RHSA-2026:21556
Vulnerability from csaf_opensuse - Published: 2026-05-28 00:00 - Updated: 2026-09-16 18:19Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:21556.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:21556.
Patchnames: RHSA-2026:21556
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.6 (Medium)
Affected products
Recommended
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
8.8 (High)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
41 products, the same list as for
CVE-2025-38653
Threats
Impact
moderate
References
74 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:21556.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:21556.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:21556",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_21556.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:21556",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-June/006056.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:21556",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-June/006056.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38653 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68183 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68366 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68724 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71089 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71089/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23392 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23455 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23455/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31408 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31684 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31684/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31685 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31709 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43020 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43023 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43051 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43110 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43158 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43190 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43303 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46195 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46195/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:19:38Z",
"generator": {
"date": "2026-05-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:21556",
"initial_release_date": "2026-05-28T00:00:00Z",
"revision_history": [
{
"date": "2026-05-28T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:46:52Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:19:38Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"product": {
"name": "kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"product_id": "kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-687.12.1.el9_8?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"product": {
"name": "kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"product_id": "kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-687.12.1.el9_8?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-687.12.1.el9_8?arch=x86_64\u0026upstream=kernel-debug-5.14.0-687.12.1.el9_8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-687.12.1.el9_8?arch=x86_64\u0026upstream=kernel-debug-5.14.0-687.12.1.el9_8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-687.12.1.el9_8?arch=x86_64\u0026upstream=kernel-source-5.14.0-687.12.1.el9_8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt@5.14.0-687.12.1.el9_8?arch=x86_64\u0026upstream=kernel-source-rt-5.14.0-687.12.1.el9_8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-debug@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-debug-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-debug-devel@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-debug-modules@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-debug-modules-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-debug-modules-extra@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-rt-devel@5.14.0-687.12.1.el9_8?arch=x86_64\u0026upstream=kernel-source-rt-5.14.0-687.12.1.el9_8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-modules@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-modules-core@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-rt-modules-extra@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt-addons@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "libperf-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "libperf-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "perf-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "perf-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-687.12.1.el9_8?arch=x86_64\u0026upstream=perf-5.14.0-687.12.1.el9_8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-687.12.1.el9_8?arch=x86_64\u0026upstream=perf-5.14.0-687.12.1.el9_8.