE, so the difference stays at or below\nMAX_KEY_VALUE_PAIRS and the existing min() clamps it; only the missing\nlower bound needs to be added.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53176",
          "url": "https://www.suse.com/security/cve/CVE-2026-53176"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269710 for CVE-2026-53176",
          "url": "https://bugzilla.suse.com/1269710"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53176"
    },
    {
      "cve": "CVE-2026-53178",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53178"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction\n\nAdd guards to ensure ie_length is large enough before subtracting\nfixed IE offsets to prevent unsigned integer underflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53178",
          "url": "https://www.suse.com/security/cve/CVE-2026-53178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269795 for CVE-2026-53178",
          "url": "https://bugzilla.suse.com/1269795"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270373 for CVE-2026-53178",
          "url": "https://bugzilla.suse.com/1270373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53178"
    },
    {
      "cve": "CVE-2026-53181",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53181"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/vmci: fix sk_ack_backlog leak on failed handshake\n\nWhen vmci_transport_recv_connecting_server() returns an error,\nvmci_transport_recv_listen() calls vsock_remove_pending() but never\ncalls sk_acceptq_removed(). This leaves sk_ack_backlog incremented\npermanently.\n\nRepeated handshake failures (malformed packets, queue pair alloc\nfailure, event subscribe failure) cause sk_ack_backlog to climb\ntoward sk_max_ack_backlog. Once it reaches the limit the listener\npermanently refuses all new connections with -ECONNREFUSED, a\nsilent denial of service requiring a process restart to recover.\n\nThe two existing sk_acceptq_removed() calls in af_vsock.c do not\ncover this path: line 764 checks vsock_is_pending() which returns\nfalse after vsock_remove_pending(), and line 1889 is only reached\non successful accept().\n\nFix by balancing sk_acceptq_added() with sk_acceptq_removed() on\nthe error path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53181",
          "url": "https://www.suse.com/security/cve/CVE-2026-53181"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269886 for CVE-2026-53181",
          "url": "https://bugzilla.suse.com/1269886"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53181"
    },
    {
      "cve": "CVE-2026-53196",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53196"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: io_ti: fix heap overflow in get_manuf_info()\n\nget_manuf_info() reads le16_to_cpu(rom_desc-\u003eSize) bytes from the\ndevice I2C EEPROM into a buffer allocated with kmalloc_obj(), which\nis sizeof(struct edge_ti_manuf_descriptor) = 10 bytes.\n\nThe Size field comes from the device and is only validated (in\ncheck_i2c_image()) to make sure the descriptor fits within\nTI_MAX_I2C_SIZE (16384 bytes), not against the destination buffer size.\nA malicious USB device can therefore set Size to any value up to 16377,\ncausing a heap overflow of up to 16367 bytes when plugged into a host\nrunning this driver.\n\nvalid_csum() is called after read_rom() and also iterates\nbuffer[0..Size-1], compounding the out-of-bounds access.\n\nFix by rejecting descriptors with unexpected length before calling\nread_rom().\n\n[ johan: amend commit message; also check for short descriptors ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53196",
          "url": "https://www.suse.com/security/cve/CVE-2026-53196"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269986 for CVE-2026-53196",
          "url": "https://bugzilla.suse.com/1269986"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53196"
    },
    {
      "cve": "CVE-2026-53215",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53215"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mvpp2: refill RX buffers before XDP or skb use\n\nThe RX error path returns the current descriptor buffer to the hardware\nBM pool. That is only valid while the driver still owns the buffer.\n\nmvpp2_rx_refill() can fail after the current buffer has been handed to\nXDP or attached to an skb. In those cases mvpp2_run_xdp() may have\nrecycled, redirected, or queued the page for XDP_TX, and an skb free also\nretires the data buffer. Returning such a buffer to BM lets hardware DMA\ninto memory that is no longer owned by the RX ring.\n\nRefill the BM pool before handing the current buffer to XDP or to the\nskb. If the allocation fails there, drop the packet and return the\nstill-owned current buffer to BM, preserving the pool depth. Once the\nrefill succeeds, later local drops retire/free the current buffer instead\nof returning it to BM.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53215",
