RHSA-2026:71329
Vulnerability from csaf_opensuse - Published: 2026-09-24 00:00 - Updated: 2026-10-02 10:42Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:71329.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:71329.
Patchnames: RHSA-2026:71329
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.8 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
7.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
7.3 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2023-54120
Threats
Impact
moderate
References
119 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:71329.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:71329.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:71329",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_71329.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:71329",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008042.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:71329",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008042.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-54120 page",
"url": "https://www.suse.com/security/cve/CVE-2023-54120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-54214 page",
"url": "https://www.suse.com/security/cve/CVE-2023-54214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39964 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71082 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71082/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31566 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43334 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43334/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43370 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43370/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45894 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46043 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46133 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52912 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52918 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52918/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53053 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53062 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53256 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53256/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63823 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63831 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63975 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64534 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64564 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64564/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64582 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68121 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68188 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68293 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-72261 page",
"url": "https://www.suse.com/security/cve/CVE-2026-72261/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80714 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80844 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80844/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81000 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-89480 page",
"url": "https://www.suse.com/security/cve/CVE-2026-89480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-89846 page",
"url": "https://www.suse.com/security/cve/CVE-2026-89846/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-10-02T10:42:05Z",
"generator": {
"date": "2026-09-24T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:71329",
"initial_release_date": "2026-09-24T00:00:00Z",
"revision_history": [
{
"date": "2026-09-24T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-01T16:35:18Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-10-02T10:42:05Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.168.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"product_id": "kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.168.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.168.1.el8_10?arch=x86_64\u0026upstream=bpftool-0:4.18.0-553.168.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.168.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.168.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.168.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.168.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.168.1.el8_10?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-553.168.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.168.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "perf-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "perf-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.168.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.168.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-553.168.1.el8_10.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-553.168.1.el8_10.x86_64",
"product_id": "python3-perf-0:4.18.0-553.168.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.168.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.168.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-553.168.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "perf-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-553.168.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-553.168.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-54120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-54120"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix race condition in hidp_session_thread\n\nThere is a potential race condition in hidp_session_thread that may\nlead to use-after-free. For instance, the timer is active while\nhidp_del_timer is called in hidp_session_thread(). After hidp_session_put,\nthen \u0027session\u0027 will be freed, causing kernel panic when hidp_idle_timeout\nis running.\n\nThe solution is to use del_timer_sync instead of del_timer.\n\nHere is the call trace:\n\n? hidp_session_probe+0x780/0x780\ncall_timer_fn+0x2d/0x1e0\n__run_timers.part.0+0x569/0x940\nhidp_session_probe+0x780/0x780\ncall_timer_fn+0x1e0/0x1e0\nktime_get+0x5c/0xf0\nlapic_next_deadline+0x2c/0x40\nclockevents_program_event+0x205/0x320\nrun_timer_softirq+0xa9/0x1b0\n__do_softirq+0x1b9/0x641\n__irq_exit_rcu+0xdc/0x190\nirq_exit_rcu+0xe/0x20\nsysvec_apic_timer_interrupt+0xa1/0xc0",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-54120",
"url": "https://www.suse.com/security/cve/CVE-2023-54120"
},
{
"category": "external",
"summary": "SUSE Bug 1256133 for CVE-2023-54120",
"url": "https://bugzilla.suse.com/1256133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-54120"
},
{
