RHSA-2026:3685
Vulnerability from csaf_opensuse - Published: 2026-03-03 00:00 - Updated: 2026-09-16 18:36Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:3685.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:3685.
Patchnames: RHSA-2026:3685
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.8 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2022-50673
Threats
Impact
important
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:3685.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:3685.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:3685",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_3685.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:3685",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-March/002623.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:3685",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-March/002623.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50673 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50673/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38415 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38415/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38459 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39760 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39817 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39993 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39993/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40271 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68349 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-23074 page",
"url": "https://www.suse.com/security/cve/CVE-2026-23074/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:36:09Z",
"generator": {
"date": "2026-03-03T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:3685",
"initial_release_date": "2026-03-03T00:00:00Z",
"revision_history": [
{
"date": "2026-03-03T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-03-03T00:00:00Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-14T12:37:41Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-16T17:55:40Z",
"number": "4",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:36:09Z",
"number": "5",
"summary": "unknown changes"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"product_id": "kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.147.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-3.10.0-1160.147.1.el7.noarch",
"product": {
"name": "kernel-doc-3.10.0-1160.147.1.el7.noarch",
"product_id": "kernel-doc-3.10.0-1160.147.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.147.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "bpftool-3.10.0-1160.147.1.el7.x86_64",
"product_id": "bpftool-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.147.1.el7?arch=x86_64\u0026upstream=bpftool-3.10.0-1160.147.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.147.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.147.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.147.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.147.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.147.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.147.1.el7?arch=x86_64\u0026upstream=kernel-source-3.10.0-1160.147.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.147.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.147.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.147.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.147.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "perf-3.10.0-1160.147.1.el7.x86_64",
"product_id": "perf-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.147.1.el7?arch=x86_64\u0026upstream=perf-3.10.0-1160.147.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-3.10.0-1160.147.1.el7.x86_64",
"product": {
"name": "python-perf-3.10.0-1160.147.1.el7.x86_64",
"product_id": "python-perf-3.10.0-1160.147.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.147.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "bpftool-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-3.10.0-1160.147.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch"
},
"product_reference": "kernel-doc-3.10.0-1160.147.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "perf-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-3.10.0-1160.147.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