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "rtla-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "rtla-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-5.14.0-687.12.1.el9_8.x86_64",
"product": {
"name": "rv-5.14.0-687.12.1.el9_8.x86_64",
"product_id": "rv-5.14.0-687.12.1.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-687.12.1.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch"
},
"product_reference": "kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-5.14.0-687.12.1.el9_8.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch"
},
"product_reference": "kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "libperf-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "perf-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "rtla-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-5.14.0-687.12.1.el9_8.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
},
"product_reference": "rv-5.14.0-687.12.1.el9_8.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-38653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nproc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al\n\nCheck pde-\u003eproc_ops-\u003eproc_lseek directly may cause UAF in rmmod scenario. \nIt\u0027s a gap in proc_reg_open() after commit 654b33ada4ab(\"proc: fix UAF in\nproc_get_inode()\"). Followed by AI Viro\u0027s suggestion, fix it in same\nmanner.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38653",
"url": "https://www.suse.com/security/cve/CVE-2025-38653"
},
{
"category": "external",
"summary": "SUSE Bug 1248630 for CVE-2025-38653",
"url": "https://bugzilla.suse.com/1248630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38653"
},
{
"cve": "CVE-2025-68183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68183"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: don\u0027t clear IMA_DIGSIG flag when setting or removing non-IMA xattr\n\nCurrently when both IMA and EVM are in fix mode, the IMA signature will\nbe reset to IMA hash if a program first stores IMA signature in\nsecurity.ima and then writes/removes some other security xattr for the\nfile.\n\nFor example, on Fedora, after booting the kernel with \"ima_appraise=fix\nevm=fix ima_policy=appraise_tcb\" and installing rpm-plugin-ima,\ninstalling/reinstalling a package will not make good reference IMA\nsignature generated. Instead IMA hash is generated,\n\n # getfattr -m - -d -e hex /usr/bin/bash\n # file: usr/bin/bash\n security.ima=0x0404...\n\nThis happens because when setting security.selinux, the IMA_DIGSIG flag\nthat had been set early was cleared. As a result, IMA hash is generated\nwhen the file is closed.\n\nSimilarly, IMA signature can be cleared on file close after removing\nsecurity xattr like security.evm or setting/removing ACL.\n\nPrevent replacing the IMA file signature with a file hash, by preventing\nthe IMA_DIGSIG flag from being reset.\n\nHere\u0027s a minimal C reproducer which sets security.selinux as the last\nstep which can also replaced by removing security.evm or setting ACL,\n\n #include \u003cstdio.h\u003e\n #include \u003csys/xattr.h\u003e\n #include \u003cfcntl.h\u003e\n #include \u003cunistd.h\u003e\n #include \u003cstring.h\u003e\n #include \u003cstdlib.h\u003e\n\n int main() {\n const char* file_path = \"/usr/sbin/test_binary\";\n const char* hex_string = \"030204d33204490066306402304\";\n int length = strlen(hex_string);\n char* ima_attr_value;\n int fd;\n\n fd = open(file_path, O_WRONLY|O_CREAT|O_EXCL, 0644);\n if (fd == -1) {\n perror(\"Error opening file\");\n return 1;\n }\n\n ima_attr_value = (char*)malloc(length / 2 );\n for (int i = 0, j = 0; i \u003c length; i += 2, j++) {\n sscanf(hex_string + i, \"%2hhx\", \u0026ima_attr_value[j]);\n }\n\n if (fsetxattr(fd, \"security.ima\", ima_attr_value, length/2, 0) == -1) {\n perror(\"Error setting extended attribute\");\n close(fd);\n return 1;\n }\n\n const char* selinux_value= \"system_u:object_r:bin_t:s0\";\n if (fsetxattr(fd, \"security.selinux\", selinux_value, strlen(selinux_value), 0) == -1) {\n perror(\"Error setting extended attribute\");\n close(fd);\n return 1;\n }\n\n close(fd);\n\n return 0;\n }",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68183",