"cve": "CVE-2023-54214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-54214"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix potential user-after-free\n\nThis fixes all instances of which requires to allocate a buffer calling\nalloc_skb which may release the chan lock and reacquire later which\nmakes it possible that the chan is disconnected in the meantime.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-54214",
"url": "https://www.suse.com/security/cve/CVE-2023-54214"
},
{
"category": "external",
"summary": "SUSE Bug 1255954 for CVE-2023-54214",
"url": "https://bugzilla.suse.com/1255954"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-54214"
},
{
"cve": "CVE-2025-39964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39964"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n\nIssuing two writes to the same af_alg socket is bogus as the\ndata will be interleaved in an unpredictable fashion. Furthermore,\nconcurrent writes may create inconsistencies in the internal\nsocket state.\n\nDisallow this by adding a new ctx-\u003ewrite field that indiciates\nexclusive ownership for writing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39964",
"url": "https://www.suse.com/security/cve/CVE-2025-39964"
},
{
"category": "external",
"summary": "SUSE Bug 1251966 for CVE-2025-39964",
"url": "https://bugzilla.suse.com/1251966"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39964"
},
{
"cve": "CVE-2025-71082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71082"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: revert use of devm_kzalloc in btusb\n\nThis reverts commit 98921dbd00c4e (\"Bluetooth: Use devm_kzalloc in\nbtusb.c file\").\n\nIn btusb_probe(), we use devm_kzalloc() to allocate the btusb data. This\nties the lifetime of all the btusb data to the binding of a driver to\none interface, INTF. In a driver that binds to other interfaces, ISOC\nand DIAG, this is an accident waiting to happen.\n\nThe issue is revealed in btusb_disconnect(), where calling\nusb_driver_release_interface(\u0026btusb_driver, data-\u003eintf) will have devm\nfree the data that is also being used by the other interfaces of the\ndriver that may not be released yet.\n\nTo fix this, revert the use of devm and go back to freeing memory\nexplicitly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71082",
"url": "https://www.suse.com/security/cve/CVE-2025-71082"
},
{
"category": "external",
"summary": "SUSE Bug 1256611 for CVE-2025-71082",
"url": "https://bugzilla.suse.com/1256611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-71082"
},
{
"cve": "CVE-2026-31566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31566"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib\n\namdgpu_amdkfd_submit_ib() submits a GPU job and gets a fence\nfrom amdgpu_ib_schedule(). This fence is used to wait for job\ncompletion.\n\nCurrently, the code drops the fence reference using dma_fence_put()\nbefore calling dma_fence_wait().\n\nIf dma_fence_put() releases the last reference, the fence may be\nfreed before dma_fence_wait() is called. This can lead to a\nuse-after-free.\n\nFix this by waiting on the fence first and releasing the reference\nonly after dma_fence_wait() completes.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c:697 amdgpu_amdkfd_submit_ib() warn: passing freed memory \u0027f\u0027 (line 696)\n\n(cherry picked from commit 8b9e5259adc385b61a6590a13b82ae0ac2bd3482)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31566",
"url": "https://www.suse.com/security/cve/CVE-2026-31566"
},
{
"category": "external",
"summary": "SUSE Bug 1263055 for CVE-2026-31566",
"url": "https://bugzilla.suse.com/1263055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-31566"
},
{
"cve": "CVE-2026-43334",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43334"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SMP: force responder MITM requirements before building the pairing response\n\nsmp_cmd_pairing_req() currently builds the pairing response from the\ninitiator auth_req before enforcing the local BT_SECURITY_HIGH\nrequirement. If the initiator omits SMP_AUTH_MITM, the response can\nalso omit it even though the local side still requires MITM.\n\ntk_request() then sees an auth value without SMP_AUTH_MITM and may\nselect JUST_CFM, making method selection inconsistent with the pairing\npolicy the responder already enforces.\n\nWhen the local side requires HIGH security, first verify that MITM can\nbe achieved from the IO capabilities and then force SMP_AUTH_MITM in the\nresponse in both rsp.auth_req and auth. This keeps the responder auth bits\nand later method selection aligned.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43334",
"url": "https://www.suse.com/security/cve/CVE-2026-43334"
},
{
"category": "external",
"summary": "SUSE Bug 1265090 for CVE-2026-43334",
"url": "https://bugzilla.suse.com/1265090"
},
{
"category": "external",
"summary": "SUSE Bug 1265106 for CVE-2026-43334",
"url": "https://bugzilla.suse.com/1265106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43334"
},
{
"cve": "CVE-2026-43370",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43370"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix use-after-free race in VM acquire\n\nReplace non-atomic vm-\u003eprocess_info assignment with cmpxchg()\nto prevent race when parent/child processes sharing a drm_file\nboth try to acquire the same VM after fork().\n\n(cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43370",
"url": "https://www.suse.com/security/cve/CVE-2026-43370"
},
{
"category": "external",
"summary": "SUSE Bug 1264782 for CVE-2026-43370",
"url": "https://bugzilla.suse.com/1264782"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43370"
},
{
"cve": "CVE-2026-45894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45894"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Clear Present bit before tearing down PASID entry\n\nThe Intel VT-d Scalable Mode PASID table entry consists of 512 bits (64\nbytes). When tearing down an entry, the current implementation zeros the\nentire 64-byte structure immediately using multiple 64-bit writes.\n\nSince the IOMMU hardware may fetch these 64 bytes using multiple\ninternal transactions (e.g., four 128-bit bursts), updating or zeroing\nthe entire entry while it is active (P=1) risks a \"torn\" read. If a\nhardware fetch occurs simultaneously with the CPU zeroing the entry, the\nhardware could observe an inconsistent state, leading to unpredictable\nbehavior or spurious faults.\n\nFollow the \"Guidance to Software for Invalidations\" in the VT-d spec\n(Section 6.5.3.3) by implementing the recommended ownership handshake:\n\n1. Clear only the \u0027Present\u0027 (P) bit of the PASID entry.\n2. Use a dma_wmb() to ensure the cleared bit is visible to hardware\n before proceeding.\n3. Execute the required invalidation sequence (PASID cache, IOTLB, and\n Device-TLB flush) to ensure the hardware has released all cached\n references.\n4. Only after the flushes are complete, zero out the remaining fields\n of the PASID entry.\n\nAlso, add a dma_wmb() in pasid_set_present() to ensure that all other\nfields of the PASID entry are visible to the hardware before the Present\nbit is set.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45894",
