{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-40341: futex: Don\u0027t leak robust_list pointer on exec race (bsc#1255029).\n- CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).\n- CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).\n- CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).\n- CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).\n- CVE-2026-31466: mm/huge_memory: fix folio isn\u0027t locked in softleaf_to_folio() (bsc#1267825).\n- CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).\n- CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).\n- CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).\n- CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).\n- CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).\n- CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).\n- CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).\n- CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).\n- CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).\n- CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).\n- CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).\n- CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).\n- CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).\n- CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).\n- CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).\n- CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).\n- CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).\n- CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).\n- CVE-2026-43303: mm/page_alloc: clear page-\u003eprivate in free_pages_prepare() (bsc#1264974).\n- CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).\n- CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).\n- CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).\n- CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).\n- CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).\n- CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).\n- CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).\n- CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).\n- CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).\n- CVE-2026-45912: ext4: don\u0027t cache extent during splitting extent (bsc#1266899).\n- CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).\n- CVE-2026-45985: ext4: don\u0027t set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).\n- CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).\n- CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).\n- CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).\n- CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).\n- CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).\n- CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).\n- CVE-2026-46076: KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1 (bsc#1267365).\n- CVE-2026-46112: RDMA/hns: Fix unlocked call to hns_roce_qp_remove() (bsc#1267582).\n- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267369).\n- CVE-2026-46124: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).\n- CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).\n- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267722).\n- CVE-2026-46185: smb/client: fix out-of-bounds read in symlink_data() (bsc#1266830).\n- CVE-2026-46214: vsock/virtio: fix accept queue count leak on transport mismatch (bsc#1267717).\n- CVE-2026-46229: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).\n- CVE-2026-46253: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).\n- CVE-2026-46254: AppArmor: Allow apparmor to handle unaligned dfa tables (bsc#1267637).\n- CVE-2026-46266: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).\n- CVE-2026-46289: lib/scatterlist: fix length calculations in extract_kvec_to_sg (bsc#1267966).\n- CVE-2026-46291: crypto: caam - guard HMAC key hex dumps in hash_digest_key (bsc#1267937).\n- CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268022).\n- CVE-2026-46320: tap: free page on error paths in tap_get_user_xdp() (bsc#1267993).\n- CVE-2026-46328: apparmor: fix rlimit for posix cpu timers (bsc#1268037).\n- CVE-2026-52908: RDMA: During rereg_mr ensure that REREG_ACCESS is compatible (bsc#1268661).\n- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268660).\n- CVE-2026-52918: Bluetooth: serialize accept_q access (bsc#1269100).\n- CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269033).\n- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269022).\n- CVE-2026-52954: libceph: handle rbtree insertion error in decode_choose_args() (bsc#1269137).\n- CVE-2026-52957: libceph: Fix potential null-ptr-deref in decode_choose_args() (bsc#1269103).\n- CVE-2026-52962: ceph: fix a buffer leak in __ceph_setxattr() (bsc#1269135).\n- CVE-2026-52969: KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (bsc#1269184).\n- CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269195).\n- CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269090).\n- CVE-2026-53040: ocfs2: validate bg_bits during freefrag scan (bsc#1269397).\n- CVE-2026-53041: ocfs2: fix listxattr handling when the buffer is full (bsc#1269398).\n- CVE-2026-53052: ASoC: qcom: qdsp6: topology: check widget type before accessing data (bsc#1269314).\n- CVE-2026-53053: iommu/amd: Fix clone_alias() to use the original device\u0027s devid (bsc#1269310).\n- CVE-2026-53071: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (bsc#1269678).\n- CVE-2026-53072: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (bsc#1269681).\n- CVE-2026-53122: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit (bsc#1269418).\n- CVE-2026-53133: RDMA/umem: Fix truncation for block sizes \u003e= 4G (bsc#1269821).\n- CVE-2026-53138: drm/amd/display: Bound VBIOS record-chain walk loops (bsc#1269281).\n- CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269884).\n- CVE-2026-53253: Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (bsc#1269574).\n- CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136).\n- CVE-2026-53281: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (bsc#1269519).\n- CVE-2026-53287: audit: fix incorrect inheritable capability in CAPSET records (bsc#1269506).\n- CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270059).\n- CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269493).\n\nThe following non security issues were fixed:\n\n- ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() (git-fixes).\n- ACPI: resource: Amend kernel-doc style (git-fixes).\n- ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser (git-fixes).\n- ALSA: firewire: isight: bound the sample count to the packet payload (git-fixes).\n- ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (stable-fixes).\n- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() (git-fixes).\n- ALSA: timer: Fix UAF at snd_timer_user_params() (stable-fixes).\n- ALSA: usb-audio: avoid kobject path lookup in DualSense match (git-fixes).\n- ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (git-fixes).