"url": "https://www.suse.com/security/cve/CVE-2025-68183"
},
{
"category": "external",
"summary": "SUSE Bug 1255251 for CVE-2025-68183",
"url": "https://bugzilla.suse.com/1255251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68183"
},
{
"cve": "CVE-2025-68366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68366"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: defer config unlock in nbd_genl_connect\n\nThere is one use-after-free warning when running NBD_CMD_CONNECT and\nNBD_CLEAR_SOCK:\n\nnbd_genl_connect\n nbd_alloc_and_init_config // config_refs=1\n nbd_start_device // config_refs=2\n set NBD_RT_HAS_CONFIG_REF\t\t\topen nbd // config_refs=3\n recv_work done // config_refs=2\n\t\t\t\t\t\tNBD_CLEAR_SOCK // config_refs=1\n\t\t\t\t\t\tclose nbd // config_refs=0\n refcount_inc -\u003e uaf\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 24 PID: 1014 at lib/refcount.c:25 refcount_warn_saturate+0x12e/0x290\n nbd_genl_connect+0x16d0/0x1ab0\n genl_family_rcv_msg_doit+0x1f3/0x310\n genl_rcv_msg+0x44a/0x790\n\nThe issue can be easily reproduced by adding a small delay before\nrefcount_inc(\u0026nbd-\u003econfig_refs) in nbd_genl_connect():\n\n mutex_unlock(\u0026nbd-\u003econfig_lock);\n if (!ret) {\n set_bit(NBD_RT_HAS_CONFIG_REF, \u0026config-\u003eruntime_flags);\n+ printk(\"before sleep\\n\");\n+ mdelay(5 * 1000);\n+ printk(\"after sleep\\n\");\n refcount_inc(\u0026nbd-\u003econfig_refs);\n nbd_connect_reply(info, nbd-\u003eindex);\n }",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68366",
"url": "https://www.suse.com/security/cve/CVE-2025-68366"
},
{
"category": "external",
"summary": "SUSE Bug 1255622 for CVE-2025-68366",
"url": "https://bugzilla.suse.com/1255622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68366"
},
{
"cve": "CVE-2025-68724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68724"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id\n\nUse check_add_overflow() to guard against potential integer overflows\nwhen adding the binary blob lengths and the size of an asymmetric_key_id\nstructure and return ERR_PTR(-EOVERFLOW) accordingly. This prevents a\npossible buffer overflow when copying data from potentially malicious\nX.509 certificate fields that can be arbitrarily large, such as ASN.1\nINTEGER serial numbers, issuer names, etc.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68724",
"url": "https://www.suse.com/security/cve/CVE-2025-68724"
},
{
"category": "external",
"summary": "SUSE Bug 1255550 for CVE-2025-68724",
"url": "https://bugzilla.suse.com/1255550"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68724"
},
{
"cve": "CVE-2025-71089",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71089"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu: disable SVA when CONFIG_X86 is set\n\nPatch series \"Fix stale IOTLB entries for kernel address space\", v7.\n\nThis proposes a fix for a security vulnerability related to IOMMU Shared\nVirtual Addressing (SVA). In an SVA context, an IOMMU can cache kernel\npage table entries. When a kernel page table page is freed and\nreallocated for another purpose, the IOMMU might still hold stale,\nincorrect entries. This can be exploited to cause a use-after-free or\nwrite-after-free condition, potentially leading to privilege escalation or\ndata corruption.\n\nThis solution introduces a deferred freeing mechanism for kernel page\ntable pages, which provides a safe window to notify the IOMMU to\ninvalidate its caches before the page is reused.\n\n\nThis patch (of 8):\n\nIn the IOMMU Shared Virtual Addressing (SVA) context, the IOMMU hardware\nshares and walks the CPU\u0027s page tables. The x86 architecture maps the\nkernel\u0027s virtual address space into the upper portion of every process\u0027s\npage table. Consequently, in an SVA context, the IOMMU hardware can walk\nand cache kernel page table entries.\n\nThe Linux kernel currently lacks a notification mechanism for kernel page\ntable changes, specifically when page table pages are freed and reused. \nThe IOMMU driver is only notified of changes to user virtual address\nmappings. This can cause the IOMMU\u0027s internal caches to retain stale\nentries for kernel VA.