},
"product_reference": "python-perf-3.10.0-1160.147.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50673",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50673"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix use-after-free in ext4_orphan_cleanup\n\nI caught a issue as follows:\n==================================================================\n BUG: KASAN: use-after-free in __list_add_valid+0x28/0x1a0\n Read of size 8 at addr ffff88814b13f378 by task mount/710\n\n CPU: 1 PID: 710 Comm: mount Not tainted 6.1.0-rc3-next #370\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x73/0x9f\n print_report+0x25d/0x759\n kasan_report+0xc0/0x120\n __asan_load8+0x99/0x140\n __list_add_valid+0x28/0x1a0\n ext4_orphan_cleanup+0x564/0x9d0 [ext4]\n __ext4_fill_super+0x48e2/0x5300 [ext4]\n ext4_fill_super+0x19f/0x3a0 [ext4]\n get_tree_bdev+0x27b/0x450\n ext4_get_tree+0x19/0x30 [ext4]\n vfs_get_tree+0x49/0x150\n path_mount+0xaae/0x1350\n do_mount+0xe2/0x110\n __x64_sys_mount+0xf0/0x190\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n \u003c/TASK\u003e\n [...]\n==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\next4_fill_super\n ext4_orphan_cleanup\n --- loop1: assume last_orphan is 12 ---\n list_add(\u0026EXT4_I(inode)-\u003ei_orphan, \u0026EXT4_SB(sb)-\u003es_orphan)\n ext4_truncate --\u003e return 0\n ext4_inode_attach_jinode --\u003e return -ENOMEM\n iput(inode) --\u003e free inode\u003c12\u003e\n --- loop2: last_orphan is still 12 ---\n list_add(\u0026EXT4_I(inode)-\u003ei_orphan, \u0026EXT4_SB(sb)-\u003es_orphan);\n // use inode\u003c12\u003e and trigger UAF\n\nTo solve this issue, we need to propagate the return value of\next4_inode_attach_jinode() appropriately.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50673",
"url": "https://www.suse.com/security/cve/CVE-2022-50673"
},
{
"category": "external",
"summary": "SUSE Bug 1255521 for CVE-2022-50673",
"url": "https://bugzilla.suse.com/1255521"
},
{
"category": "external",
"summary": "SUSE Bug 1255522 for CVE-2022-50673",
"url": "https://bugzilla.suse.com/1255522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-50673"
},
{
"cve": "CVE-2025-38415",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38415"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSquashfs: check return result of sb_min_blocksize\n\nSyzkaller reports an \"UBSAN: shift-out-of-bounds in squashfs_bio_read\" bug.\n\nSyzkaller forks multiple processes which after mounting the Squashfs\nfilesystem, issues an ioctl(\"/dev/loop0\", LOOP_SET_BLOCK_SIZE, 0x8000). \nNow if this ioctl occurs at the same time another process is in the\nprocess of mounting a Squashfs filesystem on /dev/loop0, the failure\noccurs. When this happens the following code in squashfs_fill_super()\nfails.\n\n----\nmsblk-\u003edevblksize = sb_min_blocksize(sb, SQUASHFS_DEVBLK_SIZE);\nmsblk-\u003edevblksize_log2 = ffz(~msblk-\u003edevblksize);\n----\n\nsb_min_blocksize() returns 0, which means msblk-\u003edevblksize is set to 0.\n\nAs a result, ffz(~msblk-\u003edevblksize) returns 64, and msblk-\u003edevblksize_log2\nis set to 64.\n\nThis subsequently causes the\n\nUBSAN: shift-out-of-bounds in fs/squashfs/block.c:195:36\nshift exponent 64 is too large for 64-bit type \u0027u64\u0027 (aka\n\u0027unsigned long long\u0027)\n\nThis commit adds a check for a 0 return by sb_min_blocksize().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38415",
"url": "https://www.suse.com/security/cve/CVE-2025-38415"
},
{
"category": "external",
"summary": "SUSE Bug 1247147 for CVE-2025-38415",
"url": "https://bugzilla.suse.com/1247147"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38415"
},
{
"cve": "CVE-2025-38459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38459"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\natm: clip: Fix infinite recursive call of clip_push().\n\nsyzbot reported the splat below. [0]\n\nThis happens if we call ioctl(ATMARP_MKIP) more than once.\n\nDuring the first call, clip_mkip() sets clip_push() to vcc-\u003epush(),\nand the second call copies it to clip_vcc-\u003eold_push().\n\nLater, when the socket is close()d, vcc_destroy_socket() passes\nNULL skb to clip_push(), which calls clip_vcc-\u003eold_push(),\ntriggering the infinite recursion.