\n- ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (git-fixes).\n- ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (git-fixes).\n- ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (git-fixes).\n- Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (stable-fixes).\n- bus: mhi: ep: Add missing state_lock protection for mhi_state access (git-fixes).\n- bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() (git-fixes).\n- bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path (git-fixes).\n- char: tlclk: fix use-after-free in tlclk_cleanup() (git-fixes).\n- dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK (git-fixes).\n- dmaengine: Fix possible use after free (git-fixes).\n- dmaengine: imx-sdma: Refine spba bus searching in probe (git-fixes).\n- dmaengine: qcom: gpi: set DMA_PRIVATE capability (git-fixes).\n- dmaengine: tegra: Fix burst size calculation (git-fixes).\n- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (stable-fixes).\n- drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT (git-fixes).\n- drm/amdgpu: initialize irq.lock spinlock earlier (git-fixes).\n- drm/amdgpu: restart the CS if some parts of the VM are still invalidated (stable-fixes).\n- drm/amdgpu: skip already suspended IP blocks in ip_suspend_phase2 (git-fixes).\n- drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 (git-fixes).\n- drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free (git-fixes).\n- drm/amdkfd: Check for pdd drm file first in CRIU restore path (stable-fixes).\n- drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (git-fixes).\n- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (stable-fixes).\n- drm/dp: Add eDP 1.5 bit definition (stable-fixes).\n- drm/edid: fix OOB read in drm_parse_tiled_block() (git-fixes).\n- drm/i915/gem: Add missing nospec on parallel submit slot (git-fixes).\n- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (stable-fixes).\n- drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() (git-fixes).\n- drm/nouveau: fix reversed error cleanup order in ucopy functions (git-fixes).\n- fpga: dfl: add bounds check in dfh_get_param_size() (git-fixes).\n- fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() (git-fixes).\n- fpga: region: fix use-after-free in child_regions_with_firmware() (git-fixes).\n- HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter (git-fixes).\n- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse (stable-fixes).\n- HID: wacom: stop hardware after post-start probe failures (git-fixes).\n- HID: wiimote: Fix table layout and whitespace errors (git-fixes).\n- hv_balloon: Simplify data output in hv_balloon_debug_show() (git-fixes).\n- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl (stable-fixes).\n- i2c: mpc: Fix timeout calculations (git-fixes).\n- i2c: stm32f7: truncate clock period instead of rounding it (git-fixes).\n- i3c: master: Prevent reuse of dynamic address on device add failure (git-fixes).\n- iio: accel: mma8452: handle I2C read error(s) in mma8452_read() (git-fixes).\n- iio: adc: npcm: Convert to platform remove callback returning void (stable-fixes).\n- iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling (git-fixes).\n- iio: chemical: scd30: Cleanup initializations and fix sign-extension bug (git-fixes).\n- iio: chemical: scd30: fix division by zero in write_raw (git-fixes).\n- iio: chemical: scd30: Use guard(mutex) to allow early returns (stable-fixes).\n- iio: gyro: bmg160: bail out when bandwidth/filter is not in table (git-fixes).\n- iio: gyro: bmg160: wait full startup time after mode change at probe (git-fixes).\n- iio: light: opt3001: fix missing state reset on timeout (git-fixes).\n- iio: light: si1133: prevent race condition on timeout (git-fixes).\n- iio: light: si1133: reset counter to prevent race condition (git-fixes).\n- iio: light: veml6030: fix channel type when pushing events (git-fixes).\n- iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call (git-fixes).\n- iio: magnetometer: ak8975: fix potential kernel stack memory leak (git-fixes).\n- iio: tcs3472: power down chip on probe failure (git-fixes).\n- iio: temperature: ltc2983: Fix reinit_completion() called after conversion start (git-fixes).\n- Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) (stable-fixes).\n- Input: elan_i2c - validate firmware size before use (stable-fixes).\n- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 (stable-fixes).\n- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (git-fixes).\n- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (git-fixes).\n- Input: xpad - add \"Nova 2 Lite\" from GameSir (stable-fixes).\n- Input: xpad - add support for ASUS ROG RAIKIRI II (stable-fixes).\n- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (git-fixes).\n- KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (git-fixes).\n- KVM: SVM: Truncate INVLPGA address in compatibility mode (git-fixes).\n- KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode (git-fixes).\n- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (git-fixes).\n- KVM: x86/mmu: Recursively zap orphaned nested TDP shadow pages on emulated writes (git-fixes).\n- KVM: x86: hyper-v: Bound the bank index when querying sparse banks (git-fixes).\n- KVM: x86: ioapic: Use old_dest_mode consistently in ioapic_write_indirect() (git-fixes).\n- KVM: x86: Move update_cr8_intercept() to lapic.c (git-fixes).\n- KVM: x86: Unconditionally recompute CR8 intercept on PPR update (git-fixes).\n- leds: uleds: Fix potential buffer overread (git-fixes).\n- loadpin: Prevent SECURITY_LOADPIN_ENFORCE=y without module decompression (jsc#PED-16303).\n- loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported (jsc#PED-16303).\n- mailbox: mtk-adsp: fix UAF during device teardown (git-fixes).\n- media: aspeed: fix missing of_reserved_mem_device_release() on probe failure (git-fixes).\n- media: cec: seco: unregister adapter on IR probe failure (git-fixes).\n- media: cedrus: Fix failure to clean up hardware on probe failure (git-fixes).\n- media: cedrus: Fix missing cleanup in error path (git-fixes).\n- media: cedrus: skip invalid H.264 reference list entries (git-fixes).\n- media: marvell-cam: fix missing pci_disable_device() on remove (git-fixes).\n- media: mtk-jpeg: cancel workqueue on release for supported platforms only (git-fixes).\n- media: pci: dm1105: Free allocated workqueue (git-fixes).\n- media: ti: vpe: unwind v4l2 device registration on probe error (git-fixes).\n- media: v4l2-ctrls: validate HEVC active reference counts (git-fixes).\n- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (git-fixes).\n- media: vidtv: fix reference leak on failed device registration (git-fixes).\n- media: vimc: fix reference leak on failed device registration (git-fixes).\n- media: vpif_capture: fix OF node reference imbalance (git-fixes).\n- module: fix init_module_from_file() error handling (jsc#PED-16303).\n- module: make waiting for a concurrent module loader interruptible (jsc#PED-16303).\n- module: Split modules_install compression and in-kernel decompression (jsc#PED-16303).