"url": "https://www.suse.com/security/cve/CVE-2026-45894"
},
{
"category": "external",
"summary": "SUSE Bug 1266895 for CVE-2026-45894",
"url": "https://bugzilla.suse.com/1266895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45894"
},
{
"cve": "CVE-2026-46043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46043"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv\n\nrxe_rcv() currently checks only that the incoming packet is at least\nheader_size(pkt) bytes long before payload_size() is used.\n\nHowever, payload_size() subtracts both the attacker-controlled BTH pad\nfield and RXE_ICRC_SIZE from pkt-\u003epaylen:\n\n payload_size = pkt-\u003epaylen - offset[RXE_PAYLOAD] - bth_pad(pkt)\n - RXE_ICRC_SIZE\n\nThis means a short packet can still make payload_size() underflow even\nif it includes enough bytes for the fixed headers. Simply requiring\nheader_size(pkt) + RXE_ICRC_SIZE is not sufficient either, because a\npacket with a forged non-zero BTH pad can still leave payload_size()\nnegative and pass an underflowed value to later receive-path users.\n\nFix this by validating pkt-\u003epaylen against the full minimum length\nrequired by payload_size(): header_size(pkt) + bth_pad(pkt) +\nRXE_ICRC_SIZE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46043",
"url": "https://www.suse.com/security/cve/CVE-2026-46043"
},
{
"category": "external",
"summary": "SUSE Bug 1266901 for CVE-2026-46043",
"url": "https://bugzilla.suse.com/1266901"
},
{
"category": "external",
"summary": "SUSE Bug 1266902 for CVE-2026-46043",
"url": "https://bugzilla.suse.com/1266902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46043"
},
{
"cve": "CVE-2026-46133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46133"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Reject unknown opcodes before ICRC processing\n\nEven after applying commit 7244491dab34 (\"RDMA/rxe: Validate pad and ICRC\nbefore payload_size() in rxe_rcv\"), a single unauthenticated UDP packet\ncan still trigger panic. That patch handled payload_size() underflow only\nfor valid opcodes with short packets, not for packets carrying an unknown\nopcode. The unknown-opcode OOB read described below predates that commit\nand reaches back to the initial Soft RoCE driver.\n\nThe check added there reads\n\n pkt-\u003epaylen \u003c header_size(pkt) + bth_pad(pkt) + RXE_ICRC_SIZE\n\nwhere header_size(pkt) expands to rxe_opcode[pkt-\u003eopcode].length. The\nrxe_opcode[] array has 256 entries but is only populated for defined IB\nopcodes; any other entry (for example opcode 0xff) is zero-initialized, so\nlength == 0 and the check degenerates to\n\n pkt-\u003epaylen \u003c 0 + bth_pad(pkt) + RXE_ICRC_SIZE\n\nwhich does not constrain pkt-\u003epaylen enough. rxe_icrc_hdr() then computes\n\n rxe_opcode[pkt-\u003eopcode].length - RXE_BTH_BYTES\n\nwhich underflows when length == 0 and passes a huge value to rxe_crc32(),\ncausing an out-of-bounds read of the skb payload.\n\nReproduced on v7.0-rc7 with that fix applied, QEMU/KVM with\nCONFIG_RDMA_RXE=y and CONFIG_KASAN=y, after\n\n rdma link add rxe0 type rxe netdev eth0\n\nA single 48-byte UDP packet to port 4791 with BTH opcode=0xff and\nQPN=IB_MULTICAST_QPN triggers:\n\n BUG: KASAN: slab-out-of-bounds in crc32_le+0x115/0x170\n Read of size 1 at addr ...\n The buggy address is located 0 bytes to the right of\n allocated 704-byte region\n Call Trace:\n crc32_le+0x115/0x170\n rxe_icrc_hdr.isra.0+0x226/0x300\n rxe_icrc_check+0x13f/0x3a0\n rxe_rcv+0x6e1/0x16e0\n rxe_udp_encap_recv+0x20a/0x320\n udp_queue_rcv_one_skb+0x7ed/0x12c0\n\nSubsequent packets with the same shape fault on unmapped memory and panic\nthe kernel. The trigger requires only module load and \"rdma link add\"; no\nQP, no connection, and no authentication.\n\nFix this by rejecting packets whose opcode has no rxe_opcode[] entry,\ndetected via the zero mask or zero length, before any length arithmetic\nruns.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46133",
"url": "https://www.suse.com/security/cve/CVE-2026-46133"
},
{
"category": "external",
"summary": "SUSE Bug 1266928 for CVE-2026-46133",
"url": "https://bugzilla.suse.com/1266928"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46133"
},
{
"cve": "CVE-2026-52912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_queue: hold bridge skb-\u003edev while queued\n\nbr_pass_frame_up() rewrites skb-\u003edev from the ingress port to the bridge\nmaster before queueing bridge LOCAL_IN packets. NFQUEUE only holds\nreferences on state.in/out and bridge physdevs, so a queued bridge\npacket can retain a freed bridge master in skb-\u003edev until reinjection.\n\nWhen the verdict is reinjected later, br_netif_receive_skb() re-enters\nthe receive path with skb-\u003edev still pointing at the freed bridge master,\ntriggering a use-after-free.\n\nStore skb-\u003edev in the queue entry, hold a reference on it for the queue\nlifetime, and use the saved device when dropping queued packets during\nNETDEV_DOWN handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52912",
"url": "https://www.suse.com/security/cve/CVE-2026-52912"
},
{
"category": "external",
"summary": "SUSE Bug 1269000 for CVE-2026-52912",
"url": "https://bugzilla.suse.com/1269000"
},
{
"category": "external",
"summary": "SUSE Bug 1276762 for CVE-2026-52912",
"url": "https://bugzilla.suse.com/1276762"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-52912"
},
{
"cve": "CVE-2026-52918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52918"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: serialize accept_q access\n\nbt_sock_poll() walks the accept queue without synchronization, while\nchild teardown can unlink the same socket and drop its last reference.\nThe unsynchronized accept queue walk has existed since the initial\nBluetooth import.\n\nProtect accept_q with a dedicated lock for queue updates and polling.\nAlso rework bt_accept_dequeue() to take temporary child references under\nthe queue lock before dropping it and locking the child socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52918",
"url": "https://www.suse.com/security/cve/CVE-2026-52918"
},
{
"category": "external",
"summary": "SUSE Bug 1269100 for CVE-2026-52918",
"url": "https://bugzilla.suse.com/1269100"
},
{
"category": "external",
