RHSA-2026:27729
Vulnerability from csaf_opensuse - Published: 2026-06-22 00:00 - Updated: 2026-09-16 18:31Summary
security update for kernel
Severity
Critical
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:27729.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:27729.
Patchnames: RHSA-2026:27729
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2026-23243
Threats
Impact
important
7.5 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2026-23243
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2026-23243
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2026-23243
Threats
Impact
important
7.8 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2026-23243
Threats
Impact
important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:27729.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:27729.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:27729",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_27729.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:27729",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006854.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:27729",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006854.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43037 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43110 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43158 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43190 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46243 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46243/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:31:13Z",
"generator": {
"date": "2026-06-22T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:27729",
"initial_release_date": "2026-06-22T00:00:00Z",
"revision_history": [
{
"date": "2026-06-22T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:50:44Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:31:13Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"product_id": "kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.153.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-3.10.0-1160.153.1.el7.noarch",
"product": {
"name": "kernel-doc-3.10.0-1160.153.1.el7.noarch",
"product_id": "kernel-doc-3.10.0-1160.153.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.153.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "bpftool-3.10.0-1160.153.1.el7.x86_64",
"product_id": "bpftool-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.153.1.el7?arch=x86_64\u0026upstream=bpftool-3.10.0-1160.153.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.153.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.153.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.153.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.153.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.153.1.el7?arch=x86_64\u0026upstream=kernel-source-3.10.0-1160.153.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "perf-3.10.0-1160.153.1.el7.x86_64",
"product_id": "perf-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.153.1.el7?arch=x86_64\u0026upstream=perf-3.10.0-1160.153.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-3.10.0-1160.153.1.el7.x86_64",
"product": {
"name": "python-perf-3.10.0-1160.153.1.el7.x86_64",
"product_id": "python-perf-3.10.0-1160.153.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.153.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "bpftool-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-3.10.0-1160.153.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch"
},
"product_reference": "kernel-doc-3.10.0-1160.153.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "perf-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-3.10.0-1160.153.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
},
"product_reference": "python-perf-3.10.0-1160.153.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23243"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/umad: Reject negative data_len in ib_umad_write\n\nib_umad_write computes data_len from user-controlled count and the\nMAD header sizes. With a mismatched user MAD header size and RMPP\nheader length, data_len can become negative and reach ib_create_send_mad().\nThis can make the padding calculation exceed the segment size and trigger\nan out-of-bounds memset in alloc_send_rmpp_list().\n\nAdd an explicit check to reject negative data_len before creating the\nsend buffer.\n\nKASAN splat:\n[ 211.363464] BUG: KASAN: slab-out-of-bounds in ib_create_send_mad+0xa01/0x11b0\n[ 211.364077] Write of size 220 at addr ffff88800c3fa1f8 by task spray_thread/102\n[ 211.365867] ib_create_send_mad+0xa01/0x11b0\n[ 211.365887] ib_umad_write+0x853/0x1c80",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23243",
"url": "https://www.suse.com/security/cve/CVE-2026-23243"
},
{
"category": "external",
"summary": "SUSE Bug 1259797 for CVE-2026-23243",
"url": "https://bugzilla.suse.com/1259797"
},
{
"category": "external",
"summary": "SUSE Bug 1259798 for CVE-2026-23243",
"url": "https://bugzilla.suse.com/1259798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23243"
},
{
"cve": "CVE-2026-43037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43037"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err()\n\nOskar Kjos reported the following problem.\n\nip4ip6_err() calls icmp_send() on a cloned skb whose cb[] was written\nby the IPv6 receive path as struct inet6_skb_parm. icmp_send() passes\nIPCB(skb2) to __ip_options_echo(), which interprets that cb[] region\nas struct inet_skb_parm (IPv4). The layouts differ: inet6_skb_parm.nhoff\nat offset 14 overlaps inet_skb_parm.opt.rr, producing a non-zero rr\nvalue. __ip_options_echo() then reads optlen from attacker-controlled\npacket data at sptr[rr+1] and copies that many bytes into dopt-\u003e__data,\na fixed 40-byte stack buffer (IP_OPTIONS_DATA_FIXED_SIZE).\n\nTo fix this we clear skb2-\u003ecb[], as suggested by Oskar Kjos.\n\nAlso add minimal IPv4 header validation (version == 4, ihl \u003e= 5).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43037",
"url": "https://www.suse.com/security/cve/CVE-2026-43037"
},
{
"category": "external",
"summary": "SUSE Bug 1263995 for CVE-2026-43037",
"url": "https://bugzilla.suse.com/1263995"
},
{
"category": "external",
"summary": "SUSE Bug 1265197 for CVE-2026-43037",