\n- module: split up \u0027finit_module()\u0027 into init_module_from_file() helper (jsc#PED-16303).\n- module: warn about excessively long module waits (jsc#PED-16303).\n- modules: catch concurrent module loads, treat them as idempotent (jsc#PED-16303).\n- mtd: maps: vmu-flash: fix NULL pointer dereference in initialization (git-fixes).\n- mtd: rawnand: fix condition in \u0027nand_select_target()\u0027 (git-fixes).\n- mtd: rawnand: pl353: fix probe resource allocation (git-fixes).\n- mtd: slram: remove failed entries from the device list (git-fixes).\n- mtd: spi-nor: Drop duplicate Kconfig dependency (git-fixes).\n- mtd: spi-nor: swp: Improve locking user experience (git-fixes).\n- net: aquantia: Add missing descriptor cache invalidation on ATL2 (bsc#1268428).\n- net: mana: Add support for PF device 0x00C1 (bsc#1268237).\n- net: mana: Allocate interrupt context for each EQ when creating vPort (git-fixes).\n- net: mana: Create separate EQs for each vPort (git-fixes).\n- net: mana: Fall back to standard MTU when PF reports adapter_mtu of 0 (git-fixes).\n- net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check (git-fixes).\n- net: mana: initialize gdma queue id to INVALID_QUEUE_ID (git-fixes).\n- net: mana: Introduce GIC context with refcounting for interrupt management (git-fixes).\n- net: mana: Optimize irq affinity for low vcpu configs (git-fixes).\n- net: mana: Query device capabilities and configure MSI-X sharing for EQs (git-fixes).\n- net: mana: Use GIC functions to allocate global EQs (git-fixes).\n- nfc: hci: fix out-of-bounds read in HCP header parsing (git-fixes).\n- nfc: llcp: Fix use-after-free in llcp_sock_release() (git-fixes).\n- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (git-fixes).\n- platform/x86: xo15-ebook: Fix wakeup source and GPE handling (git-fixes).\n- power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() (git-fixes).\n- power: supply: charger-manager: fix refcount leak in is_full_charged() (git-fixes).\n- power: supply: core: fix supplied_from allocations (git-fixes).\n- power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak (git-fixes).\n- powerpc/boot: Allow text relocations for pseries wrapper with binutils 2.46+ (git-fixes).\n- RDMA/mana_ib: Allocate interrupt contexts on EQs (git-fixes).\n- RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed (git-fixes).\n- rtc: abx80x: fix the RTC_VL_CLR clearing all status flags (git-fixes).\n- rtc: cmos: unregister HPET IRQ handler on probe failure (git-fixes).\n- rtc: ds1307: Fix off-by-one issue with wday for rx8130 (git-fixes).\n- rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 (git-fixes).\n- rtc: mpfs: fix counter upload completion condition (git-fixes).\n- rtc: msc313: fix NULL deref in shared IRQ handler at probe (git-fixes).\n- scsi: storvsc: Replace symbolic permissions with octal (git-fixes).\n- scsi: target: Fix hexadecimal CHAP_I handling (git-fixes).\n- serdev: make serdev_bus_type const (stable-fixes).\n- spi: dw: fix wrong BAUDR setting after resume (git-fixes).\n- spi: rpc-if: Use correct device for hardware reinitialization on resume (git-fixes).\n- spi: uniphier: Fix completion initialization order before devm_request_irq() (git-fixes).\n- Split off kABI workaround for bsc#1267458 (bsc#1267458).\n- staging: most: video: avoid double free on video register failure (git-fixes).\n- staging: nvec: fix use-after-free in nvec_rx_completed() (git-fixes).\n- thermal: intel: Fix dangling resources on thermal_throttle_online() failure (git-fixes).\n- tpm: fix event_size output in tpm1_binary_bios_measurements_show (git-fixes).\n- tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() (git-fixes).\n- usb: core: Fix SuperSpeed root hub wMaxPacketSize (stable-fixes).\n- usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval (stable-fixes).\n- usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo (git-fixes).\n- usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() (git-fixes).\n- usb: host: max3421: Reject hub port requests for non-existent ports (git-fixes).\n- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers (stable-fixes).\n- USB: serial: option: add MeiG SRM813Q (stable-fixes).\n- USB: serial: option: add usb-id for Dell Wireless DW5826e-m (stable-fixes).\n- usb: storage: Add quirks for PNY Elite Portable SSD (stable-fixes).\n- usb: typec: altmodes/displayport: validate count before reading Status Update VDO (stable-fixes).\n- usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT (stable-fixes).\n- usb: typec: ucsi: ccg: reject firmware images without a \u0027:\u0027 record header (stable-fixes).\n- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (stable-fixes).\n- usb: typec: ucsi: validate connector number in ucsi_connector_change() (stable-fixes).\n- usb: typec: wcove: don\u0027t write past struct pd_message in wcove_read_rx_buffer() (stable-fixes).\n- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (git-fixes).\n- x86/platform/uv: Expose the uv_hub_type() interface (jsc#PED-16305).\n- x86/tsc: Disable clocksource watchdog checking on recent and future UV platforms (jsc#PED-16305).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-kernel-501",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22665-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:22665-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622665-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:22665-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027660.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1255029",
        "url": "https://bugzilla.suse.com/1255029"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261604",
        "url": "https://bugzilla.suse.com/1261604"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262618",
        "url": "https://bugzilla.suse.com/1262618"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262655",
        "url": "https://bugzilla.suse.com/1262655"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263072",
        "url": "https://bugzilla.suse.com/1263072"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263560",
        "url": "https://bugzilla.suse.com/1263560"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263573",
        "url": "https://bugzilla.suse.com/1263573"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263998",
        "url": "https://bugzilla.suse.com/1263998"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264001",
        "url": "https://bugzilla.suse.com/1264001"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264015",
        "url": "https://bugzilla.suse.com/1264015"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264228",
        "url": "https://bugzilla.suse.com/1264228"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264230",
        "url": "https://bugzilla.suse.com/1264230"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264236",
        "url": "https://bugzilla.suse.com/1264236"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264241",
        "url": "https://bugzilla.suse.com/1264241"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264254",