"summary": "SUSE Bug 1269102 for CVE-2026-52918",
"url": "https://bugzilla.suse.com/1269102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-52918"
},
{
"cve": "CVE-2026-53053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53053"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Fix clone_alias() to use the original device\u0027s devid\n\nCurrently clone_alias() assumes first argument (pdev) is always the\noriginal device pointer. This function is called by\npci_for_each_dma_alias() which based on topology decides to send\noriginal or alias device details in first argument.\n\nThis meant that the source devid used to look up and copy the DTE\nmay be incorrect, leading to wrong or stale DTE entries being\npropagated to alias device.\n\nFix this by passing the original pdev as the opaque data argument to\nboth the direct clone_alias() call and pci_for_each_dma_alias(). Inside\nclone_alias(), retrieve the original device from data and compute devid\nfrom it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53053",
"url": "https://www.suse.com/security/cve/CVE-2026-53053"
},
{
"category": "external",
"summary": "SUSE Bug 1269310 for CVE-2026-53053",
"url": "https://bugzilla.suse.com/1269310"
},
{
"category": "external",
"summary": "SUSE Bug 1269311 for CVE-2026-53053",
"url": "https://bugzilla.suse.com/1269311"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-53053"
},
{
"cve": "CVE-2026-53062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53062"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache policy smq: fix missing locks in invalidating cache blocks\n\nIn passthrough mode, the policy invalidate_mapping operation is called\nsimultaneously from multiple workers, thus it should be protected by a\nlock. Otherwise, we might end up with data races on the allocated blocks\ncounter, or even use-after-free issues with internal data structures\nwhen doing concurrent writes.\n\nNote that the existing FIXME in smq_invalidate_mapping() doesn\u0027t affect\npassthrough mode since migration tasks don\u0027t exist there, but would need\nattention if supporting fast device shrinking via suspend/resume without\ntarget reloading.\n\nReproduce steps:\n\n1. Create a cache device consisting of 1024 cache entries\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 262144 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 262144 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. Populate the cache, and record the number of cached blocks\n\nfio --name=populate --filename=/dev/mapper/cache --rw=randwrite --bs=4k \\\n--size=64m --direct=1\nnr_cached=$(dmsetup status cache | awk \u0027{split($7, a, \"/\"); print a[1]}\u0027)\n\n3. Reload the cache into passthrough mode\n\ndmsetup suspend cache\ndmsetup reload cache --table \"0 262144 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 passthrough smq 0\"\ndmsetup resume cache\n\n4. Write to the passthrough cache. By setting multiple jobs with I/O\n size equal to the cache block size, cache blocks are invalidated\n concurrently from different workers.\n\nfio --filename=/dev/mapper/cache --name=test --rw=randwrite --bs=64k \\\n--direct=1 --numjobs=2 --randrepeat=0 --size=64m\n\n5. Check if demoted matches cached block count. These numbers should\n match but may differ due to the data race.\n\nnr_demoted=$(dmsetup status cache | awk \u0027{print $12}\u0027)\necho \"$nr_cached, $nr_demoted\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53062",
"url": "https://www.suse.com/security/cve/CVE-2026-53062"
},
{
"category": "external",
"summary": "SUSE Bug 1269658 for CVE-2026-53062",
"url": "https://bugzilla.suse.com/1269658"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53062"
},
{
"cve": "CVE-2026-53254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53254"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: validate skb length in MCC handlers\n\nThe RFCOMM MCC handlers cast skb-\u003edata to protocol-specific structs\nwithout validating skb-\u003elen first. A malicious remote device can send\ntruncated MCC frames and trigger out-of-bounds reads in these handlers.\n\nFix this by using skb_pull_data() to validate and access the required\ndata before dereferencing it.\n\nrfcomm_recv_rpn() requires special handling since ETSI TS 07.10 allows\n1-byte RPN requests. Handle this by validating only the DLCI byte first,\nand validating the full struct only when len \u003e 1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53254",
"url": "https://www.suse.com/security/cve/CVE-2026-53254"
},
{
"category": "external",
"summary": "SUSE Bug 1269996 for CVE-2026-53254",
"url": "https://bugzilla.suse.com/1269996"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53254"
},
{
"cve": "CVE-2026-53256",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53256"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()\n\nrfcomm_get_sock_by_channel() scans rfcomm_sk_list under the list lock,\nbut returns the selected listener after dropping that lock without\ntaking a reference. rfcomm_connect_ind() then locks the listener,\nqueues a child socket on it, and may notify it after unlocking it.\n\nThe buggy scenario involves two paths, with each column showing the\norder within that path:\n\nrfcomm_connect_ind(): listener close:\n 1. Find parent in 1. close() enters\n rfcomm_get_sock_by_channel() rfcomm_sock_release().\n 2. Drop rfcomm_sk_list.lock 2. rfcomm_sock_shutdown()\n without pinning parent. closes the listener.\n 3. Call lock_sock(parent) and 3. rfcomm_sock_kill()\n bt_accept_enqueue(parent, unlinks and puts parent.\n sk, true).\n 4. Read parent flags and may 4. parent can be freed.\n call sk_state_change().\n\nIf close wins the race, parent can be freed before\nrfcomm_connect_ind() reaches lock_sock(), bt_accept_enqueue(), or the\ndeferred-setup callback.\n\nTake a reference on the listener before leaving rfcomm_sk_list.lock.\nAfter lock_sock() succeeds, recheck that it is still in BT_LISTEN\nbefore queueing a child, cache the deferred-setup bit while the parent\nis locked, and drop the reference after the last parent use.\n\nKASAN reported a slab-use-after-free in lock_sock_nested() from\nrfcomm_connect_ind(), with the freeing stack going through\nrfcomm_sock_kill() and rfcomm_sock_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53256",
"url": "https://www.suse.com/security/cve/CVE-2026-53256"
},
{
"category": "external",
"summary": "SUSE Bug 1269993 for CVE-2026-53256",
"url": "https://bugzilla.suse.com/1269993"
},
{
"category": "external",
"summary": "SUSE Bug 1270371 for CVE-2026-53256",
"url": "https://bugzilla.suse.com/1270371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-53256"
},
{