          "url": "https://www.suse.com/security/cve/CVE-2026-53215"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269680 for CVE-2026-53215",
          "url": "https://bugzilla.suse.com/1269680"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53215"
    },
    {
      "cve": "CVE-2026-53216",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53216"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mvpp2: limit XDP frame size to the RX buffer\n\nmvpp2 has short and long BM pools, and short pool buffers can be smaller\nthan PAGE_SIZE. The XDP path nevertheless initializes every xdp_buff with\nPAGE_SIZE as frame size.\n\nXDP helpers use frame_sz to validate tail growth and to derive the hard\nend of the data area. Advertising PAGE_SIZE for short buffers can let\nbpf_xdp_adjust_tail() grow a packet past the real allocation, corrupting\nmemory or later tripping skb tailroom checks.\n\nInitialize the XDP buffer with bm_pool-\u003efrag_size so XDP tailroom matches\nthe actual buffer backing the packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53216",
          "url": "https://www.suse.com/security/cve/CVE-2026-53216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269587 for CVE-2026-53216",
          "url": "https://bugzilla.suse.com/1269587"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53216"
    },
    {
      "cve": "CVE-2026-53217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mvpp2: sync RX data at the hardware packet offset\n\nmvpp2 programs the RX queue packet offset, so hardware writes received\ndata at dma_addr + MVPP2_SKB_HEADROOM. The current CPU sync starts at\ndma_addr and only covers rx_bytes + MVPP2_MH_SIZE bytes, which syncs the\nunused headroom and misses the same number of bytes at the packet tail.\n\nOn non-coherent DMA systems this can leave the CPU reading stale cache\ncontents for the end of the received frame.\n\nUse dma_sync_single_range_for_cpu() with MVPP2_SKB_HEADROOM as the range\noffset so the sync covers the Marvell header and packet data actually\nwritten by hardware.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53217",
          "url": "https://www.suse.com/security/cve/CVE-2026-53217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269989 for CVE-2026-53217",
          "url": "https://bugzilla.suse.com/1269989"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53217"
    },
    {
      "cve": "CVE-2026-53229",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53229"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure\n\nIn the XSK branch of mlx5e_xmit_xdp_buff(), when sq-\u003exmit_xdp_frame()\nreturns false (e.g. XDPSQ is full), the function returns without\nunmapping the DMA address or freeing the xdp_frame allocated by\nxdp_convert_zc_to_xdp_frame(). The xdpi_fifo push only happens on\nsuccess, so the completion path cannot recover these entries.\n\nWith CONFIG_DMA_API_DEBUG=y, the leak surfaces on driver unbind:\n\n  DMA-API: pci 0000:08:00.0: device driver has pending DMA\n  allocations while released from device [count=1116]\n  One of leaked entries details: [device address=0x000000010ffd7028]\n  [size=1534 bytes] [mapped with DMA_TO_DEVICE] [mapped as phy]\n  WARNING: kernel/dma/debug.c:881 at dma_debug_device_change+0x127/0x180\n  ...\n  DMA-API: Mapped at:\n   debug_dma_map_phys+0x4b/0xd0\n   dma_map_phys+0xfd/0x2d0\n   mlx5e_xdp_handle+0x5ae/0xac0 [mlx5_core]\n   mlx5e_xsk_skb_from_cqe_mpwrq_linear+0xc4/0x170 [mlx5_core]\n   mlx5e_handle_rx_cqe_mpwrq+0xc1/0x290 [mlx5_core]\n\nAdd the missing unmap + xdp_return_frame, matching the cleanup already\ndone in mlx5e_xdp_xmit(). has_frags is rejected earlier in this branch,\nso no per-frag unmap is needed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53229",
          "url": "https://www.suse.com/security/cve/CVE-2026-53229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269691 for CVE-2026-53229",
          "url": "https://bugzilla.suse.com/1269691"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53229"
    },
    {