\n\nLet\u0027s prevent the second ioctl(ATMARP_MKIP) by checking\nvcc-\u003euser_back, which is allocated by the first call as clip_vcc.\n\nNote also that we use lock_sock() to prevent racy calls.\n\n[0]:\nBUG: TASK stack guard page was hit at ffffc9000d66fff8 (stack is ffffc9000d670000..ffffc9000d678000)\nOops: stack guard page: 0000 [#1] SMP KASAN NOPTI\nCPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nRIP: 0010:clip_push+0x5/0x720 net/atm/clip.c:191\nCode: e0 8f aa 8c e8 1c ad 5b fa eb ae 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 \u003c41\u003e 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 f3 49 89 fd 48 bd 00\nRSP: 0018:ffffc9000d670000 EFLAGS: 00010246\nRAX: 1ffff1100235a4a5 RBX: ffff888011ad2508 RCX: ffff8880003c0000\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888037f01000\nRBP: dffffc0000000000 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e\nR10: dffffc0000000000 R11: ffffffff8a99b300 R12: ffffffff8a99b300\nR13: ffff888037f01000 R14: ffff888011ad2500 R15: ffff888037f01578\nFS: 000055557ab6d500(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffc9000d66fff8 CR3: 0000000043172000 CR4: 0000000000352ef0\nCall Trace:\n \u003cTASK\u003e\n clip_push+0x6dc/0x720 net/atm/clip.c:200\n clip_push+0x6dc/0x720 net/atm/clip.c:200\n clip_push+0x6dc/0x720 net/atm/clip.c:200\n...\n clip_push+0x6dc/0x720 net/atm/clip.c:200\n clip_push+0x6dc/0x720 net/atm/clip.c:200\n clip_push+0x6dc/0x720 net/atm/clip.c:200\n vcc_destroy_socket net/atm/common.c:183 [inline]\n vcc_release+0x157/0x460 net/atm/common.c:205\n __sock_release net/socket.c:647 [inline]\n sock_close+0xc0/0x240 net/socket.c:1391\n __fput+0x449/0xa70 fs/file_table.c:465\n task_work_run+0x1d1/0x260 kernel/task_work.c:227\n resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]\n exit_to_user_mode_loop+0xec/0x110 kernel/entry/common.c:114\n exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]\n syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]\n syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]\n do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7ff31c98e929\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fffb5aa1f78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4\nRAX: 0000000000000000 RBX: 0000000000012747 RCX: 00007ff31c98e929\nRDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003\nRBP: 00007ff31cbb7ba0 R08: 0000000000000001 R09: 0000000db5aa226f\nR10: 00007ff31c7ff030 R11: 0000000000000246 R12: 00007ff31cbb608c\nR13: 00007ff31cbb6080 R14: ffffffffffffffff R15: 00007fffb5aa2090\n \u003c/TASK\u003e\nModules linked in:",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38459",
"url": "https://www.suse.com/security/cve/CVE-2025-38459"
},
{
"category": "external",
"summary": "SUSE Bug 1247119 for CVE-2025-38459",
"url": "https://bugzilla.suse.com/1247119"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38459"
},
{
"cve": "CVE-2025-39760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: config: Prevent OOB read in SS endpoint companion parsing\n\nusb_parse_ss_endpoint_companion() checks descriptor type before length,\nenabling a potentially odd read outside of the buffer size.\n\nFix this up by checking the size first before looking at any of the\nfields in the descriptor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39760",
"url": "https://www.suse.com/security/cve/CVE-2025-39760"
},
{
"category": "external",
"summary": "SUSE Bug 1249598 for CVE-2025-39760",
"url": "https://bugzilla.suse.com/1249598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39760"
},
{
"cve": "CVE-2025-39817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39817"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefivarfs: Fix slab-out-of-bounds in efivarfs_d_compare\n\nObserved on kernel 6.6 (present on master as well):\n\n BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0\n Call trace:\n kasan_check_range+0xe8/0x190\n __asan_loadN+0x1c/0x28\n memcmp+0x98/0xd0\n efivarfs_d_compare+0x68/0xd8\n __d_lookup_rcu_op_compare+0x178/0x218\n __d_lookup_rcu+0x1f8/0x228\n d_alloc_parallel+0x150/0x648\n lookup_open.isra.0+0x5f0/0x8d0\n open_last_lookups+0x264/0x828\n path_openat+0x130/0x3f8\n do_filp_open+0x114/0x248\n do_sys_openat2+0x340/0x3c0\n __arm64_sys_openat+0x120/0x1a0\n\nIf dentry-\u003ed_name.len \u003c EFI_VARIABLE_GUID_LEN , \u0027guid\u0027 can become\nnegative, leadings to oob. The issue can be triggered by parallel\nlookups using invalid filename:\n\n T1\t\t\tT2\n lookup_open\n -\u003elookup\n simple_lookup\n d_add\n // invalid dentry is added to hash list\n\n\t\t\tlookup_open\n\t\t\t d_alloc_parallel\n\t\t\t __d_lookup_rcu\n\t\t\t __d_lookup_rcu_op_compare\n\t\t\t hlist_bl_for_each_entry_rcu\n\t\t\t // invalid dentry can be retrieved\n\t\t\t -\u003ed_compare\n\t\t\t efivarfs_d_compare\n\t\t\t // oob\n\nFix it by checking \u0027guid\u0027 before cmp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39817",