\n\nUse-After-Free (UAF) and Write-After-Free (WAF) conditions arise when\nkernel page table pages are freed and later reallocated. The IOMMU could\nmisinterpret the new data as valid page table entries. The IOMMU might\nthen walk into attacker-controlled memory, leading to arbitrary physical\nmemory DMA access or privilege escalation. This is also a\nWrite-After-Free issue, as the IOMMU will potentially continue to write\nAccessed and Dirty bits to the freed memory while attempting to walk the\nstale page tables.\n\nCurrently, SVA contexts are unprivileged and cannot access kernel\nmappings. However, the IOMMU will still walk kernel-only page tables all\nthe way down to the leaf entries, where it realizes the mapping is for the\nkernel and errors out. This means the IOMMU still caches these\nintermediate page table entries, making the described vulnerability a real\nconcern.\n\nDisable SVA on x86 architecture until the IOMMU can receive notification\nto flush the paging cache before freeing the CPU kernel page table pages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71089",
"url": "https://www.suse.com/security/cve/CVE-2025-71089"
},
{
"category": "external",
"summary": "SUSE Bug 1256612 for CVE-2025-71089",
"url": "https://bugzilla.suse.com/1256612"
},
{
"category": "external",
"summary": "SUSE Bug 1256615 for CVE-2025-71089",
"url": "https://bugzilla.suse.com/1256615"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-71089"
},
{
"cve": "CVE-2026-23392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23392"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: release flowtable after rcu grace period on error\n\nCall synchronize_rcu() after unregistering the hooks from error path,\nsince a hook that already refers to this flowtable can be already\nregistered, exposing this flowtable to packet path and nfnetlink_hook\ncontrol plane.\n\nThis error path is rare, it should only happen by reaching the maximum\nnumber hooks or by failing to set up to hardware offload, just call\nsynchronize_rcu().\n\nThere is a check for already used device hooks by different flowtable\nthat could result in EEXIST at this late stage. The hook parser can be\nupdated to perform this check earlier to this error path really becomes\nrarely exercised.\n\nUncovered by KASAN reported as use-after-free from nfnetlink_hook path\nwhen dumping hooks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23392",
"url": "https://www.suse.com/security/cve/CVE-2026-23392"
},
{
"category": "external",
"summary": "SUSE Bug 1260531 for CVE-2026-23392",
"url": "https://bugzilla.suse.com/1260531"
},
{
"category": "external",
"summary": "SUSE Bug 1262016 for CVE-2026-23392",
"url": "https://bugzilla.suse.com/1262016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23392"
},
{
"cve": "CVE-2026-23455",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23455"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()\n\nIn DecodeQ931(), the UserUserIE code path reads a 16-bit length from\nthe packet, then decrements it by 1 to skip the protocol discriminator\nbyte before passing it to DecodeH323_UserInformation(). If the encoded\nlength is 0, the decrement wraps to -1, which is then passed as a\nlarge value to the decoder, leading to an out-of-bounds read.\n\nAdd a check to ensure len is positive after the decrement.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23455",
"url": "https://www.suse.com/security/cve/CVE-2026-23455"
},
{
"category": "external",
"summary": "SUSE Bug 1261687 for CVE-2026-23455",
"url": "https://bugzilla.suse.com/1261687"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-23455"
},
{
"cve": "CVE-2026-31408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31408"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold\n\nsco_recv_frame() reads conn-\u003esk under sco_conn_lock() but immediately\nreleases the lock without holding a reference to the socket. A concurrent\nclose() can free the socket between the lock release and the subsequent\nsk-\u003esk_state access, resulting in a use-after-free.\n\nOther functions in the same file (sco_sock_timeout(), sco_conn_del())\ncorrectly use sco_sock_hold() to safely hold a reference under the lock.\n\nFix by using sco_sock_hold() to take a reference before releasing the\nlock, and adding sock_put() on all exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31408",
"url": "https://www.suse.com/security/cve/CVE-2026-31408"
},
{
"category": "external",
"summary": "SUSE Bug 1261797 for CVE-2026-31408",
