RHSA-2026:66325
Vulnerability from csaf_opensuse - Published: 2026-09-10 00:00 - Updated: 2026-09-16 18:51Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:66325.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:66325.
Patchnames: RHSA-2026:66325
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.7 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
8.6 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-68745
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:66325.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:66325.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:66325",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_66325.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:66325",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007798.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:66325",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007798.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-68745 page",
"url": "https://www.suse.com/security/cve/CVE-2025-68745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46149 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53091 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53246 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63801 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63971 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64015 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64113 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68117 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68315 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68315/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68376 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68376/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:51:00Z",
"generator": {
"date": "2026-09-10T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:66325",
"initial_release_date": "2026-09-10T00:00:00Z",
"revision_history": [
{
"date": "2026-09-10T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T18:07:47Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:51:00Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.162.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.162.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.162.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.162.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.162.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.162.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.162.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.162.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.162.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.162.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.162.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.162.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.162.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.162.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.162.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.162.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.162.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.162.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.162.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.162.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.162.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-68745"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Clear cmds after chip reset\n\nCommit aefed3e5548f (\"scsi: qla2xxx: target: Fix offline port handling\nand host reset handling\") caused two problems:\n\n1. Commands sent to FW, after chip reset got stuck and never freed as FW\n is not going to respond to them anymore.\n\n2. BUG_ON(cmd-\u003esg_mapped) in qlt_free_cmd(). Commit 26f9ce53817a\n (\"scsi: qla2xxx: Fix missed DMA unmap for aborted commands\")\n attempted to fix this, but introduced another bug under different\n circumstances when two different CPUs were racing to call\n qlt_unmap_sg() at the same time: BUG_ON(!valid_dma_direction(dir)) in\n dma_unmap_sg_attrs().\n\nSo revert \"scsi: qla2xxx: Fix missed DMA unmap for aborted commands\" and\npartially revert \"scsi: qla2xxx: target: Fix offline port handling and\nhost reset handling\" at __qla2x00_abort_all_cmds.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-68745",