      "cve": "CVE-2026-53245",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53245"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr\n\nIn mrp_pdu_parse_vecattr(), vector attribute events are encoded three\nper byte and valen tracks the number of events left to process.\n\nThe parser decrements valen after processing the first and second events\nfrom each event byte, but not after processing the third one. When valen\nis exactly a multiple of three, the loop continues after the last valid\nevent and consumes the next byte as a new event byte, applying a\nspurious event to the MRP applicant state.\n\nAdditionally, when valen is zero the parser unconditionally consumes\nattrlen bytes as FirstValue and advances the offset, even though per\nIEEE 802.1ak a VectorAttribute with only a LeaveAllEvent has valen of\nzero and no FirstValue or Vector fields. This corrupts the offset for\nsubsequent PDU parsing.\n\nAlso, when valen exceeds three the loop crosses byte boundaries but\nthe attribute value is not incremented between the last event of one\nbyte and the first event of the next. This causes the first event of\nthe next byte to use the same attribute value as the third event\nrather than the next consecutive value.\n\nDecrement valen after processing the third event, skip FirstValue\nconsumption when valen is zero, and increment the attribute value at\nthe end of each loop iteration.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53245",
          "url": "https://www.suse.com/security/cve/CVE-2026-53245"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269675 for CVE-2026-53245",
          "url": "https://bugzilla.suse.com/1269675"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53245"
    },
    {
      "cve": "CVE-2026-53249",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53249"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: restrict IPOPT_SSRR and IPOPT_LSRR options\n\nThis patch restricts setting Loose Source and Record Route (LSRR)\nand Strict Source and Record Route (SSRR) IP options to users\nwith CAP_NET_RAW capability.\n\nThis prevents unprivileged applications from forcing packets to route\nthrough attacker-controlled nodes to leak TCP ISN and possibly other\nprotocol information.\n\nWhile LSRR and SSRR are commonly filtered in many network environments,\nthey may still be supported and forwarded along some network paths.\n\nRFC 7126 (Recommendations on Filtering of IPv4 Packets Containing\nIPv4 Options) recommend to drop these options in 4.3 and 4.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53249",
          "url": "https://www.suse.com/security/cve/CVE-2026-53249"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269992 for CVE-2026-53249",
          "url": "https://bugzilla.suse.com/1269992"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53249"
    },
    {
      "cve": "CVE-2026-53256",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53256"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()\n\nrfcomm_get_sock_by_channel() scans rfcomm_sk_list under the list lock,\nbut returns the selected listener after dropping that lock without\ntaking a reference. rfcomm_connect_ind() then locks the listener,\nqueues a child socket on it, and may notify it after unlocking it.\n\nThe buggy scenario involves two paths, with each column showing the\norder within that path:\n\nrfcomm_connect_ind():            listener close:\n  1. Find parent in              1. close() enters\n     rfcomm_get_sock_by_channel()   rfcomm_sock_release().\n  2. Drop rfcomm_sk_list.lock    2. rfcomm_sock_shutdown()\n     without pinning parent.        closes the listener.\n  3. Call lock_sock(parent) and  3. rfcomm_sock_kill()\n     bt_accept_enqueue(parent,      unlinks and puts parent.\n     sk, true).\n  4. Read parent flags and may   4. parent can be freed.\n     call sk_state_change().\n\nIf close wins the race, parent can be freed before\nrfcomm_connect_ind() reaches lock_sock(), bt_accept_enqueue(), or the\ndeferred-setup callback.\n\nTake a reference on the listener before leaving rfcomm_sk_list.lock.\nAfter lock_sock() succeeds, recheck that it is still in BT_LISTEN\nbefore queueing a child, cache the deferred-setup bit while the parent\nis locked, and drop the reference after the last parent use.\n\nKASAN reported a slab-use-after-free in lock_sock_nested() from\nrfcomm_connect_ind(), with the freeing stack going through\nrfcomm_sock_kill() and rfcomm_sock_release().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53256",
          "url": "https://www.suse.com/security/cve/CVE-2026-53256"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269993 for CVE-2026-53256",
          "url": "https://bugzilla.suse.com/1269993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270371 for CVE-2026-53256",
          "url": "https://bugzilla.suse.com/1270371"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53256"
    },
    {