"url": "https://bugzilla.suse.com/1261797"
},
{
"category": "external",
"summary": "SUSE Bug 1261799 for CVE-2026-31408",
"url": "https://bugzilla.suse.com/1261799"
},
{
"category": "external",
"summary": "SUSE Bug 1265552 for CVE-2026-31408",
"url": "https://bugzilla.suse.com/1265552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31408"
},
{
"cve": "CVE-2026-31684",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31684"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: act_csum: validate nested VLAN headers\n\ntcf_csum_act() walks nested VLAN headers directly from skb-\u003edata when an\nskb still carries in-payload VLAN tags. The current code reads\nvlan-\u003eh_vlan_encapsulated_proto and then pulls VLAN_HLEN bytes without\nfirst ensuring that the full VLAN header is present in the linear area.\n\nIf only part of an inner VLAN header is linearized, accessing\nh_vlan_encapsulated_proto reads past the linear area, and the following\nskb_pull(VLAN_HLEN) may violate skb invariants.\n\nFix this by requiring pskb_may_pull(skb, VLAN_HLEN) before accessing and\npulling each nested VLAN header. If the header still is not fully\navailable, drop the packet through the existing error path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31684",
"url": "https://www.suse.com/security/cve/CVE-2026-31684"
},
{
"category": "external",
"summary": "SUSE Bug 1263596 for CVE-2026-31684",
"url": "https://bugzilla.suse.com/1263596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-31684"
},
{
"cve": "CVE-2026-31685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6t_eui64: reject invalid MAC header for all packets\n\n`eui64_mt6()` derives a modified EUI-64 from the Ethernet source address\nand compares it with the low 64 bits of the IPv6 source address.\n\nThe existing guard only rejects an invalid MAC header when\n`par-\u003efragoff != 0`. For packets with `par-\u003efragoff == 0`, `eui64_mt6()`\ncan still reach `eth_hdr(skb)` even when the MAC header is not valid.\n\nFix this by removing the `par-\u003efragoff != 0` condition so that packets\nwith an invalid MAC header are rejected before accessing `eth_hdr(skb)`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31685",
"url": "https://www.suse.com/security/cve/CVE-2026-31685"
},
{
"category": "external",
"summary": "SUSE Bug 1263668 for CVE-2026-31685",
"url": "https://bugzilla.suse.com/1263668"
},
{
"category": "external",
"summary": "SUSE Bug 1263670 for CVE-2026-31685",
"url": "https://bugzilla.suse.com/1263670"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31685"
},
{
"cve": "CVE-2026-31709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: validate the whole DACL before rewriting it in cifsacl\n\nbuild_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a\nserver-supplied dacloffset and then use the incoming ACL to rebuild the\nchmod/chown security descriptor.\n\nThe original fix only checked that the struct smb_acl header fits before\nreading dacl_ptr-\u003esize or dacl_ptr-\u003enum_aces. That avoids the immediate\nheader-field OOB read, but the rewrite helpers still walk ACEs based on\npdacl-\u003enum_aces with no structural validation of the incoming DACL body.\n\nA malicious server can return a truncated DACL that still contains a\nheader, claims one or more ACEs, and then drive\nreplace_sids_and_copy_aces() or set_chmod_dacl() past the validated\nextent while they compare or copy attacker-controlled ACEs.\n\nFactor the DACL structural checks into validate_dacl(), extend them to\nvalidate each ACE against the DACL bounds, and use the shared validator\nbefore the chmod/chown rebuild paths. parse_dacl() reuses the same\nvalidator so the read-side parser and write-side rewrite paths agree on\nwhat constitutes a well-formed incoming DACL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31709",
"url": "https://www.suse.com/security/cve/CVE-2026-31709"
},
{
"category": "external",
"summary": "SUSE Bug 1264024 for CVE-2026-31709",
"url": "https://bugzilla.suse.com/1264024"
},
{
"category": "external",
"summary": "SUSE Bug 1264140 for CVE-2026-31709",
"url": "https://bugzilla.suse.com/1264140"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31709"
},
{
"cve": "CVE-2026-43020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate LTK enc_size on load\n\nLoad Long Term Keys stores the user-provided enc_size and later uses\nit to size fixed-size stack operations when replying to LE LTK\nrequests. An enc_size larger than the 16-byte key buffer can therefore\noverflow the reply stack buffer.\n\nReject oversized enc_size values while validating the management LTK\nrecord so invalid keys never reach the stored key state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43020",