"url": "https://www.suse.com/security/cve/CVE-2025-68745"
},
{
"category": "external",
"summary": "SUSE Bug 1255721 for CVE-2025-68745",
"url": "https://bugzilla.suse.com/1255721"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-68745"
},
{
"cve": "CVE-2026-46149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46149"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()\n\ntarget_tg_pt_gp_members_show() formats LUN paths with snprintf() into a\n256-byte stack buffer, then will memcpy() cur_len bytes from that\nbuffer. snprintf() returns the length the output would have had, which\ncan exceed the buffer size when the fabric WWN is long because iSCSI IQN\nnames can be up to 223 bytes. The check at the memcpy() site only\nguards the destination page write, not the source read, so memcpy() will\nread past the stack buffer and copy adjacent stack contents to the sysfs\nreader, which when CONFIG_FORTIFY_SOURCE is enabled, fortify_panic()\nwill be triggered.\n\nCommit 27e06650a5ea (\"scsi: target: target_core_configfs: Add length\ncheck to avoid buffer overflow\") added the same bound to the\ntarget_lu_gp_members_show() but the tg_pt_gp variant was missed so\nresolve that here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46149",
"url": "https://www.suse.com/security/cve/CVE-2026-46149"
},
{
"category": "external",
"summary": "SUSE Bug 1267648 for CVE-2026-46149",
"url": "https://bugzilla.suse.com/1267648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46149"
},
{
"cve": "CVE-2026-52917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: diag: reject stale associations in dump_one path\n\nThe SCTP exact sock_diag lookup can hold a transport reference, block on\nlock_sock(sk), and then resume after sctp_association_free() has marked\nthe association dead and freed its bind address list.\n\nWhen that happens, inet_assoc_attr_size() and\ninet_diag_msg_sctpasoc_fill() can still dereference association state\nthat is no longer valid for reporting. In particular,\ninet_diag_msg_sctpasoc_fill() may read an empty bind-address list as a\nreal sctp_sockaddr_entry and trigger an out-of-bounds read from\nunrelated association memory.\n\nReject the association after taking the socket lock if it has been\nreaped or detached from the endpoint, and report the lookup as stale.\nThis keeps the exact dump-one path from formatting torn association\nstate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52917",
"url": "https://www.suse.com/security/cve/CVE-2026-52917"
},
{
"category": "external",
"summary": "SUSE Bug 1269029 for CVE-2026-52917",
"url": "https://bugzilla.suse.com/1269029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-52917"
},
{
"cve": "CVE-2026-52942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52942"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_log: validate MAC header was set before dumping it\n\nThe fallback path of dump_mac_header() guards the MAC header access\nonly with \"skb-\u003emac_header != skb-\u003enetwork_header\", without checking\nskb_mac_header_was_set(). When the MAC header is unset, mac_header is\n0xffff, so the test passes and skb_mac_header(skb) returns\nskb-\u003ehead + 0xffff, ~64 KiB past the buffer; the loop then reads\ndev-\u003ehard_header_len bytes out of bounds into the kernel log.\n\nThis is reachable via the netdev logger: nf_log_unknown_packet() calls\ndump_mac_header() unconditionally, and an skb sent through AF_PACKET\nwith PACKET_QDISC_BYPASS reaches the egress hook with mac_header still\nunset (__dev_queue_xmit(), which would reset it, is bypassed).\n\nAdd the skb_mac_header_was_set() check the ARPHRD_ETHER path already\nuses, and replace the open-coded MAC header length test with\nskb_mac_header_len(). Only skbs with an unset MAC header are affected;\nvalid ones are dumped as before.\n\n BUG: KASAN: slab-out-of-bounds in dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n Read of size 1 at addr ffff88800ea49d3f by task exploit/148\n Call Trace:\n kasan_report (mm/kasan/report.c:595)\n dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n nf_log_netdev_packet (net/netfilter/nf_log_syslog.c:938 net/netfilter/nf_log_syslog.c:963)\n nf_log_packet (net/netfilter/nf_log.c:260)\n nft_log_eval (net/netfilter/nft_log.c:60)\n nft_do_chain (net/netfilter/nf_tables_core.c:285)\n nft_do_chain_netdev (net/netfilter/nft_chain_filter.c:307)\n nf_hook_slow (net/netfilter/core.c:619)\n nf_hook_direct_egress (net/packet/af_packet.c:257)\n packet_xmit (net/packet/af_packet.c:280)\n packet_sendmsg (net/packet/af_packet.c:3114)\n __sys_sendto (net/socket.c:2265)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52942",