      "cve": "CVE-2026-53258",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53258"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: fix leak if split 6 GHz scanning fails\n\nrdev-\u003eint_scan_req is leaked if cfg80211_scan() fails.  Note that it\u0027s\nsupposed to be released at ___cfg80211_scan_done() but this doesn\u0027t happen\nas rdev-\u003escan_req is NULL at that point, too, leading to the early return\nfrom the freeing function.\n\nunreferenced object 0xffff8881161d0800 (size 512):\n  comm \"wpa_supplicant\", pid 379, jiffies 4294749765\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    00 00 00 00 00 00 00 00 f0 81 13 16 81 88 ff ff  ................\n  backtrace (crc c867fdb6):\n    kmemleak_alloc+0x89/0x90\n    __kmalloc_noprof+0x2fd/0x410\n    cfg80211_scan+0x133/0x730\n    nl80211_trigger_scan+0xc69/0x1cc0\n    genl_family_rcv_msg_doit+0x204/0x2f0\n    genl_rcv_msg+0x431/0x6b0\n    netlink_rcv_skb+0x143/0x3f0\n    genl_rcv+0x27/0x40\n    netlink_unicast+0x4f6/0x820\n    netlink_sendmsg+0x797/0xce0\n    __sock_sendmsg+0xc4/0x160\n    ____sys_sendmsg+0x5e4/0x890\n    ___sys_sendmsg+0xf8/0x180\n    __sys_sendmsg+0x136/0x1e0\n    __x64_sys_sendmsg+0x76/0xc0\n    x64_sys_call+0x13f0/0x17d0\n\nFound by Linux Verification Center (linuxtesting.org).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53258",
          "url": "https://www.suse.com/security/cve/CVE-2026-53258"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269230 for CVE-2026-53258",
          "url": "https://bugzilla.suse.com/1269230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53258"
    },
    {
      "cve": "CVE-2026-53274",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53274"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS\n\nA logic flaw in __smc_setsockopt() allows a local unprivileged user to\ncause a Denial of Service (DoS) by holding the socket lock indefinitely.\n\nThe function __smc_setsockopt() calls copy_from_sockptr() while holding\nlock_sock(sk). By passing a userfaultfd-monitored memory page (or\nFUSE-backed memory on systems where unprivileged userfaultfd is disabled)\nas the optval, an attacker can halt execution during the copy operation,\nkeeping the lock held.\n\nCombined with asynchronous tear-down operations like shutdown(), this\nexhausts the kernel wq (kworkers) and triggers the hung task watchdog.\n\n[  240.123456] INFO: task kworker/u8:2 blocked for more than 120 seconds.\n[  240.123489] Call Trace:\n[  240.123501]  smc_shutdown+...\n[  240.123512]  lock_sock_nested+...\n\nThis patch moves the user-space copy outside the lock_sock() critical\nsection to prevent the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53274",
          "url": "https://www.suse.com/security/cve/CVE-2026-53274"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269651 for CVE-2026-53274",
          "url": "https://bugzilla.suse.com/1269651"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53274"
    },
    {
      "cve": "CVE-2026-53285",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53285"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED\n\n[Why]\ndcn32_validate_bandwidth() wraps dcn32_internal_validate_bw() with\nDC_FP_START()/DC_FP_END(). In x86 non-RT, DC_FP_START takes fpregs_lock(),\nwhich disables local softirqs.\n\nThe DML1 path through dcn32_enable_phantom_plane() calls kvzalloc() to\nallocate ~335 KiB for dc_plane_state. This triggers the vmalloc path,\nwhich calls BUG_ON(in_interrupt()) because it\u0027s invoked within the\nFPU-enabled (softirq disabled) region, leading to a kernel crash.\n\n[How]\nWrap the dc_state_create_phantom_plane() call with the\nDC_RUN_WITH_PREEMPTION_ENABLED() macro to allow preemption during\nthis memory allocation.\n\n(cherry picked from commit 885ccbef7b94a8b38f69c4211c679021aa27ad11)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53285",
          "url": "https://www.suse.com/security/cve/CVE-2026-53285"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269527 for CVE-2026-53285",
          "url": "https://bugzilla.suse.com/1269527"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53285"
    },
    {
      "cve": "CVE-2026-53306",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53306"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: hvc_iucv: fix off-by-one in number of supported devices\n\nMAX_HVC_IUCV_LINES == HVC_ALLOC_TTY_ADAPTERS == 8.\nThis is the number of entries in:\n  static struct hvc_iucv_private *hvc_iucv_table[MAX_HVC_IUCV_LINES];\n\nSometimes hvc_iucv_table[] is limited by:\n(a)\tif (num \u003e hvc_iucv_devices) // for error detection\nor\n(b)\tfor (i = 0; i \u003c hvc_iucv_devices; i++) // in 2 places\n(so these 2 don\u0027t agree; second one appears to be correct to me.)\n\nhvc_iucv_devices can be 0..8. This is a counter.\n(c)\tif (hvc_iucv_devices \u003e MAX_HVC_IUCV_LINES)\n\nIf hvc_iucv_devices == 8, (a) allows the code to access hvc_iucv_table[8].\nOops.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53306",
          "url": "https://www.suse.com/security/cve/CVE-2026-53306"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269814 for CVE-2026-53306",