"url": "https://www.suse.com/security/cve/CVE-2025-39817"
},
{
"category": "external",
"summary": "SUSE Bug 1249998 for CVE-2025-39817",
"url": "https://bugzilla.suse.com/1249998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39817"
},
{
"cve": "CVE-2025-39993",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39993"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: fix races with imon_disconnect()\n\nSyzbot reports a KASAN issue as below:\nBUG: KASAN: use-after-free in __create_pipe include/linux/usb.h:1945 [inline]\nBUG: KASAN: use-after-free in send_packet+0xa2d/0xbc0 drivers/media/rc/imon.c:627\nRead of size 4 at addr ffff8880256fb000 by task syz-executor314/4465\n\nCPU: 2 PID: 4465 Comm: syz-executor314 Not tainted 6.0.0-rc1-syzkaller #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\nprint_address_description mm/kasan/report.c:317 [inline]\nprint_report.cold+0x2ba/0x6e9 mm/kasan/report.c:433\nkasan_report+0xb1/0x1e0 mm/kasan/report.c:495\n__create_pipe include/linux/usb.h:1945 [inline]\nsend_packet+0xa2d/0xbc0 drivers/media/rc/imon.c:627\nvfd_write+0x2d9/0x550 drivers/media/rc/imon.c:991\nvfs_write+0x2d7/0xdd0 fs/read_write.c:576\nksys_write+0x127/0x250 fs/read_write.c:631\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe iMON driver improperly releases the usb_device reference in\nimon_disconnect without coordinating with active users of the\ndevice.\n\nSpecifically, the fields usbdev_intf0 and usbdev_intf1 are not\nprotected by the users counter (ictx-\u003eusers). During probe,\nimon_init_intf0 or imon_init_intf1 increments the usb_device\nreference count depending on the interface. However, during\ndisconnect, usb_put_dev is called unconditionally, regardless of\nactual usage.\n\nAs a result, if vfd_write or other operations are still in\nprogress after disconnect, this can lead to a use-after-free of\nthe usb_device pointer.\n\nThread 1 vfd_write Thread 2 imon_disconnect\n ...\n if\n usb_put_dev(ictx-\u003eusbdev_intf0)\n else\n usb_put_dev(ictx-\u003eusbdev_intf1)\n...\nwhile\n send_packet\n if\n pipe = usb_sndintpipe(\n ictx-\u003eusbdev_intf0) UAF\n else\n pipe = usb_sndctrlpipe(\n ictx-\u003eusbdev_intf0, 0) UAF\n\nGuard access to usbdev_intf0 and usbdev_intf1 after disconnect by\nchecking ictx-\u003edisconnected in all writer paths. Add early return\nwith -ENODEV in send_packet(), vfd_write(), lcd_write() and\ndisplay_open() if the device is no longer present.\n\nSet and read ictx-\u003edisconnected under ictx-\u003elock to ensure memory\nsynchronization. Acquire the lock in imon_disconnect() before setting\nthe flag to synchronize with any ongoing operations.\n\nEnsure writers exit early and safely after disconnect before the USB\ncore proceeds with cleanup.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39993",
"url": "https://www.suse.com/security/cve/CVE-2025-39993"
},
{
"category": "external",
"summary": "SUSE Bug 1252070 for CVE-2025-39993",
"url": "https://bugzilla.suse.com/1252070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39993"
},
{
"cve": "CVE-2025-40271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40271"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/proc: fix uaf in proc_readdir_de()\n\nPde is erased from subdir rbtree through rb_erase(), but not set the node\nto EMPTY, which may result in uaf access. We should use RB_CLEAR_NODE()\nset the erased node to EMPTY, then pde_subdir_next() will return NULL to\navoid uaf access.\n\nWe found an uaf issue while using stress-ng testing, need to run testcase\ngetdent and tun in the same time. The steps of the issue is as follows:\n\n1) use getdent to traverse dir /proc/pid/net/dev_snmp6/, and current\n pde is tun3;\n\n2) in the [time windows] unregister netdevice tun3 and tun2, and erase\n them from rbtree. erase tun3 first, and then erase tun2. the\n pde(tun2) will be released to slab;\n\n3) continue to getdent process, then pde_subdir_next() will return\n pde(tun2) which is released, it will case uaf access.