"url": "https://www.suse.com/security/cve/CVE-2026-43020"
},
{
"category": "external",
"summary": "SUSE Bug 1264006 for CVE-2026-43020",
"url": "https://bugzilla.suse.com/1264006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43020"
},
{
"cve": "CVE-2026-43023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43023"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SCO: fix race conditions in sco_sock_connect()\n\nsco_sock_connect() checks sk_state and sk_type without holding\nthe socket lock. Two concurrent connect() syscalls on the same\nsocket can both pass the check and enter sco_connect(), leading\nto use-after-free.\n\nThe buggy scenario involves three participants and was confirmed\nwith additional logging instrumentation:\n\n Thread A (connect): HCI disconnect: Thread B (connect):\n\n sco_sock_connect(sk) sco_sock_connect(sk)\n sk_state==BT_OPEN sk_state==BT_OPEN\n (pass, no lock) (pass, no lock)\n sco_connect(sk): sco_connect(sk):\n hci_dev_lock hci_dev_lock\n hci_connect_sco \u003c- blocked\n -\u003e hcon1\n sco_conn_add-\u003econn1\n lock_sock(sk)\n sco_chan_add:\n conn1-\u003esk = sk\n sk-\u003econn = conn1\n sk_state=BT_CONNECT\n release_sock\n hci_dev_unlock\n hci_dev_lock\n sco_conn_del:\n lock_sock(sk)\n sco_chan_del:\n sk-\u003econn=NULL\n conn1-\u003esk=NULL\n sk_state=\n BT_CLOSED\n SOCK_ZAPPED\n release_sock\n hci_dev_unlock\n (unblocked)\n hci_connect_sco\n -\u003e hcon2\n sco_conn_add\n -\u003e conn2\n lock_sock(sk)\n sco_chan_add:\n sk-\u003econn=conn2\n sk_state=\n BT_CONNECT\n // zombie sk!\n release_sock\n hci_dev_unlock\n\nThread B revives a BT_CLOSED + SOCK_ZAPPED socket back to\nBT_CONNECT. Subsequent cleanup triggers double sock_put() and\nuse-after-free. Meanwhile conn1 is leaked as it was orphaned\nwhen sco_conn_del() cleared the association.\n\nFix this by:\n- Moving lock_sock() before the sk_state/sk_type checks in\n sco_sock_connect() to serialize concurrent connect attempts\n- Fixing the sk_type != SOCK_SEQPACKET check to actually\n return the error instead of just assigning it\n- Adding a state re-check in sco_connect() after lock_sock()\n to catch state changes during the window between the locks\n- Adding sco_pi(sk)-\u003econn check in sco_chan_add() to prevent\n double-attach of a socket to multiple connections\n- Adding hci_conn_drop() on sco_chan_add failure to prevent\n HCI connection leaks",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43023",
"url": "https://www.suse.com/security/cve/CVE-2026-43023"
},
{
"category": "external",
"summary": "SUSE Bug 1264137 for CVE-2026-43023",
"url": "https://bugzilla.suse.com/1264137"
},
{
"category": "external",
"summary": "SUSE Bug 1264138 for CVE-2026-43023",
"url": "https://bugzilla.suse.com/1264138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43023"
},
{
"cve": "CVE-2026-43027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43027"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_helper: pass helper to expect cleanup\n\nnf_conntrack_helper_unregister() calls nf_ct_expect_iterate_destroy()\nto remove expectations belonging to the helper being unregistered.\nHowever, it passes NULL instead of the helper pointer as the data\nargument, so expect_iter_me() never matches any expectation and all\nof them survive the cleanup.\n\nAfter unregister returns, nfnl_cthelper_del() frees the helper\nobject immediately. Subsequent expectation dumps or packet-driven\ninit_conntrack() calls then dereference the freed exp-\u003ehelper,\ncausing a use-after-free.\n\nPass the actual helper pointer so expectations referencing it are\nproperly destroyed before the helper object is freed.\n\n BUG: KASAN: slab-use-after-free in string+0x38f/0x430\n Read of size 1 at addr ffff888003b14d20 by task poc/103\n Call Trace:\n string+0x38f/0x430\n vsnprintf+0x3cc/0x1170\n seq_printf+0x17a/0x240\n exp_seq_show+0x2e5/0x560\n seq_read_iter+0x419/0x1280\n proc_reg_read+0x1ac/0x270\n vfs_read+0x179/0x930\n ksys_read+0xef/0x1c0\n Freed by task 103:\n The buggy address is located 32 bytes inside of\n freed 192-byte region [ffff888003b14d00, ffff888003b14dc0)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43027",
"url": "https://www.suse.com/security/cve/CVE-2026-43027"
},
{
"category": "external",