          "url": "https://bugzilla.suse.com/1269814"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53306"
    },
    {
      "cve": "CVE-2026-53357",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53357"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()\n\nbt_accept_dequeue() unlinks a not-yet-accepted child from the parent\naccept queue and release_sock()s it before returning, so the returned\nsk has no caller reference and is unlocked.\n\nl2cap_sock_cleanup_listen() walks these children on listening-socket\nclose.  A concurrent HCI disconnect drives hci_rx_work -\u003e\nl2cap_conn_del() which runs l2cap_chan_del() + l2cap_sock_kill() and\nfrees the child sk and its l2cap_chan; cleanup_listen() then uses both:\n\n  BUG: KASAN: slab-use-after-free in l2cap_sock_kill\n    l2cap_sock_kill / l2cap_sock_cleanup_listen / __x64_sys_close\n  Freed by: l2cap_conn_del -\u003e l2cap_sock_close_cb -\u003e l2cap_sock_kill\n\nThis is distinct from the two fixes already in this area: commit\ne83f5e24da741 (\"Bluetooth: serialize accept_q access\") serialises the\naccept_q list/poll and takes temporary refs inside bt_accept_dequeue(),\nand CVE-2025-39860 serialises the userspace close()/accept() race by\ncalling cleanup_listen() under lock_sock() in l2cap_sock_release().\nNeither covers l2cap_conn_del() running from hci_rx_work, so this UAF\nstill reproduces on current bluetooth/master.\n\nTake the reference at the source: bt_accept_dequeue() does sock_hold()\nwhile sk is still locked, before release_sock(); callers sock_put().\ncleanup_listen() pins the chan with l2cap_chan_hold_unless_zero() under\na brief child sk lock (serialising vs l2cap_sock_teardown_cb()), drops\nit before l2cap_chan_lock(), and skips a duplicate l2cap_sock_kill() on\nSOCK_DEAD.  conn-\u003elock is not taken here: cleanup_listen() runs under\nthe parent sk lock and that would invert\nconn-\u003elock -\u003e chan-\u003elock -\u003e sk_lock (lockdep).\n\nKASAN/SMP: an unprivileged listen/close vs HCI-disconnect race produced\n12 use-after-free reports per run before this change; 0, and no lockdep\nreport, over 1600+ raced iterations after it on bluetooth/master.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53357",
          "url": "https://www.suse.com/security/cve/CVE-2026-53357"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270257 for CVE-2026-53357",
          "url": "https://bugzilla.suse.com/1270257"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270259 for CVE-2026-53357",
          "url": "https://bugzilla.suse.com/1270259"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53357"
    },
    {
      "cve": "CVE-2026-53359",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53359"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Fix shadow paging use-after-free due to unexpected role\n\nCommit 0cb2af2ea66ad (\"KVM: x86: Fix shadow paging use-after-free due\nto unexpected GFN\") fixed a shadow paging mismatch between stored and\ncomputed GFNs; the bug could be triggered by changing a PDE mapping from\noutside the guest, and then deleting a memslot.  The rmap_remove()\ncall would miss entries created after the PDE change because the GFN\nof the leaf SPTE does not match the GFN of the struct kvm_mmu_page.\n\nA similar hole however remains if the modified PDE points to a non-leaf\npage.  In this case the gfn can be made to match, but the role does not\nmatch: the original large 2MB page creates a kvm_mmu_page with direct=1,\nwhile the new 4KB needs a kvm_mmu_page with direct=0.  However,\nkvm_mmu_get_child_sp() does not compare the role, and therefore reuses\nthe page.\n\nThe next step is installing a leaf (4KB) SPTE on the new path which\nrecords an rmap entry under the gfn resolved by the walk.  But when\nthat child is zapped its parent kvm_mmu_page has direct=1 and\nkvm_mmu_page_get_gfn() computes the gfn for the 4KB page as\nsp-\u003egfn + index instead of using sp-\u003eshadowed_translation[] (or sp-\u003egfns[]\nin older kernels).  It therefore fails to remove the recorded entry.\n\nWhen the memslot is dropped the shadow page is freed but the rmap\nentry survives, as in the scenario that was already fixed.  Code that\nlater walks that gfn (dirty logging, MMU notifier invalidation, and\nso on) dereferences an sptep that lies in the freed page, causing the\nuse-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53359",
          "url": "https://www.suse.com/security/cve/CVE-2026-53359"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270059 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1270059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270060 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1270060"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271478 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1271478"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273231 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1273231"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53359"