        "url": "https://bugzilla.suse.com/1264254"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264258",
        "url": "https://bugzilla.suse.com/1264258"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264261",
        "url": "https://bugzilla.suse.com/1264261"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264286",
        "url": "https://bugzilla.suse.com/1264286"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264294",
        "url": "https://bugzilla.suse.com/1264294"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264320",
        "url": "https://bugzilla.suse.com/1264320"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264337",
        "url": "https://bugzilla.suse.com/1264337"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264562",
        "url": "https://bugzilla.suse.com/1264562"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264612",
        "url": "https://bugzilla.suse.com/1264612"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264734",
        "url": "https://bugzilla.suse.com/1264734"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264748",
        "url": "https://bugzilla.suse.com/1264748"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264814",
        "url": "https://bugzilla.suse.com/1264814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264974",
        "url": "https://bugzilla.suse.com/1264974"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265113",
        "url": "https://bugzilla.suse.com/1265113"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265421",
        "url": "https://bugzilla.suse.com/1265421"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265629",
        "url": "https://bugzilla.suse.com/1265629"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266008",
        "url": "https://bugzilla.suse.com/1266008"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266396",
        "url": "https://bugzilla.suse.com/1266396"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266700",
        "url": "https://bugzilla.suse.com/1266700"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266717",
        "url": "https://bugzilla.suse.com/1266717"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266734",
        "url": "https://bugzilla.suse.com/1266734"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266830",
        "url": "https://bugzilla.suse.com/1266830"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266847",
        "url": "https://bugzilla.suse.com/1266847"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266899",
        "url": "https://bugzilla.suse.com/1266899"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266928",
        "url": "https://bugzilla.suse.com/1266928"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266929",
        "url": "https://bugzilla.suse.com/1266929"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267228",
        "url": "https://bugzilla.suse.com/1267228"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267365",
        "url": "https://bugzilla.suse.com/1267365"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267369",
        "url": "https://bugzilla.suse.com/1267369"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267427",
        "url": "https://bugzilla.suse.com/1267427"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267430",
        "url": "https://bugzilla.suse.com/1267430"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267437",
        "url": "https://bugzilla.suse.com/1267437"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267458",
        "url": "https://bugzilla.suse.com/1267458"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267567",
        "url": "https://bugzilla.suse.com/1267567"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267582",
        "url": "https://bugzilla.suse.com/1267582"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267591",
        "url": "https://bugzilla.suse.com/1267591"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267635",
        "url": "https://bugzilla.suse.com/1267635"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267637",
        "url": "https://bugzilla.suse.com/1267637"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267684",
        "url": "https://bugzilla.suse.com/1267684"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267717",
        "url": "https://bugzilla.suse.com/1267717"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267722",
        "url": "https://bugzilla.suse.com/1267722"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267825",
        "url": "https://bugzilla.suse.com/1267825"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267918",
        "url": "https://bugzilla.suse.com/1267918"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267937",
        "url": "https://bugzilla.suse.com/1267937"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267966",
        "url": "https://bugzilla.suse.com/1267966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267993",
        "url": "https://bugzilla.suse.com/1267993"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268022",
        "url": "https://bugzilla.suse.com/1268022"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268037",
        "url": "https://bugzilla.suse.com/1268037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268237",
        "url": "https://bugzilla.suse.com/1268237"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268335",
        "url": "https://bugzilla.suse.com/1268335"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268428",
        "url": "https://bugzilla.suse.com/1268428"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268660",
        "url": "https://bugzilla.suse.com/1268660"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268661",
        "url": "https://bugzilla.suse.com/1268661"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269022",
        "url": "https://bugzilla.suse.com/1269022"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269033",
        "url": "https://bugzilla.suse.com/1269033"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269090",
        "url": "https://bugzilla.suse.com/1269090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269100",
        "url": "https://bugzilla.suse.com/1269100"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269103",
        "url": "https://bugzilla.suse.com/1269103"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269135",
        "url": "https://bugzilla.suse.com/1269135"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269136",
        "url": "https://bugzilla.suse.com/1269136"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269137",
        "url": "https://bugzilla.suse.com/1269137"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269184",
        "url": "https://bugzilla.suse.com/1269184"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269195",
        "url": "https://bugzilla.suse.com/1269195"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269281",