"cve": "CVE-2026-63823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63823"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Pin request_key_auth payload in instantiate paths\n\nA: request_key() B: KEYCTL_INSTANTIATE_IOV\n================ =========================\n\ncreate auth key\nstore rka in auth key\nwait for helper\n get auth key\n load rka from auth key\n copy user payload\n sleep on #PF\n\nhelper completed\ndetach and free rka\ndestroy auth key\n wake up\n use rka-\u003etarget_key\n **USE-AFTER-FREE**\n\nGive request_key_auth payloads a refcount. Take a payload reference while\nauthkey-\u003esem stabilizes the payload and revocation state. Hold that\nreference across the instantiate and reject paths. Drop the auth key\nowning reference from revoke and destroy.\n\n[jarkko: Replaced the first two paragraphs of text with an actual\n concurrency scenario.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63823",
"url": "https://www.suse.com/security/cve/CVE-2026-63823"
},
{
"category": "external",
"summary": "SUSE Bug 1272182 for CVE-2026-63823",
"url": "https://bugzilla.suse.com/1272182"
},
{
"category": "external",
"summary": "SUSE Bug 1272190 for CVE-2026-63823",
"url": "https://bugzilla.suse.com/1272190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63823"
},
{
"cve": "CVE-2026-63831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63831"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: llsec: add skb_cow_data() before in-place crypto\n\nllsec_do_encrypt_unauth(), llsec_do_encrypt_auth(),\nllsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() all perform\nin-place cryptographic transformations on skb data. They build a\nscatterlist with sg_init_one() pointing into the skb\u0027s linear data area\nand then pass the same scatterlist as both src and dst to the crypto API\n(e.g. crypto_skcipher_encrypt/decrypt, crypto_aead_encrypt/decrypt).\n\nOn the RX path, __ieee802154_rx_handle_packet() clones the received skb\nbefore handing it to each subscriber via ieee802154_subif_frame(). The\ncloned skb shares the same underlying data buffer via reference\ncounting. When llsec_do_decrypt() subsequently modifies this shared\nbuffer in place, it corrupts data that other clones -- potentially\nbelonging to other sockets or subsystems -- still reference.\n\nOn the TX path, similar data sharing can occur when an skb\u0027s head has\nbeen cloned (skb_cloned() returns true).\n\nThe fix is to call skb_cow_data() before performing any in-place crypto\noperation. skb_cow_data() ensures that the skb\u0027s data area is not\nshared: if the skb head is cloned or the data spans multiple fragments,\nit copies the data into a private buffer that can be safely modified in\nplace. This is the same pattern used by:\n\n - ESP (net/ipv4/esp4.c, net/ipv6/esp6.c)\n - MACsec (drivers/net/macsec.c)\n - WireGuard (drivers/net/wireguard/receive.c)\n - TIPC (net/tipc/crypto.c)\n\nWithout this guard, in-place crypto on shared skb data leads to:\n - Silent data corruption of other skb clones\n - Use-after-free when the crypto API scatterwalk writes through a\n page that has already been freed by another clone\u0027s kfree_skb()\n - Kernel crashes under concurrent 802.15.4 traffic with security\n enabled (KASAN/KMSAN reports slab-use-after-free)\n\nFound by 0sec (https://0sec.ai) using automated source analysis.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63831",
"url": "https://www.suse.com/security/cve/CVE-2026-63831"
},
{
"category": "external",
"summary": "SUSE Bug 1272184 for CVE-2026-63831",
"url": "https://bugzilla.suse.com/1272184"
},
{
"category": "external",
"summary": "SUSE Bug 1272266 for CVE-2026-63831",
"url": "https://bugzilla.suse.com/1272266"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63831"
},
{
"cve": "CVE-2026-63947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63947"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HIDP: fix missing length checks in hidp_input_report()\n\nhidp_input_report() reads keyboard and mouse payload data from an skb\nwithout first verifying that skb-\u003elen contains enough data.\n\nhidp_recv_intr_frame() pulls the 1-byte HIDP header before dispatching\nto hidp_input_report(). If a paired device sends a truncated packet,\nthe handler reads beyond the valid skb data, resulting in an\nout-of-bounds read of skb data. The OOB bytes may be interpreted as\nphantom key presses or spurious mouse movement.\n\nReplace the open-coded length tracking and pointer arithmetic with\nskb_pull_data() calls. skb_pull_data() returns NULL if the requested\nbytes are not present, eliminating the need for a manual size variable\nand the separate skb-\u003elen guard.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63947",
"url": "https://www.suse.com/security/cve/CVE-2026-63947"
},
{
"category": "external",
"summary": "SUSE Bug 1272668 for CVE-2026-63947",
"url": "https://bugzilla.suse.com/1272668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-63947"
},
{
"cve": "CVE-2026-63975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63975"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp\n\nIf dcid is received for an already-assigned destination CID the spec\nrequires that both channels to be discarded, but calling l2cap_chan_del\nmay invalidate the tmp cursor created by list_for_each_entry_safe and\nin fact it is the wrong procedure as the chan-\u003edcid may be assigned\npreviously it really needs to be disconnected.\n\nCalling l2cap_chan_clone directly may still lead to l2cap_chan_del so\ninstead schedule l2cap_chan_timeout with delay 0 to close the channel\nasynchronously.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63975",
"url": "https://www.suse.com/security/cve/CVE-2026-63975"
},
{
"category": "external",
"summary": "SUSE Bug 1272694 for CVE-2026-63975",
"url": "https://bugzilla.suse.com/1272694"
},
{
"category": "external",
"summary": "SUSE Bug 1272695 for CVE-2026-63975",
"url": "https://bugzilla.suse.com/1272695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63975"
},
{
"cve": "CVE-2026-64534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64534"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path\n\nIn nvmet_tcp_try_recv_ddgst(), when a data digest mismatch is detected,\nnvmet_req_uninit() is called unconditionally. However, if the command\narrived via the nvmet_tcp_handle_req_failure() path, nvmet_req_init()\nhad returned false and percpu_ref_tryget_live() was never executed. The\nunconditional percpu_ref_put() inside nvmet_req_uninit() then causes a\nrefcount underflow, leading to a WARNING in\npercpu_ref_switch_to_atomic_rcu, a use-after-free diagnostic, and\neventually a permanent workqueue deadlock.\n\nCheck cmd-\u003eflags \u0026 NVMET_TCP_F_INIT_FAILED before calling\nnvmet_req_uninit(), matching the existing pattern in\nnvmet_tcp_execute_request().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64534",