"summary": "SUSE Bug 1263933 for CVE-2026-43027",
"url": "https://bugzilla.suse.com/1263933"
},
{
"category": "external",
"summary": "SUSE Bug 1264252 for CVE-2026-43027",
"url": "https://bugzilla.suse.com/1264252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43027"
},
{
"cve": "CVE-2026-43051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq\n\nThe wacom_intuos_bt_irq() function processes Bluetooth HID reports\nwithout sufficient bounds checking. A maliciously crafted short report\ncan trigger an out-of-bounds read when copying data into the wacom\nstructure.\n\nSpecifically, report 0x03 requires at least 22 bytes to safely read\nthe processed data and battery status, while report 0x04 (which\nfalls through to 0x03) requires 32 bytes.\n\nAdd explicit length checks for these report IDs and log a warning if\na short report is received.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43051",
"url": "https://www.suse.com/security/cve/CVE-2026-43051"
},
{
"category": "external",
"summary": "SUSE Bug 1264065 for CVE-2026-43051",
"url": "https://bugzilla.suse.com/1264065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43051"
},
{
"cve": "CVE-2026-43110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43110"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: validate bsscfg indices in IF events\n\nbrcmf_fweh_handle_if_event() validates the firmware-provided interface\nindex before it touches drvr-\u003eiflist[], but it still uses the raw\nbsscfgidx field as an array index without a matching range check.\n\nReject IF events whose bsscfg index does not fit in drvr-\u003eiflist[]\nbefore indexing the interface array.\n\n[add missing wifi prefix]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43110",
"url": "https://www.suse.com/security/cve/CVE-2026-43110"
},
{
"category": "external",
"summary": "SUSE Bug 1264482 for CVE-2026-43110",
"url": "https://bugzilla.suse.com/1264482"
},
{
"category": "external",
"summary": "SUSE Bug 1264483 for CVE-2026-43110",
"url": "https://bugzilla.suse.com/1264483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43110"
},
{
"cve": "CVE-2026-43158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix freemap adjustments when adding xattrs to leaf blocks\n\nxfs/592 and xfs/794 both trip this assertion in the leaf block freemap\nadjustment code after ~20 minutes of running on my test VMs:\n\n ASSERT(ichdr-\u003efirstused \u003e= ichdr-\u003ecount * sizeof(xfs_attr_leaf_entry_t)\n\t\t\t\t\t+ xfs_attr3_leaf_hdr_size(leaf));\n\nUpon enabling quite a lot more debugging code, I narrowed this down to\nfsstress trying to set a local extended attribute with namelen=3 and\nvaluelen=71. This results in an entry size of 80 bytes.\n\nAt the start of xfs_attr3_leaf_add_work, the freemap looks like this:\n\ni 0 base 448 size 0 rhs 448 count 46\ni 1 base 388 size 132 rhs 448 count 46\ni 2 base 2120 size 4 rhs 448 count 46\nfirstused = 520\n\nwhere \"rhs\" is the first byte past the end of the leaf entry array.\nThis is inconsistent -- the entries array ends at byte 448, but\nfreemap[1] says there\u0027s free space starting at byte 388!\n\nBy the end of the function, the freemap is in worse shape:\n\ni 0 base 456 size 0 rhs 456 count 47\ni 1 base 388 size 52 rhs 456 count 47\ni 2 base 2120 size 4 rhs 456 count 47\nfirstused = 440\n\nImportant note: 388 is not aligned with the entries array element size\nof 8 bytes.\n\nBased on the incorrect freemap, the name area starts at byte 440, which\nis below the end of the entries array! That\u0027s why the assertion\ntriggers and the filesystem shuts down.\n\nHow did we end up here? First, recall from the previous patch that the\nfreemap array in an xattr leaf block is not intended to be a\ncomprehensive map of all free space in the leaf block. In other words,\nit\u0027s perfectly legal to have a leaf block with:\n\n * 376 bytes in use by the entries array\n * freemap[0] has [base = 376, size = 8]\n * freemap[1] has [base = 388, size = 1500]\n * the space between 376 and 388 is free, but the freemap stopped\n tracking that some time ago\n\nIf we add one xattr, the entries array grows to 384 bytes, and\nfreemap[0] becomes [base = 384, size = 0]. So far, so good. But if we\nadd a second xattr, the entries array grows to 392 bytes, and freemap[0]\ngets pushed up to [base = 392, size = 0]. This is bad, because\nfreemap[1] hasn\u0027t been updated, and now the entries array and the free\nspace claim the same space.\n\nThe fix here is to adjust all freemap entries so that none of them\ncollide with the entries array. Note that this fix relies on commit\n2a2b5932db6758 (\"xfs: fix attr leaf header freemap.size underflow\") and\nthe previous patch that resets zero length freemap entries to have\nbase = 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43158",