"url": "https://www.suse.com/security/cve/CVE-2026-52942"
},
{
"category": "external",
"summary": "SUSE Bug 1268967 for CVE-2026-52942",
"url": "https://bugzilla.suse.com/1268967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-52942"
},
{
"cve": "CVE-2026-52986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52986"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_sip: don\u0027t use simple_strtoul\n\nReplace unsafe port parsing in epaddr_len(), ct_sip_parse_header_uri(),\nand ct_sip_parse_request() with a new sip_parse_port() helper that\nvalidates each digit against the buffer limit, eliminating the use of\nsimple_strtoul() which assumes NUL-terminated strings.\n\nThe previous code dereferenced pointers without bounds checks after\nsip_parse_addr() and relied on simple_strtoul() on non-NUL-terminated\nskb data. A port that reaches the buffer limit without a trailing\ncharacter is also rejected as malformed.\n\nAlso get rid of all simple_strtoul() usage in conntrack, prefer a\nstricter version instead. There are intentional changes:\n\n- Bail out if number is \u003e UINT_MAX and indicate a failure, same for\n too long sequences.\n While we do accept 05535 as port 5535, we will not accept e.g.\n \u0027sip:10.0.0.1:005060\u0027. While its syntactically valid under RFC 3261,\n we should restrict this to not waste cycles when presented with\n malformed packets with 64k \u00270\u0027 characters.\n\n- Force base 10 in ct_sip_parse_numerical_param(). This is used to fetch\n \u0027expire=\u0027 and \u0027rports=\u0027; both are expected to use base-10.\n\n- In nf_nat_sip.c, only accept the parsed value if its within the 1k-64k\n range.\n\n- epaddr_len now returns 0 if the port is invalid, as it already does\n for invalid ip addresses. This is intentional. nf_conntrack_sip\n performs lots of guesswork to find the right parts of the message\n to parse. Being stricter could break existing setups.\n Connection tracking helpers are designed to allow traffic to\n pass, not to block it.\n\nBased on an earlier patch from Jenny Guanni Qu \u003cqguanni@gmail.com\u003e.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52986",
"url": "https://www.suse.com/security/cve/CVE-2026-52986"
},
{
"category": "external",
"summary": "SUSE Bug 1269289 for CVE-2026-52986",
"url": "https://bugzilla.suse.com/1269289"
},
{
"category": "external",
"summary": "SUSE Bug 1270383 for CVE-2026-52986",
"url": "https://bugzilla.suse.com/1270383"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-52986"
},
{
"cve": "CVE-2026-53091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53091"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: pull headers in qdisc_pkt_len_segs_init()\n\nMost ndo_start_xmit() methods expects headers of gso packets\nto be already in skb-\u003ehead.\n\nnet/core/tso.c users are particularly at risk, because tso_build_hdr()\ndoes a memcpy(hdr, skb-\u003edata, hdr_len);\n\nqdisc_pkt_len_segs_init() already does a dissection of gso packets.\n\nUse pskb_may_pull() instead of skb_header_pointer() to make\nsure drivers do not have to reimplement this.\n\nSome malicious packets could be fed, detect them so that we can\ndrop them sooner with a new SKB_DROP_REASON_SKB_BAD_GSO drop_reason.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53091",
"url": "https://www.suse.com/security/cve/CVE-2026-53091"
},
{
"category": "external",
"summary": "SUSE Bug 1269530 for CVE-2026-53091",
"url": "https://bugzilla.suse.com/1269530"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53091"
},
{