        "url": "https://bugzilla.suse.com/1269281"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269310",
        "url": "https://bugzilla.suse.com/1269310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269314",
        "url": "https://bugzilla.suse.com/1269314"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269397",
        "url": "https://bugzilla.suse.com/1269397"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269398",
        "url": "https://bugzilla.suse.com/1269398"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269418",
        "url": "https://bugzilla.suse.com/1269418"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269493",
        "url": "https://bugzilla.suse.com/1269493"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269506",
        "url": "https://bugzilla.suse.com/1269506"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269519",
        "url": "https://bugzilla.suse.com/1269519"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269574",
        "url": "https://bugzilla.suse.com/1269574"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269678",
        "url": "https://bugzilla.suse.com/1269678"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269681",
        "url": "https://bugzilla.suse.com/1269681"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269798",
        "url": "https://bugzilla.suse.com/1269798"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269821",
        "url": "https://bugzilla.suse.com/1269821"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269884",
        "url": "https://bugzilla.suse.com/1269884"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1270059",
        "url": "https://bugzilla.suse.com/1270059"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-40341 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-40341/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-71294 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-71294/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23451 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23451/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31450 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31450/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31462 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31462/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31466 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31466/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31502 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31502/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31670 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31670/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-31677 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-31677/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43010 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43010/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43022 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43022/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43034 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43034/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43079 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43080 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43081 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43085 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43085/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43086 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43089 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43089/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43093 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43093/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43107 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43107/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43128 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43128/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43139 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43139/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43233 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43233/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43238 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43238/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43303 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43303/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43336 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43336/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43420 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43420/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43456 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43456/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43472 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43472/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43492 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43492/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-43502 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-43502/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45838 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45838/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45848 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45848/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45891 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45891/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45912 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45912/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45948 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45948/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45985 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45985/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46028 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46028/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46053 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46053/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46063 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46063/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46065 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46065/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46069 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46069/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46071 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46071/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46076 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46076/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46112 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46112/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46116 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46124 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46124/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46133 