"url": "https://www.suse.com/security/cve/CVE-2026-64534"
},
{
"category": "external",
"summary": "SUSE Bug 1273803 for CVE-2026-64534",
"url": "https://bugzilla.suse.com/1273803"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64534"
},
{
"cve": "CVE-2026-64564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64564"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing\n\nsctp_process_asconf() caches the transport the ASCONF chunk is processed\nagainst in asconf-\u003etransport (== chunk-\u003etransport, set once in sctp_rcv()).\nFor an ASCONF located through its Address Parameter by\n__sctp_rcv_asconf_lookup(), that cached transport corresponds to the\nAddress Parameter, which need not be the packet\u0027s source address.\n\nsctp_process_asconf_param() rejects a DEL-IP for the packet source address\n(ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf-\u003etransport.\nA single ASCONF can therefore carry, in order:\n\n [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0]\n\nwhere L differs from the source. The DEL-IP for L passes the D8 check and\ncalls sctp_assoc_rm_peer() on the transport that asconf-\u003etransport still\npoints at, freeing it (RCU-deferred). The following wildcard DEL-IP then\nreuses the now-dangling asconf-\u003etransport in sctp_assoc_set_primary() and\nsctp_assoc_del_nonprimary_peers(): set_primary() dereferences the freed\ntransport (-\u003eipaddr, -\u003estate) and plants the dangling pointer into\nasoc-\u003epeer.primary_path / active_path, and del_nonprimary_peers(), keeping\nonly the pointer that is no longer on the list, removes every real\ntransport, leaving the association with a transport_count of 0 and\nprimary_path/active_path pointing at freed memory.\n\nReject a DEL-IP that targets the transport the ASCONF is being processed\nagainst, mirroring the existing source-address guard, so the wildcard\nbranch can never reuse a freed transport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64564",
"url": "https://www.suse.com/security/cve/CVE-2026-64564"
},
{
"category": "external",
"summary": "SUSE Bug 1274072 for CVE-2026-64564",
"url": "https://bugzilla.suse.com/1274072"
},
{
"category": "external",
"summary": "SUSE Bug 1274074 for CVE-2026-64564",
"url": "https://bugzilla.suse.com/1274074"
},
{
"category": "external",
"summary": "SUSE Bug 1281086 for CVE-2026-64564",
"url": "https://bugzilla.suse.com/1281086"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-64564"
},
{
"cve": "CVE-2026-64582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64582"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix a use-after-free problem in rxe_mmap\n\nrxe_mmap() removes a rxe_mmap_info struct from the pending_mmaps list\nand releases pending_lock while the struct\u0027s kref is still at 1:\n\n list_del_init(\u0026ip-\u003epending_mmaps);\n spin_unlock_bh(\u0026rxe-\u003epending_lock); /* ref == 1, no lock held */\n ret = remap_vmalloc_range(vma, ip-\u003eobj, 0); /* walks PTEs */\n [...]\n rxe_vma_open(vma); /* kref_get, ref -\u003e 2 */\n remap_vmalloc_range_partial() walks PTEs without any lock.\n\nA concurrent DESTROY_CQ ioctl on another CPU calls:\n\n kref_put(\u0026q-\u003eip-\u003eref, rxe_mmap_release) /* ref 1-\u003e0 */\n vfree(ip-\u003eobj) /* clears vmalloc PTEs mid-walk */\n kfree(ip) /* frees rxe_mmap_info */\n\nThis yields:\n\n 1. Kernel crash, vmalloc_to_page() returns NULL when vfree wins the\n per-PTE race -\u003e vm_insert_page(NULL) -\u003e GPF in validate_page_before_insert\n\n 2. Page UAF, vmalloc_to_page() reads a stale PTE before vfree clears\n it. User VMA holds a PTE to a free\u0027d page which might eventually get\n reallocated later by vmalloc which allows the attacker to get a clean\n page-level UAF.\n\n It is worth noting that even though a page-level UAF is possible given\n the strong primitive, it is statistically very difficult to achieve\n given the very short time window (after the last insert_page and before\n the kref_get).\n\nThe call trace are as below:\n\n Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI\n KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\n CPU: 0 UID: 1000 PID: 413 Comm: poc Not tainted 7.0.0-rc5-dirty #28 PREEMPT(lazy)\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n RIP: 0010:validate_page_before_insert+0x32/0x300\n Code: e5 41 57 41 56 49 89 fe 41 55 41 54 53 48 89 f3 e8 93 b5 a3 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 7b 02 00 00 4c 8b 63 08 31 ff 4d 89 e5 41 83 e5\n RSP: 0018:ffff88811b15f2f0 EFLAGS: 00000202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000\n RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008\n RBP: ffff88811b15f318 R08: 0000000000000000 R09: 0000000000000000\n R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881181eee00\n R13: 0000000000000000 R14: ffff8881181eee00 R15: ffff8881181eee20\n FS: 00007b1e000f76c0(0000) GS:ffff8884268e0000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007b1e00a24ac0 CR3: 0000000116eb3000 CR4: 00000000000006f0\n Call Trace:\n \u003cTASK\u003e\n insert_page+0x8f/0x190\n ? __pfx_insert_page+0x10/0x10\n ? kasan_save_alloc_info+0x38/0x60\n vm_insert_page+0x2e7/0x400\n remap_vmalloc_range_partial+0x212/0x3e0\n remap_vmalloc_range+0x6e/0xb0\n ? __kasan_check_write+0x14/0x30\n rxe_mmap+0x2e9/0x5d0\n ib_uverbs_mmap+0x1ad/0x2c0\n __mmap_region+0x12c2/0x2ad0\n ? __pfx___mmap_region+0x10/0x10\n ? __sanitizer_cov_trace_switch+0x58/0xb0\n ? mas_prev_slot+0x360/0x39c0\n ? __sanitizer_cov_trace_switch+0x58/0xb0\n ? mas_next_slot+0x1e5b/0x2f40\n ? __sanitizer_cov_trace_cmp8+0x18/0x30\n ? unmapped_area_topdown+0x4dd/0x610\n ? kfree+0x1b1/0x440\n ? free_cpumask_var+0x16/0x30\n ? __kasan_slab_free+0x7d/0xa0\n ? __sanitizer_cov_trace_cmp8+0x18/0x30\n mmap_region+0x2e6/0x3c0\n do_mmap+0xa3e/0x12a0\n ? __pfx_do_mmap+0x10/0x10\n ? __kasan_check_write+0x14/0x30\n ? down_write_killable+0xba/0x160\n ? __pfx_down_write_killable+0x10/0x10\n ? __sanitizer_cov_trace_cmp4+0x16/0x30\n vm_mmap_pgoff+0x2d4/0x4a0\n ? __pfx_vm_mmap_pgoff+0x10/0x10\n ? fget+0x1bf/0x270\n ksys_mmap_pgoff+0x40c/0x690\n ? __sanitizer_cov_trace_const_cmp4+0x16/0x30\n ? __pfx_ksys_mmap_pgoff+0x10/0x10\n ? __kasan_check_write+0x14/0x30\n ? _raw_spin_trylock+0xbb/0x130\n ? __pfx__raw_spin_trylock+0x10/0x10\n __x64_sys_mmap+0x135/0x1e0\n x64_sys_c\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64582",
"url": "https://www.suse.com/security/cve/CVE-2026-64582"
},
{
"category": "external",
"summary": "SUSE Bug 1274040 for CVE-2026-64582",
"url": "https://bugzilla.suse.com/1274040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64582"
},
{
