RHSA-2026:19666
Vulnerability from csaf_opensuse - Published: 2026-05-20 00:00 - Updated: 2026-09-16 18:18Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:19666.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:19666.
Patchnames: RHSA-2026:19666
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2026-43503
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2026-43503
Threats
Impact
important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:19666.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:19666.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:19666",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_19666.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:19666",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-May/005669.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:19666",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-May/005669.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:18:54Z",
"generator": {
"date": "2026-05-20T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:19666",
"initial_release_date": "2026-05-20T00:00:00Z",
"revision_history": [
{
"date": "2026-05-20T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:45:53Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:02:36Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:18:54Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.125.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.125.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.125.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.125.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.125.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.125.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.125.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.125.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.125.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.125.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.125.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.125.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.125.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.125.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.125.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.125.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.125.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.125.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.125.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.125.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.125.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1271317 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1271317"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.125.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.125.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.125.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…