"url": "https://www.suse.com/security/cve/CVE-2026-43158"
},
{
"category": "external",
"summary": "SUSE Bug 1264595 for CVE-2026-43158",
"url": "https://bugzilla.suse.com/1264595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43158"
},
{
"cve": "CVE-2026-43190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_tcpmss: check remaining length before reading optlen\n\nQuoting reporter:\n In net/netfilter/xt_tcpmss.c (lines 53-68), the TCP option parser reads\n op[i+1] directly without validating the remaining option length.\n\n If the last byte of the option field is not EOL/NOP (0/1), the code attempts\n to index op[i+1]. In the case where i + 1 == optlen, this causes an\n out-of-bounds read, accessing memory past the optlen boundary\n (either reading beyond the stack buffer _opt or the\n following payload).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43190",
"url": "https://www.suse.com/security/cve/CVE-2026-43190"
},
{
"category": "external",
"summary": "SUSE Bug 1264848 for CVE-2026-43190",
"url": "https://bugzilla.suse.com/1264848"
},
{
"category": "external",
"summary": "SUSE Bug 1264849 for CVE-2026-43190",
"url": "https://bugzilla.suse.com/1264849"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43190"
},
{
"cve": "CVE-2026-43303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43303"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/page_alloc: clear page-\u003eprivate in free_pages_prepare()\n\nSeveral subsystems (slub, shmem, ttm, etc.) use page-\u003eprivate but don\u0027t\nclear it before freeing pages. When these pages are later allocated as\nhigh-order pages and split via split_page(), tail pages retain stale\npage-\u003eprivate values.\n\nThis causes a use-after-free in the swap subsystem. The swap code uses\npage-\u003eprivate to track swap count continuations, assuming freshly\nallocated pages have page-\u003eprivate == 0. When stale values are present,\nswap_count_continued() incorrectly assumes the continuation list is valid\nand iterates over uninitialized page-\u003elru containing LIST_POISON values,\ncausing a crash:\n\n KASAN: maybe wild-memory-access in range [0xdead000000000100-0xdead000000000107]\n RIP: 0010:__do_sys_swapoff+0x1151/0x1860\n\nFix this by clearing page-\u003eprivate in free_pages_prepare(), ensuring all\nfreed pages have clean state regardless of previous use.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43303",
"url": "https://www.suse.com/security/cve/CVE-2026-43303"
},
{
"category": "external",
"summary": "SUSE Bug 1264974 for CVE-2026-43303",
"url": "https://bugzilla.suse.com/1264974"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43303"
},
{
"cve": "CVE-2026-46195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: validate dacloffset before building DACL pointers\n\nparse_sec_desc(), build_sec_desc(), and the chown path in\nid_mode_to_cifs_acl() all add the server-supplied dacloffset to pntsd\nbefore proving a DACL header fits inside the returned security\ndescriptor.\n\nOn 32-bit builds a malicious server can return dacloffset near\nU32_MAX, wrap the derived DACL pointer below end_of_acl, and then slip\npast the later pointer-based bounds checks. build_sec_desc() and\nid_mode_to_cifs_acl() can then dereference DACL fields from the wrapped\npointer in the chmod/chown rewrite paths.\n\nValidate dacloffset numerically before building any DACL pointer and\nreuse the same helper at the three DACL entry points.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46195",
"url": "https://www.suse.com/security/cve/CVE-2026-46195"
},
{
"category": "external",
"summary": "SUSE Bug 1266860 for CVE-2026-46195",
"url": "https://bugzilla.suse.com/1266860"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-687.12.1.el9_8.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-debug-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-core-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-rt-modules-extra-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-687.12.1.el9_8.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-687.12.1.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46195"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…