"cve": "CVE-2026-68121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68121"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npppoe: reload header pointer after dev_hard_header()\n\npppoe_sendmsg() saves a pointer to the PPPoE header before calling\ndev_hard_header(). Device header callbacks are allowed to reallocate the\nskb head, invalidating pointers into it.\n\nThis can happen when a send is blocked in copy_from_user() while the first\nnon-Ethernet port is added to an empty team device. The team\u0027s delegated\nGRE header callback then expands the skb head. PPPoE subsequently writes\nsix bytes through the stale pointer into the freed head.\n\nReload the PPPoE header through the skb\u0027s network-header offset after\ndevice header creation. pskb_expand_head() updates that offset when it\nrelocates the head.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68121",
"url": "https://www.suse.com/security/cve/CVE-2026-68121"
},
{
"category": "external",
"summary": "SUSE Bug 1274888 for CVE-2026-68121",
"url": "https://bugzilla.suse.com/1274888"
},
{
"category": "external",
"summary": "SUSE Bug 1275228 for CVE-2026-68121",
"url": "https://bugzilla.suse.com/1275228"
},
{
"category": "external",
"summary": "SUSE Bug 1282946 for CVE-2026-68121",
"url": "https://bugzilla.suse.com/1282946"
},
{
"category": "external",
"summary": "SUSE Bug 1282953 for CVE-2026-68121",
"url": "https://bugzilla.suse.com/1282953"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-68121"
},
{
"cve": "CVE-2026-68188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68188"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Fix session UAF in set_termios\n\nrfcomm_tty_set_termios() tests dlc-\u003esession without rfcomm_mutex and\nlater passes the pointer to rfcomm_send_rpn(). The latter dereferences\nboth session-\u003einitiator and session-\u003esock. Meanwhile, krfcommd can\nunlink the DLC and free the session while holding rfcomm_mutex.\n\nThe race can proceed as follows:\n\n TTY ioctl task krfcommd\n -------------- --------\n load dlc-\u003esession\n enter rfcomm_send_rpn()\n lock rfcomm_mutex\n clear dlc-\u003esession\n free session\n unlock rfcomm_mutex\n read session-\u003einitiator\n\nKASAN reported:\n\n BUG: KASAN: slab-use-after-free in rfcomm_send_rpn+0x297/0x2a0\n Read of size 4 at addr ffff88810012a850 by task poc/92\n\n Call Trace:\n rfcomm_send_rpn+0x297/0x2a0\n rfcomm_tty_set_termios+0x50d/0x850\n tty_set_termios+0x596/0x950\n set_termios+0x46a/0x6e0\n tty_mode_ioctl+0x152/0xbd0\n tty_ioctl+0x915/0x1240\n __x64_sys_ioctl+0x134/0x1c0\n\n Allocated by task 92:\n rfcomm_session_add+0x9e/0x2e0\n rfcomm_dlc_open+0x8b1/0xe00\n rfcomm_dev_activate+0x85/0x1a0\n rfcomm_tty_open+0x90/0x280\n\n Freed by task 68:\n kfree+0x131/0x3c0\n rfcomm_session_del+0x119/0x180\n rfcomm_run+0x737/0x4710\n\nAdd rfcomm_dlc_send_rpn(), which holds rfcomm_mutex while it verifies\nthat the DLC is still attached and sends the RPN frame. Have the TTY\npath use the helper and drop its unlocked session check. This keeps the\nsession valid through both the frame construction and socket send.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68188",
"url": "https://www.suse.com/security/cve/CVE-2026-68188"
},
{
"category": "external",
"summary": "SUSE Bug 1274953 for CVE-2026-68188",
"url": "https://bugzilla.suse.com/1274953"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-68188"
},
{
"cve": "CVE-2026-68293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68293"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix MCIA register buffer overflow on 32 dword reads\n\nThe MCIA register can return up to 32 dwords (128 bytes) when the device\nadvertises the mcia_32dwords capability, but struct\nmlx5_ifc_mcia_reg_bits only defines dword_0..11, leaving room for just\n12 dwords (48 bytes) of data.\n\nmlx5_query_mcia() clamps the read size to mlx5_mcia_max_bytes() and then\nmemcpy()s that many bytes out of the register, potentially reading past\nthe end of the \u0027out\u0027 buffer. On kernels built with FORTIFY_SOURCE this\nis caught as a buffer overflow while reading the module EEPROM via\nethtool:\n\n detected buffer overflow in memcpy\n kernel BUG at lib/string_helpers.c:1048!\n RIP: 0010:fortify_panic+0x13/0x20\n Call Trace:\n mlx5_query_mcia.isra.0+0x200/0x210 [mlx5_core]\n mlx5_query_module_eeprom_by_page+0x4a/0xa0 [mlx5_core]\n mlx5e_get_module_eeprom_by_page+0xbb/0x120 [mlx5_core]\n eeprom_prepare_data+0xf3/0x170\n ethnl_default_doit+0xf1/0x3b0\n\nExtend the mcia_reg layout to 32 dwords.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68293",
"url": "https://www.suse.com/security/cve/CVE-2026-68293"
},
{
"category": "external",
"summary": "SUSE Bug 1275091 for CVE-2026-68293",
"url": "https://bugzilla.suse.com/1275091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-68293"
},
{
"cve": "CVE-2026-72261",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-72261"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: ipc3-control: Validate size in snd_sof_update_control\n\nIn snd_sof_update_control(), firmware-provided cdata-\u003enum_elems is\nchecked against local_cdata-\u003edata-\u003esize but never against the actual\nallocation size. If local_cdata-\u003edata-\u003esize was previously set to an\ninconsistent value, the memcpy could write past the allocated buffer.\n\nAdd a bounds check to ensure num_elems fits within the available space\nin the ipc_control_data allocation before copying.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-72261",
"url": "https://www.suse.com/security/cve/CVE-2026-72261"
},
{
"category": "external",
"summary": "SUSE Bug 1277677 for CVE-2026-72261",
"url": "https://bugzilla.suse.com/1277677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-72261"
},
{
"cve": "CVE-2026-80714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80714"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: do not propagate one-packet flag to synced conns\n\nSynced connections can be created before their destination exists. When\nthe destination is later added, ip_vs_bind_dest() copies connection flags\nfrom the destination into cp-\u003eflags.\n\nIP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced\nconnection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed,\nexpiry can treat it as a one-packet connection and skip unlinking the\nexisting conn_tab node, leaving stale hash nodes pointing at a freed\nstruct ip_vs_conn.\n\nDrop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced\nconnections.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80714",
"url": "https://www.suse.com/security/cve/CVE-2026-80714"
},
{
"category": "external",
"summary": "SUSE Bug 1277561 for CVE-2026-80714",
"url": "https://bugzilla.suse.com/1277561"
},
{
"category": "external",
"summary": "SUSE Bug 1277583 for CVE-2026-80714",
"url": "https://bugzilla.suse.com/1277583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80714"