"cve": "CVE-2026-53246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53246"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cached peer INIT chunk length in COOKIE_ECHO processing\n\nWhen a listening SCTP server processes a COOKIE_ECHO chunk, the cached\npeer INIT chunk embedded after the cookie is parsed and its parameters\nare later walked by sctp_process_init() using sctp_walk_params().\n\nHowever, the chunk header length of this cached INIT chunk was not\nvalidated against the remaining buffer in the COOKIE_ECHO payload. If\nthe length field is inflated, the parameter walk can run beyond the\nactual received data, leading to out-of-bounds reads and potential\nmemory corruption during later parameter handling (e.g. STATE_COOKIE\nprocessing and kmemdup() copies).\n\nAdd a bounds check in sctp_unpack_cookie() to ensure the cached INIT\nchunk length does not exceed the available data in the COOKIE_ECHO\nbuffer before it is used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53246",
"url": "https://www.suse.com/security/cve/CVE-2026-53246"
},
{
"category": "external",
"summary": "SUSE Bug 1269988 for CVE-2026-53246",
"url": "https://bugzilla.suse.com/1269988"
},
{
"category": "external",
"summary": "SUSE Bug 1270024 for CVE-2026-53246",
"url": "https://bugzilla.suse.com/1270024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-53246"
},
{
"cve": "CVE-2026-63801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix slab-use-after-free Read in tipc_aead_decrypt_done\n\ntipc_aead_decrypt() goes straight from tipc_bearer_hold(b) to\ncrypto_aead_decrypt(req) without taking a reference on the netns, unlike\nthe encrypt path. When crypto_aead_decrypt() is offloaded asynchronously\n(e.g. the SIMD aead wrapper queuing to cryptd), the cryptd worker runs\ntipc_aead_decrypt_done() later. If the bearer\u0027s netns is torn down in the\nmeantime, cleanup_net() -\u003e tipc_exit_net() -\u003e tipc_crypto_stop() frees the\nper-netns tipc_crypto, and the completion then reads it:\ntipc_aead_decrypt_done() dereferences aead-\u003ecrypto-\u003estats and\naead-\u003ecrypto-\u003enet, and tipc_crypto_rcv_complete() dereferences\naead-\u003ecrypto-\u003eaead[] and the node table -- reading freed memory.\n\nDecoded KASAN splat (v7.1-rc7, CONFIG_KASAN_INLINE + TIPC + TIPC_CRYPTO):\n\n BUG: KASAN: slab-use-after-free in tipc_aead_decrypt_done (net/tipc/crypto.c:999)\n Read of size 8 at addr ffff8881056258a8 by task kworker/u16:2/51\n Workqueue: events_unbound\n Call Trace:\n tipc_aead_decrypt_done (net/tipc/crypto.c:999)\n process_one_work (kernel/workqueue.c:3314)\n worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)\n kthread (kernel/kthread.c:436)\n ret_from_fork (arch/x86/kernel/process.c:158)\n ret_from_fork_asm (arch/x86/entry/entry_64.S:245)\n\n Allocated by task 169:\n __kasan_kmalloc (mm/kasan/common.c:398 mm/kasan/common.c:415)\n tipc_crypto_start (net/tipc/crypto.c:1502)\n tipc_init_net (net/tipc/core.c:72)\n ops_init (net/core/net_namespace.c:137)\n setup_net (net/core/net_namespace.c:446)\n copy_net_ns (net/core/net_namespace.c:579)\n create_new_namespaces (kernel/nsproxy.c:132)\n __x64_sys_unshare (kernel/fork.c:3316)\n do_syscall_64 (arch/x86/entry/syscall_64.c:63)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n\n Freed by task 8:\n kfree (mm/slub.c:6566)\n tipc_exit_net (net/tipc/core.c:119)\n cleanup_net (net/core/net_namespace.c:704)\n process_one_work (kernel/workqueue.c:3314)\n kthread (kernel/kthread.c:436)\n\nThis is the same class of bug that commit e279024617134 (\"net/tipc: fix\nslab-use-after-free Read in tipc_aead_encrypt_done\") fixed for the encrypt\nside. The encrypt path takes maybe_get_net(aead-\u003ecrypto-\u003enet) before\ncrypto_aead_encrypt() and drops it with put_net() on the synchronous\nreturn paths and in tipc_aead_encrypt_done(); the -EINPROGRESS/-EBUSY\nreturn keeps the reference for the async callback to release. The decrypt\npath was left without the equivalent guard.\n\nMirror the encrypt-side fix on the decrypt path: take a net reference\nbefore crypto_aead_decrypt() (failing with -ENODEV and the matching\nbearer put if it cannot be acquired), keep it across the\n-EINPROGRESS/-EBUSY async return, and drop it with put_net() on the\nsynchronous success/error return and at the end of\ntipc_aead_decrypt_done().