\n\nCPU 0 | CPU 1\n-------------------------------------------------------------------------\ntraverse dir /proc/pid/net/dev_snmp6/ | unregister_netdevice(tun-\u003edev) //tun3 tun2\nsys_getdents64() |\n iterate_dir() |\n proc_readdir() |\n proc_readdir_de() | snmp6_unregister_dev()\n pde_get(de); | proc_remove()\n read_unlock(\u0026proc_subdir_lock); | remove_proc_subtree()\n | write_lock(\u0026proc_subdir_lock);\n [time window] | rb_erase(\u0026root-\u003esubdir_node, \u0026parent-\u003esubdir);\n | write_unlock(\u0026proc_subdir_lock);\n read_lock(\u0026proc_subdir_lock); |\n next = pde_subdir_next(de); |\n pde_put(de); |\n de = next; //UAF |\n\nrbtree of dev_snmp6\n |\n pde(tun3)\n / \\\n NULL pde(tun2)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40271",
"url": "https://www.suse.com/security/cve/CVE-2025-40271"
},
{
"category": "external",
"summary": "SUSE Bug 1255297 for CVE-2025-40271",
"url": "https://bugzilla.suse.com/1255297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40271"
},
{
"cve": "CVE-2025-68349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68349"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid\n\nFixes a crash when layout is null during this call stack:\n\nwrite_inode\n -\u003e nfs4_write_inode\n -\u003e pnfs_layoutcommit_inode\n\npnfs_set_layoutcommit relies on the lseg refcount to keep the layout\naround. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt\nto reference a null layout.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68349",
"url": "https://www.suse.com/security/cve/CVE-2025-68349"
},
{
"category": "external",
"summary": "SUSE Bug 1255544 for CVE-2025-68349",
"url": "https://bugzilla.suse.com/1255544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68349"
},
{
"cve": "CVE-2026-23074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-23074"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Enforce that teql can only be used as root qdisc\n\nDesign intent of teql is that it is only supposed to be used as root qdisc.\nWe need to check for that constraint.\n\nAlthough not important, I will describe the scenario that unearthed this\nissue for the curious.\n\nGangMin Kim \u003ckm.kim1503@gmail.com\u003e managed to concot a scenario as follows:\n\nROOT qdisc 1:0 (QFQ)\n \u251c\u2500\u2500 class 1:1 (weight=15, lmax=16384) netem with delay 6.4s\n \u2500\u2500 class 1:2 (weight=1, lmax=1514) teql\n\nGangMin sends a packet which is enqueued to 1:1 (netem).\nAny invocation of dequeue by QFQ from this class will not return a packet\nuntil after 6.4s. In the meantime, a second packet is sent and it lands on\n1:2. teql\u0027s enqueue will return success and this will activate class 1:2.\nMain issue is that teql only updates the parent visible qlen (sch-\u003eq.qlen)\nat dequeue. Since QFQ will only call dequeue if peek succeeds (and teql\u0027s\npeek always returns NULL), dequeue will never be called and thus the qlen\nwill remain as 0. With that in mind, when GangMin updates 1:2\u0027s lmax value,\nthe qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc\u0027s\nqlen was not incremented, qfq fails to deactivate the class, but still\nfrees its pointers from the aggregate. So when the first packet is\nrescheduled after 6.4 seconds (netem\u0027s delay), a dangling pointer is\naccessed causing GangMin\u0027s causing a UAF.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-23074",
"url": "https://www.suse.com/security/cve/CVE-2026-23074"
},
{
"category": "external",
"summary": "SUSE Bug 1257749 for CVE-2026-23074",
"url": "https://bugzilla.suse.com/1257749"
},
{
"category": "external",
"summary": "SUSE Bug 1258051 for CVE-2026-23074",
"url": "https://bugzilla.suse.com/1258051"
},
{
"category": "external",
"summary": "SUSE Bug 1263682 for CVE-2026-23074",
"url": "https://bugzilla.suse.com/1263682"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.147.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.147.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.147.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-03T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-23074"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…