},
{
"cve": "CVE-2026-80844",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80844"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: ah6: validate routing header segments_left\n\nAH6 rearranges routing-header addresses before computing or verifying the\nICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than\nthe number of addresses described by the routing header\u0027s hdrlen field.\n\nThat assumption does not hold for raw IPv6 HDRINCL packets. A packet with\nhdrlen equal to 2 describes one address, but can carry an arbitrary\nsegments_left value. With segments_left equal to 255, the function moves\nits address pointer 4,064 bytes backwards and passes a 4,064-byte length to\nmemmove(), resulting in an out-of-bounds access.\n\nValidate the invariant locally before modifying the routing header or\nperforming any address-pointer arithmetic, and propagate malformed-header\nerrors to the existing AH6 input and output error paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80844",
"url": "https://www.suse.com/security/cve/CVE-2026-80844"
},
{
"category": "external",
"summary": "SUSE Bug 1279786 for CVE-2026-80844",
"url": "https://bugzilla.suse.com/1279786"
},
{
"category": "external",
"summary": "SUSE Bug 1280695 for CVE-2026-80844",
"url": "https://bugzilla.suse.com/1280695"
},
{
"category": "external",
"summary": "SUSE Bug 1282938 for CVE-2026-80844",
"url": "https://bugzilla.suse.com/1282938"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80844"
},
{
"cve": "CVE-2026-81000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81000"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: bound receive headroom\n\ntun_get_user() uses tun-\u003ealign both as skb headroom and when choosing how\nmuch packet data to keep linear. OVS can propagate an oversized headroom\nrequest from another port to TUN or TAP.\n\nWhen align is larger than the usable space in a one-page skb head,\nSKB_MAX_HEAD(align) underflows and the result becomes negative when stored\nin good_linear. That value later wraps when assigned to the size_t linear\nvariable, and tun_alloc_skb() can place skb-\u003edata outside the allocated\nhead.\n\nBound the headroom stored by TUN to the one-page skb-head budget and the\nlargest non-sentinel 16-bit skb header offset. Leave one linear byte for\nraw TUN and a complete Ethernet header for TAP, including NET_IP_ALIGN.\n\nAlso pull the raw-TUN protocol byte and the TAP Ethernet header before\naccessing them, so these checks remain safe for nonlinear skbs supplied by\nother allocation paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81000",
"url": "https://www.suse.com/security/cve/CVE-2026-81000"
},
{
"category": "external",
"summary": "SUSE Bug 1280263 for CVE-2026-81000",
"url": "https://bugzilla.suse.com/1280263"
},
{
"category": "external",
"summary": "SUSE Bug 1280265 for CVE-2026-81000",
"url": "https://bugzilla.suse.com/1280265"
},
{
"category": "external",
"summary": "SUSE Bug 1282946 for CVE-2026-81000",
"url": "https://bugzilla.suse.com/1282946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-81000"
},
{
"cve": "CVE-2026-89480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-89480"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: reject a read that transferred too few bytes\n\nnvme_tcp_recv_data() completes a request once the current C2HData PDU\nhas been consumed. Nothing compares the total bytes received against\nthe length the command asked for: struct nvme_tcp_request has no\nreceive-side counter, queue-\u003edata_remaining is per queue, and\nblk_mq_end_request() completes for blk_rq_bytes(rq) unconditionally\nwith no residual concept anywhere above.\n\nA controller can therefore answer a 4096-byte read with 512 bytes and\nhave it reported as a complete read; user space then gets 4096 bytes of\nwhich 3584 are whatever was already in the page. I reproduced that with\na test target.\n\nCount the bytes received and refuse to complete a successful read whose\ncount does not match, at the two NVME_TCP_F_DATA_SUCCESS paths and in\nnvme_tcp_process_nvme_cqe(). The success test shifts req-\u003estatus right\nby one, because the driver keeps the wire value there and shifts it on\ncompletion, so the check must see what the completion path will see.\nOnly REQ_OP_READ is checked, because there the length comes from the\nsectors the request covers; a passthrough command is built by its\nsubmitter, which picks both command and buffer, so the kernel has\nnothing to compare against.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-89480",
"url": "https://www.suse.com/security/cve/CVE-2026-89480"
},
{
"category": "external",
"summary": "SUSE Bug 1280449 for CVE-2026-89480",
"url": "https://bugzilla.suse.com/1280449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-89480"
},
{
"cve": "CVE-2026-89846",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-89846"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read\n\nIn qla2x00_status_entry(), the FWI2 status path advances sense_data and\nshrinks par_sense_len by rsp_info_len:\n\n\tif (IS_FWI2_CAPABLE(ha)) {\n\t\tsense_data += rsp_info_len;\n\t\tpar_sense_len -= rsp_info_len;\n\t}\n\nrsp_info_len is a 32-bit value taken directly from the target\u0027s FCP\nresponse (sf.rsp_data_len), while par_sense_len is the IOCB data area\nsize (28 bytes for 24xx, 60 bytes for 29xx). A hostile or buggy target\nreporting an rsp_info_len larger than par_sense_len makes the unsigned\nsubtraction underflow to a huge value and advances sense_data out of\nbounds.\n\nThe underflowed par_sense_len then defeats the cap in\nqla2x00_handle_sense():\n\n\tif (sense_len \u003e par_sense_len)\n\t\tsense_len = par_sense_len;\n\tmemcpy(cp-\u003esense_buffer, sense_data, sense_len);\n\nso the memcpy reads up to SCSI_SENSE_BUFFERSIZE bytes from the\nout-of-bounds sense_data pointer, leaking adjacent response-ring/heap\nmemory into the command\u0027s sense buffer.\n\nClamp rsp_info_len to par_sense_len before the subtraction so\npar_sense_len can never underflow and sense_data stays within the IOCB\ndata area. The fix sits before the comp_status switch, covering both\nqla2x00_handle_sense() call sites.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-89846",
"url": "https://www.suse.com/security/cve/CVE-2026-89846"
},
{
"category": "external",
"summary": "SUSE Bug 1281184 for CVE-2026-89846",
"url": "https://bugzilla.suse.com/1281184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.168.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.168.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.168.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-24T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-89846"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…