\n\nReproduced under KASAN on v7.1-rc7: a UDP bearer with a cluster key is\nflooded with crafted encrypted frames from an unknown peer (driving the\ncluster-key decrypt path) while the bearer\u0027s netns is repeatedly torn\ndown. The completion must run asynchronously to outlive\ntipc_crypto_stop(); on x86 the stock aesni gcm(aes) now decrypts\nsynchronously, so the async path was exercised via cryptd offload. The\nunguarded aead-\u003ecrypto dereference in tipc_aead_decrypt_done() is the\nunpatched upstream path; tipc_aead_decrypt() still lacks\nmaybe_get_net(aead-\u003ecrypto-\u003enet), so the completion can outlive the free\non any config where crypto_aead_decrypt() goes async.\n\nFound by 0sec automated security-research tooling (https://0sec.ai).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63801",
"url": "https://www.suse.com/security/cve/CVE-2026-63801"
},
{
"category": "external",
"summary": "SUSE Bug 1272230 for CVE-2026-63801",
"url": "https://bugzilla.suse.com/1272230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-63801"
},
{
"cve": "CVE-2026-63971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63971"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix race between sctp_wait_for_connect and peeloff\n\nsctp_wait_for_connect() drops and re-acquires the socket lock while\nwaiting for the association to reach ESTABLISHED state. During this\nwindow, another thread can peeloff the association to a new socket via\ngetsockopt(SCTP_SOCKOPT_PEELOFF), changing asoc-\u003ebase.sk. After\nre-acquiring the old socket lock, sctp_wait_for_connect() returns\nsuccess without noticing the migration - the caller then accesses\nthe association under the wrong lock in sctp_datamsg_from_user().\n\nAdd the same sk != asoc-\u003ebase.sk check that sctp_wait_for_sndbuf()\nalready has, returning an error if the association was migrated while\nwe slept.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63971",
"url": "https://www.suse.com/security/cve/CVE-2026-63971"
},
{
"category": "external",
"summary": "SUSE Bug 1272678 for CVE-2026-63971",
"url": "https://bugzilla.suse.com/1272678"
},
{
"category": "external",
"summary": "SUSE Bug 1272679 for CVE-2026-63971",
"url": "https://bugzilla.suse.com/1272679"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63971"
},
{
"cve": "CVE-2026-64015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64015"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsecurity/keys: fix missed RCU read section on lookup\n\nNicholas Carlini reports that the keyring code calls assoc_array_find()\nin find_key_to_update() without holding the RCU read lock, while the\nassoc_array_gc() code really is designed around removing the node from\nthe tree and then freeing it after an RCU grace-period.\n\nThe regular key handling doesn\u0027t see this because holding the keyring\nsemaphore hides any lifetime issues, but the persistent key handling\nuses a different model.\n\nInstead of extending the keyring locking, just do the simple RCU locking\nthat the assoc_array was designed for.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64015",
"url": "https://www.suse.com/security/cve/CVE-2026-64015"
},
{
"category": "external",
"summary": "SUSE Bug 1273762 for CVE-2026-64015",
"url": "https://bugzilla.suse.com/1273762"
},
{
"category": "external",
"summary": "SUSE Bug 1273823 for CVE-2026-64015",
"url": "https://bugzilla.suse.com/1273823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-64015"
},
{
"cve": "CVE-2026-64113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64113"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nixgbevf: fix use-after-free in VEPA multicast source pruning\n\nixgbevf_clean_rx_irq() prunes frames whose source MAC matches the VF\u0027s\nown address (VEPA multicast workaround) by freeing the skb and\ncontinuing to the next descriptor:\n\n dev_kfree_skb_irq(skb);\n continue;\n\nThe skb pointer is declared outside the while loop and persists across\niterations. Because the continue skips the \"skb = NULL\" reset at the\nbottom of the loop, the next iteration enters the \"else if (skb)\" path\nand calls ixgbevf_add_rx_frag() on the freed skb, dereferencing\nskb_shinfo(skb)-\u003enr_frags - a use-after-free in NAPI softirq context.