    },
    {
      "cve": "CVE-2026-53362",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53362"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: account for fraggap on the paged allocation path\n\nIn __ip6_append_data(), when the paged-allocation branch is taken\n(MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are\ncomputed as\n\n\talloclen = fragheaderlen + transhdrlen;\n\tpagedlen = datalen - transhdrlen;\n\ndatalen already includes fraggap (datalen = length + fraggap). When\nfraggap is non-zero, this is not the first skb and transhdrlen is zero.\nThe fraggap bytes carried over from the previous skb are copied just past\nthe fragment headers in the new skb\u0027s linear area. The linear area is\ntherefore undersized by fraggap bytes while pagedlen is overstated by the\nsame amount, and the copy writes past skb-\u003eend into the trailing\nskb_shared_info.\n\nAn unprivileged user can trigger this via a UDPv6 socket using\nMSG_MORE together with MSG_SPLICE_PAGES.\n\nThe bad accounting was introduced by commit 773ba4fe9104 (\"ipv6:\navoid partial copy for zc\"). Before commit ce650a166335 (\"udp6: Fix\n__ip6_append_data()\u0027s handling of MSG_SPLICE_PAGES\"), the negative\ncopy value caused -EINVAL to be returned. That later commit allowed\nMSG_SPLICE_PAGES to proceed in this case, making the corruption\ntriggerable.\n\nThe non-paged branch sets alloclen to fraglen, which already accounts\nfor fraggap because datalen does. Bring the paged branch in line by\nadding fraggap to alloclen and subtracting it from pagedlen.\n\nAfter this adjustment, copy no longer collapses to -fraggap on the\npaged path, so remove the stale comment describing that old arithmetic.\nSince a negative copy is no longer expected for a valid MSG_SPLICE_PAGES\ncase, remove the MSG_SPLICE_PAGES exception from the negative copy check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53362",
          "url": "https://www.suse.com/security/cve/CVE-2026-53362"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269493 for CVE-2026-53362",
          "url": "https://bugzilla.suse.com/1269493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269495 for CVE-2026-53362",
          "url": "https://bugzilla.suse.com/1269495"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53362"
    },
    {
      "cve": "CVE-2026-53366",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53366"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: account for fraggap on the paged allocation path\n\nIn __ip_append_data(), when the paged-allocation branch is taken,\nalloclen and pagedlen are computed as\n\n\talloclen = fragheaderlen + transhdrlen;\n\tpagedlen = datalen - transhdrlen;\n\ndatalen already includes fraggap, but the fraggap bytes carried over\nfrom the previous skb are copied into the new skb\u0027s linear area at\noffset transhdrlen by the subsequent skb_copy_and_csum_bits(). The\nlinear area is therefore undersized by fraggap bytes while pagedlen is\noverstated by the same amount.\n\nThe non-paged branch sets alloclen to fraglen, which already accounts\nfor fraggap because datalen does. Bring the paged branch in line by\nadding fraggap to alloclen and subtracting it from pagedlen.\n\nAfter this adjustment, copy no longer collapses to -fraggap on the\npaged path, so remove the stale comment describing that old arithmetic.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
          "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
          "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
          "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53366",
          "url": "https://www.suse.com/security/cve/CVE-2026-53366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271366 for CVE-2026-53366",
          "url": "https://bugzilla.suse.com/1271366"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271370 for CVE-2026-53366",
          "url": "https://bugzilla.suse.com/1271370"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.aarch64",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.s390x",
            "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-devel-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-50.1.x86_64",
            "SUSE Linux Micro 6.0:kernel-macros-6.4.0-50.2.noarch",
            "SUSE Linux Micro 6.0:kernel-source-6.4.0-50.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-22T13:52:17Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53366"
    }
  ]
}