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46133/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46173 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46173/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46185 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46185/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46214 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46214/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46229 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46229/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46253 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46253/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46254 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46254/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46266 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46266/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46274 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46274/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46289 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46289/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46291 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46291/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46319 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46319/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46320 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46320/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46328 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46328/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46331 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46331/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52908 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52908/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52909 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52909/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52918 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52923 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52923/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52943 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52943/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52954 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52954/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52957 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52957/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52962 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52962/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52969 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52969/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-52972 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-52972/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53016 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53016/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53040 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53040/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53041 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53052 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53052/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53053 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53053/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53071 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53071/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53072 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53072/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53122 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53122/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53133 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53133/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53138 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53138/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53182 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53182/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53253 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53253/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53266 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53266/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53281 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53281/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53287 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53287/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53359 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53359/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53362 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53362/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2026-09-16T20:04:03Z",
      "generator": {
        "date": "2026-07-06T13:11:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:22665-1",
      "initial_release_date": "2026-07-06T13:11:35Z",
      "revision_history": [
        {
          "date": "2026-07-06T13:11:35Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T19:15:12Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:04:03Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-6.4.0-49.1.aarch64",
                "product": {
                  "name": "kernel-default-6.4.0-49.1.aarch64",
                  "product_id": "kernel-default-6.4.0-49.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-49.1?arch=aarch64\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-6.4.0-49.1.aarch64",
                "product": {
                  "name": "kernel-default-devel-6.4.0-49.1.aarch64",
                  "product_id": "kernel-default-devel-6.4.0-49.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-devel@6.4.0-49.1?arch=aarch64\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-6.4.0-49.1.noarch",
                "product": {
                  "name": "kernel-devel-6.4.0-49.1.noarch",
                  "product_id": "kernel-devel-6.4.0-49.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@6.4.0-49.1?arch=noarch\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-6.4.0-49.1.noarch",
                "product": {
                  "name": "kernel-macros-6.4.0-49.1.noarch",
                  "product_id": "kernel-macros-6.4.0-49.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-macros@6.4.0-49.1?arch=noarch\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-6.4.0-49.1.noarch",
                "product": {
                  "name": "kernel-source-6.4.0-49.1.noarch",
                  "product_id": "kernel-source-6.4.0-49.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-source@6.4.0-49.1?arch=noarch\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-6.4.0-49.1.ppc64le",
                "product": {
                  "name": "kernel-default-6.4.0-49.1.ppc64le",
                  "product_id": "kernel-default-6.4.0-49.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-49.1?arch=ppc64le\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-6.4.0-49.1.ppc64le",