\n\nThe sibling driver iavf already handles this correctly by nulling the\npointer before continuing. Apply the same pattern here.\n\nI do not have ixgbevf hardware; the bug was found by static analysis\n(scan_drop_continue_loops.py + semgrep drop_continue_in_loop, multi-tool\ncorroboration with the highest score in the scan). The UAF was confirmed\nunder KASAN by loading a test module that reproduces the exact code\npattern (alloc skb, kfree_skb, then read skb_shinfo(skb)-\u003enr_frags):\n\n BUG: KASAN: slab-use-after-free in ixgbevf_uaf_test_init+0x100/0x1000\n Read of size 8 at addr 000000006163ae78 by task insmod/30\n freed 208-byte region [000000006163adc0, 000000006163ae90)\n\nQEMU emulates igb (82576) but not ixgbe (82599), and the igbvf VF\ndriver does not include the VEPA source pruning path, so a full\nend-to-end reproduction with emulated hardware was not possible.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64113",
"url": "https://www.suse.com/security/cve/CVE-2026-64113"
},
{
"category": "external",
"summary": "SUSE Bug 1272262 for CVE-2026-64113",
"url": "https://bugzilla.suse.com/1272262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64113"
},
{
"cve": "CVE-2026-68117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: clear sock-\u003esk on the failed-insert path in tipc_sk_create()\n\nWhen tipc_sk_create() fails to insert the new socket (tipc_sk_insert()\nreturns non-zero), its error path frees the sk with sk_free() but leaves\nsock-\u003esk pointing at the freed object:\n\n\tif (tipc_sk_insert(tsk)) {\n\t\tsk_free(sk);\n\t\tpr_warn(\"Socket create failed; port number exhausted\\n\");\n\t\treturn -EINVAL;\n\t}\n\nThis is harmless for plain socket(): the syscall layer clears sock-\u003eops\nbefore releasing, so tipc_release() is never called. It is not harmless\non the accept() path. tipc_accept() creates the pre-allocated child\nsocket with tipc_sk_create(net, new_sock, 0, kern); on failure it leaves\nnew_sock-\u003esk dangling and new_sock-\u003eops non-NULL, and do_accept() then\nfput()s the new file, so __sock_release() -\u003e tipc_release() runs\nlock_sock(new_sock-\u003esk) on the freed sk -- a use-after-free write of the\nsk_lock spinlock.\n\ntipc_release() already guards this exact \"failed accept() releases a\npre-allocated child\" case with \"if (sk == NULL) return 0;\", but the\nguard is bypassed because tipc_sk_create() left sock-\u003esk non-NULL\n(dangling) rather than NULL.\n\nClear sock-\u003esk on the failed-insert path so the existing tipc_release()\nNULL check fires and the use-after-free is avoided.\n\nThe tipc_sk_insert() failure is reached when the per-netns socket\nrhashtable hits its max_size (tsk_rht_params.max_size = 1048576, ~2M\nelements) -- i.e. once a netns holds ~2M TIPC sockets every insert\nreturns -E2BIG.\n\n BUG: KASAN: slab-use-after-free in lock_sock_nested (net/core/sock.c:3839)\n Write of size 8 at addr ffff8880047cdc38 by task init/1\n lock_sock_nested (net/core/sock.c:3839)\n tipc_release (net/tipc/socket.c:638)\n __sock_release (net/socket.c:710)\n sock_close (net/socket.c:1501)\n __fput (fs/file_table.c:512)\n Allocated by task 1:\n sk_alloc (net/core/sock.c:2308)\n tipc_sk_create (net/tipc/socket.c:487)\n tipc_accept (net/tipc/socket.c:2744)\n do_accept (net/socket.c:2034)\n Freed by task 1:\n __sk_destruct (net/core/sock.c:2391)\n tipc_sk_create (net/tipc/socket.c:504)\n tipc_accept (net/tipc/socket.c:2744)\n do_accept (net/socket.c:2034)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68117",
"url": "https://www.suse.com/security/cve/CVE-2026-68117"
},
{
"category": "external",
"summary": "SUSE Bug 1274881 for CVE-2026-68117",
"url": "https://bugzilla.suse.com/1274881"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-68117"
},
{
"cve": "CVE-2026-68300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: auth: verify auth requirement when auth_chunk is NULL\n\nsctp_auth_chunk_verify() returns true unconditionally when\nchunk-\u003eauth_chunk is NULL, silently skipping authentication.\nThis is incorrect when:\n\n1. skb_clone() failed in the BH receive path, leaving auth_chunk\n NULL. In sctp_endpoint_bh_rcv() asoc is NULL for new\n connections, so the early sctp_auth_recv_cid() check cannot\n catch this.\n\n2. No AUTH chunk precedes COOKIE-ECHO, so skb_clone() is never\n called and auth_chunk remains NULL.\n\nFix by checking sctp_auth_recv_cid() when auth_chunk is NULL:\nif authentication is required, return false to drop the chunk;\notherwise continue normally.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68300",