"url": "https://bugzilla.suse.com/1265197"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43037"
},
{
"cve": "CVE-2026-43110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43110"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: validate bsscfg indices in IF events\n\nbrcmf_fweh_handle_if_event() validates the firmware-provided interface\nindex before it touches drvr-\u003eiflist[], but it still uses the raw\nbsscfgidx field as an array index without a matching range check.\n\nReject IF events whose bsscfg index does not fit in drvr-\u003eiflist[]\nbefore indexing the interface array.\n\n[add missing wifi prefix]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43110",
"url": "https://www.suse.com/security/cve/CVE-2026-43110"
},
{
"category": "external",
"summary": "SUSE Bug 1264482 for CVE-2026-43110",
"url": "https://bugzilla.suse.com/1264482"
},
{
"category": "external",
"summary": "SUSE Bug 1264483 for CVE-2026-43110",
"url": "https://bugzilla.suse.com/1264483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43110"
},
{
"cve": "CVE-2026-43158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix freemap adjustments when adding xattrs to leaf blocks\n\nxfs/592 and xfs/794 both trip this assertion in the leaf block freemap\nadjustment code after ~20 minutes of running on my test VMs:\n\n ASSERT(ichdr-\u003efirstused \u003e= ichdr-\u003ecount * sizeof(xfs_attr_leaf_entry_t)\n\t\t\t\t\t+ xfs_attr3_leaf_hdr_size(leaf));\n\nUpon enabling quite a lot more debugging code, I narrowed this down to\nfsstress trying to set a local extended attribute with namelen=3 and\nvaluelen=71. This results in an entry size of 80 bytes.\n\nAt the start of xfs_attr3_leaf_add_work, the freemap looks like this:\n\ni 0 base 448 size 0 rhs 448 count 46\ni 1 base 388 size 132 rhs 448 count 46\ni 2 base 2120 size 4 rhs 448 count 46\nfirstused = 520\n\nwhere \"rhs\" is the first byte past the end of the leaf entry array.\nThis is inconsistent -- the entries array ends at byte 448, but\nfreemap[1] says there\u0027s free space starting at byte 388!\n\nBy the end of the function, the freemap is in worse shape:\n\ni 0 base 456 size 0 rhs 456 count 47\ni 1 base 388 size 52 rhs 456 count 47\ni 2 base 2120 size 4 rhs 456 count 47\nfirstused = 440\n\nImportant note: 388 is not aligned with the entries array element size\nof 8 bytes.\n\nBased on the incorrect freemap, the name area starts at byte 440, which\nis below the end of the entries array! That\u0027s why the assertion\ntriggers and the filesystem shuts down.\n\nHow did we end up here? First, recall from the previous patch that the\nfreemap array in an xattr leaf block is not intended to be a\ncomprehensive map of all free space in the leaf block. In other words,\nit\u0027s perfectly legal to have a leaf block with:\n\n * 376 bytes in use by the entries array\n * freemap[0] has [base = 376, size = 8]\n * freemap[1] has [base = 388, size = 1500]\n * the space between 376 and 388 is free, but the freemap stopped\n tracking that some time ago\n\nIf we add one xattr, the entries array grows to 384 bytes, and\nfreemap[0] becomes [base = 384, size = 0]. So far, so good. But if we\nadd a second xattr, the entries array grows to 392 bytes, and freemap[0]\ngets pushed up to [base = 392, size = 0]. This is bad, because\nfreemap[1] hasn\u0027t been updated, and now the entries array and the free\nspace claim the same space.\n\nThe fix here is to adjust all freemap entries so that none of them\ncollide with the entries array. Note that this fix relies on commit\n2a2b5932db6758 (\"xfs: fix attr leaf header freemap.size underflow\") and\nthe previous patch that resets zero length freemap entries to have\nbase = 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43158",
"url": "https://www.suse.com/security/cve/CVE-2026-43158"
},
{
"category": "external",
"summary": "SUSE Bug 1264595 for CVE-2026-43158",
"url": "https://bugzilla.suse.com/1264595"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43158"
},
{
"cve": "CVE-2026-43190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_tcpmss: check remaining length before reading optlen\n\nQuoting reporter:\n In net/netfilter/xt_tcpmss.c (lines 53-68), the TCP option parser reads\n op[i+1] directly without validating the remaining option length.\n\n If the last byte of the option field is not EOL/NOP (0/1), the code attempts\n to index op[i+1]. In the case where i + 1 == optlen, this causes an\n out-of-bounds read, accessing memory past the optlen boundary\n (either reading beyond the stack buffer _opt or the\n following payload).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43190",
"url": "https://www.suse.com/security/cve/CVE-2026-43190"
},
{
"category": "external",
"summary": "SUSE Bug 1264848 for CVE-2026-43190",
"url": "https://bugzilla.suse.com/1264848"
},
{
"category": "external",
"summary": "SUSE Bug 1264849 for CVE-2026-43190",
"url": "https://bugzilla.suse.com/1264849"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43190"
},
{
"cve": "CVE-2026-46243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46243"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject userspace cifs.spnego descriptions\n\ncifs.spnego key descriptions contain authority-bearing fields such as\npid, uid, creduid, and upcall_target that cifs.upcall treats as\nkernel-originating inputs. However, userspace can also create keys of\nthis type through request_key(2) or add_key(2), allowing those fields to\nbe supplied without CIFS origin.\n\nOnly accept cifs.spnego descriptions while CIFS is using its private\nspnego_cred to request the key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46243",
"url": "https://www.suse.com/security/cve/CVE-2026-46243"
},
{
"category": "external",
"summary": "SUSE Bug 1266238 for CVE-2026-46243",
"url": "https://bugzilla.suse.com/1266238"
},
{
"category": "external",
"summary": "SUSE Bug 1266265 for CVE-2026-46243",
"url": "https://bugzilla.suse.com/1266265"
},
{
"category": "external",
"summary": "SUSE Bug 1271478 for CVE-2026-46243",
"url": "https://bugzilla.suse.com/1271478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.153.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.153.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.153.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46243"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…