                "product": {
                  "name": "kernel-default-devel-6.4.0-49.1.ppc64le",
                  "product_id": "kernel-default-devel-6.4.0-49.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-devel@6.4.0-49.1?arch=ppc64le\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-6.4.0-49.1.s390x",
                "product": {
                  "name": "kernel-default-6.4.0-49.1.s390x",
                  "product_id": "kernel-default-6.4.0-49.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-49.1?arch=s390x\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-6.4.0-49.1.s390x",
                "product": {
                  "name": "kernel-default-devel-6.4.0-49.1.s390x",
                  "product_id": "kernel-default-devel-6.4.0-49.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-devel@6.4.0-49.1?arch=s390x\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-livepatch-6.4.0-49.1.s390x",
                "product": {
                  "name": "kernel-default-livepatch-6.4.0-49.1.s390x",
                  "product_id": "kernel-default-livepatch-6.4.0-49.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-livepatch@6.4.0-49.1?arch=s390x\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-6.4.0-49.1.x86_64",
                "product": {
                  "name": "kernel-default-6.4.0-49.1.x86_64",
                  "product_id": "kernel-default-6.4.0-49.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default@6.4.0-49.1?arch=x86_64\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-6.4.0-49.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-6.4.0-49.1.x86_64",
                  "product_id": "kernel-default-devel-6.4.0-49.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-devel@6.4.0-49.1?arch=x86_64\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-livepatch-6.4.0-49.1.x86_64",
                "product": {
                  "name": "kernel-default-livepatch-6.4.0-49.1.x86_64",
                  "product_id": "kernel-default-livepatch-6.4.0-49.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-default-livepatch@6.4.0-49.1?arch=x86_64\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-6.4.0-49.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-6.4.0-49.1.x86_64",
                  "product_id": "kernel-kvmsmall-6.4.0-49.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:6.4.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-kvmsmall@6.4.0-49.1?arch=x86_64\u0026upstream=kernel-source-6.4.0-49.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-6.4.0-49.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64"
        },
        "product_reference": "kernel-default-6.4.0-49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-6.4.0-49.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le"
        },
        "product_reference": "kernel-default-6.4.0-49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-6.4.0-49.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x"
        },
        "product_reference": "kernel-default-6.4.0-49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-6.4.0-49.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64"
        },
        "product_reference": "kernel-default-6.4.0-49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-6.4.0-49.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64"
        },
        "product_reference": "kernel-default-devel-6.4.0-49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-6.4.0-49.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le"
        },
        "product_reference": "kernel-default-devel-6.4.0-49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-6.4.0-49.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x"
        },
        "product_reference": "kernel-default-devel-6.4.0-49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-6.4.0-49.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64"
        },
        "product_reference": "kernel-default-devel-6.4.0-49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-livepatch-6.4.0-49.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x"
        },
        "product_reference": "kernel-default-livepatch-6.4.0-49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-livepatch-6.4.0-49.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64"
        },
        "product_reference": "kernel-default-livepatch-6.4.0-49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-6.4.0-49.1.noarch as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch"
        },
        "product_reference": "kernel-devel-6.4.0-49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-6.4.0-49.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-6.4.0-49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-6.4.0-49.1.noarch as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch"
        },
        "product_reference": "kernel-macros-6.4.0-49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-6.4.0-49.1.noarch as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        },
        "product_reference": "kernel-source-6.4.0-49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-40341",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-40341"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex: Don\u0027t leak robust_list pointer on exec race\n\nsys_get_robust_list() and compat_get_robust_list() use ptrace_may_access()\nto check if the calling task is allowed to access another task\u0027s\nrobust_list pointer. This check is racy against a concurrent exec() in the\ntarget process.\n\nDuring exec(), a task may transition from a non-privileged binary to a\nprivileged one (e.g., setuid binary) and its credentials/memory mappings\nmay change. If get_robust_list() performs ptrace_may_access() before\nthis transition, it may erroneously allow access to sensitive information\nafter the target becomes privileged.\n\nA racy access allows an attacker to exploit a window during which\nptrace_may_access() passes before a target process transitions to a\nprivileged state via exec().\n\nFor example, consider a non-privileged task T that is about to execute a\nsetuid-root binary. An attacker task A calls get_robust_list(T) while T\nis still unprivileged. Since ptrace_may_access() checks permissions\nbased on current credentials, it succeeds. However, if T begins exec\nimmediately afterwards, it becomes privileged and may change its memory\nmappings. Because get_robust_list() proceeds to access T-\u003erobust_list\nwithout synchronizing with exec() it may read user-space pointers from a\nnow-privileged process.\n\nThis violates the intended post-exec access restrictions and could\nexpose sensitive memory addresses or be used as a primitive in a larger\nexploit chain. Consequently, the race can lead to unauthorized\ndisclosure of information across privilege boundaries and poses a\npotential security risk.\n\nTake a read lock on signal-\u003eexec_update_lock prior to invoking\nptrace_may_access() and accessing the robust_list/compat_robust_list.\nThis ensures that the target task\u0027s exec state remains stable during the\ncheck, allowing for consistent and synchronized validation of\ncredentials.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-40341",