"url": "https://www.suse.com/security/cve/CVE-2026-68300"
},
{
"category": "external",
"summary": "SUSE Bug 1275083 for CVE-2026-68300",
"url": "https://bugzilla.suse.com/1275083"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-68300"
},
{
"cve": "CVE-2026-68315",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68315"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate stream count in sctp_process_strreset_inreq()\n\nWhen processing a RESET_IN_REQUEST from a peer,\nsctp_process_strreset_inreq() derives the stream count from the\nparameter length but does not check whether the resulting\nRESET_OUT_REQUEST would exceed SCTP_MAX_CHUNK_LEN.\n\nThe OUT request header (sctp_strreset_outreq, 16 bytes) is 8 bytes\nlarger than the IN request header (sctp_strreset_inreq, 8 bytes).\nGenerally, the IP payload is bounded to 65535 bytes, so the stream\nlist cannot be large enough to trigger the overflow. However, on\ninterfaces with MTU \u003e 65535 (e.g., loopback with IPv6 jumbograms), a\nstream list that fits within the incoming IN parameter can cause a\n__u16 overflow in sctp_make_strreset_req() when computing the OUT\nrequest size, leading to an undersized skb allocation and a kernel\nBUG:\n\n net/core/skbuff.c:207 skb_panic\n net/core/skbuff.c:2625 skb_put\n net/sctp/sm_make_chunk.c:1535 sctp_addto_chunk\n net/sctp/sm_make_chunk.c:3695 sctp_make_strreset_req\n net/sctp/stream.c:655 sctp_process_strreset_inreq\n\nThe local setsockopt path validates the generated reset request size.\nHowever, for an incoming-only reset, it accounts for the smaller IN\nrequest even though the peer must generate an OUT request with the same\nstream list. Such a request cannot be completed successfully by the\npeer.\n\nReject peer IN requests whose corresponding OUT request would exceed\nSCTP_MAX_CHUNK_LEN. Also tighten the local check so it does not send an\nIN request that would require an oversized OUT request from the peer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68315",
"url": "https://www.suse.com/security/cve/CVE-2026-68315"
},
{
"category": "external",
"summary": "SUSE Bug 1274662 for CVE-2026-68315",
"url": "https://bugzilla.suse.com/1274662"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-68315"
},
{
"cve": "CVE-2026-68376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68376"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix auth_hmacs array size in struct sctp_cookie\n\nThe auth_hmacs array in struct sctp_cookie is supposed to store a complete\nSCTP_AUTH_HMAC_ALGO parameter, which consists of a struct sctp_paramhdr\nfollowed by N HMAC identifiers.\n\nHowever, the array size was calculated using an extra 2 bytes instead of\nsizeof(struct sctp_paramhdr), which is 4 bytes. When four HMAC identifiers\nare configured, the HMAC-ALGO parameter stored in the endpoint is larger\nthan the auth_hmacs buffer in the cookie.\n\nAs a result, sctp_association_init() copies beyond the end of auth_hmacs\nwhen initializing the association, corrupting the adjacent auth_chunks\nfield. This can lead to an invalid HMAC identifier being accepted and later\ncause an out-of-bounds read in sctp_auth_get_hmac().\n\nFix the array size calculation by including the full SCTP parameter header\nsize.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68376",
"url": "https://www.suse.com/security/cve/CVE-2026-68376"
},
{
"category": "external",
"summary": "SUSE Bug 1274836 for CVE-2026-68376",
"url": "https://bugzilla.suse.com/1274836"
},
{
"category": "external",
"summary": "SUSE Bug 1279854 for CVE-2026-68376",
"url": "https://bugzilla.suse.com/1279854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.162.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.162.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.162.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-68376"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…