          "url": "https://www.suse.com/security/cve/CVE-2025-40341"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1255029 for CVE-2025-40341",
          "url": "https://bugzilla.suse.com/1255029"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-40341"
    },
    {
      "cve": "CVE-2025-71294",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-71294"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix NULL pointer issue buffer funcs\n\nIf SDMA block not enabled, buffer_funcs will not initialize,\nfix the null pointer issue if buffer_funcs not initialized.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-71294",
          "url": "https://www.suse.com/security/cve/CVE-2025-71294"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264562 for CVE-2025-71294",
          "url": "https://bugzilla.suse.com/1264562"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-71294"
    },
    {
      "cve": "CVE-2026-23451",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23451"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: prevent potential infinite loop in bond_header_parse()\n\nbond_header_parse() can loop if a stack of two bonding devices is setup,\nbecause skb-\u003edev always points to the hierarchy top.\n\nAdd new \"const struct net_device *dev\" parameter to\n(struct header_ops)-\u003eparse() method to make sure the recursion\nis bounded, and that the final leaf parse method is called.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23451",
          "url": "https://www.suse.com/security/cve/CVE-2026-23451"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261604 for CVE-2026-23451",
          "url": "https://bugzilla.suse.com/1261604"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-23451"
    },
    {
      "cve": "CVE-2026-31450",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31450"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: publish jinode after initialization\n\next4_inode_attach_jinode() publishes ei-\u003ejinode to concurrent users.\nIt used to set ei-\u003ejinode before jbd2_journal_init_jbd_inode(),\nallowing a reader to observe a non-NULL jinode with i_vfs_inode\nstill unset.\n\nThe fast commit flush path can then pass this jinode to\njbd2_wait_inode_data(), which dereferences i_vfs_inode-\u003ei_mapping and\nmay crash.\n\nBelow is the crash I observe:\n```\nBUG: unable to handle page fault for address: 000000010beb47f4\nPGD 110e51067 P4D 110e51067 PUD 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 1 UID: 0 PID: 4850 Comm: fc_fsync_bench_ Not tainted 6.18.0-00764-g795a690c06a5 #1 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.17.0-2-2 04/01/2014\nRIP: 0010:xas_find_marked+0x3d/0x2e0\nCode: e0 03 48 83 f8 02 0f 84 f0 01 00 00 48 8b 47 08 48 89 c3 48 39 c6 0f 82 fd 01 00 00 48 85 c9 74 3d 48 83 f9 03 77 63 4c 8b 0f \u003c49\u003e 8b 71 08 48 c7 47 18 00 00 00 00 48 89 f1 83 e1 03 48 83 f9 02\nRSP: 0018:ffffbbee806e7bf0 EFLAGS: 00010246\nRAX: 000000000010beb4 RBX: 000000000010beb4 RCX: 0000000000000003\nRDX: 0000000000000001 RSI: 0000002000300000 RDI: ffffbbee806e7c10\nRBP: 0000000000000001 R08: 0000002000300000 R09: 000000010beb47ec\nR10: ffff9ea494590090 R11: 0000000000000000 R12: 0000002000300000\nR13: ffffbbee806e7c90 R14: ffff9ea494513788 R15: ffffbbee806e7c88\nFS: 00007fc2f9e3e6c0(0000) GS:ffff9ea6b1444000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000010beb47f4 CR3: 0000000119ac5000 CR4: 0000000000750ef0\nPKRU: 55555554\nCall Trace:\n\u003cTASK\u003e\nfilemap_get_folios_tag+0x87/0x2a0\n__filemap_fdatawait_range+0x5f/0xd0\n? srso_alias_return_thunk+0x5/0xfbef5\n? __schedule+0x3e7/0x10c0\n? srso_alias_return_thunk+0x5/0xfbef5\n? srso_alias_return_thunk+0x5/0xfbef5\n? srso_alias_return_thunk+0x5/0xfbef5\n? preempt_count_sub+0x5f/0x80\n? srso_alias_return_thunk+0x5/0xfbef5\n? cap_safe_nice+0x37/0x70\n? srso_alias_return_thunk+0x5/0xfbef5\n? preempt_count_sub+0x5f/0x80\n? srso_alias_return_thunk+0x5/0xfbef5\nfilemap_fdatawait_range_keep_errors+0x12/0x40\next4_fc_commit+0x697/0x8b0\n? ext4_file_write_iter+0x64b/0x950\n? srso_alias_return_thunk+0x5/0xfbef5\n? preempt_count_sub+0x5f/0x80\n? srso_alias_return_thunk+0x5/0xfbef5\n? vfs_write+0x356/0x480\n? srso_alias_return_thunk+0x5/0xfbef5\n? preempt_count_sub+0x5f/0x80\next4_sync_file+0xf7/0x370\ndo_fsync+0x3b/0x80\n? syscall_trace_enter+0x108/0x1d0\n__x64_sys_fdatasync+0x16/0x20\ndo_syscall_64+0x62/0x2c0\nentry_SYSCALL_64_after_hwframe+0x76/0x7e\n...\n```\n\nFix this by initializing the jbd2_inode first.\nUse smp_wmb() and WRITE_ONCE() to publish ei-\u003ejinode after\ninitialization. Readers use READ_ONCE() to fetch the pointer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31450",
          "url": "https://www.suse.com/security/cve/CVE-2026-31450"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262618 for CVE-2026-31450",
          "url": "https://bugzilla.suse.com/1262618"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31450"
    },
    {
      "cve": "CVE-2026-31462",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31462"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: prevent immediate PASID reuse case\n\nPASID resue could cause interrupt issue when process\nimmediately runs into hw state left by previous\nprocess exited with the same PASID, it\u0027s possible that\npage faults are still pending in the IH ring buffer when\nthe process exits and frees up its PASID. To prevent the\ncase, it uses idr cyclic allocator same as kernel pid\u0027s.\n\n(cherry picked from commit 8f1de51f49be692de137c8525106e0fce2d1912d)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31462",
          "url": "https://www.suse.com/security/cve/CVE-2026-31462"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262655 for CVE-2026-31462",
          "url": "https://bugzilla.suse.com/1262655"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31462"
    },
    {
      "cve": "CVE-2026-31466",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31466"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: fix folio isn\u0027t locked in softleaf_to_folio()\n\nOn arm64 server, we found folio that get from migration entry isn\u0027t locked\nin softleaf_to_folio().  This issue triggers when mTHP splitting and\nzap_nonpresent_ptes() races, and the root cause is lack of memory barrier\nin softleaf_to_folio().  The race is as follows:\n\n\tCPU0                                             CPU1\n\ndeferred_split_scan()                              zap_nonpresent_ptes()\n  lock folio\n  split_folio()\n    unmap_folio()\n      change ptes to migration entries\n    __split_folio_to_order()                         softleaf_to_folio()\n      set flags(including PG_locked) for tail pages    folio = pfn_folio(softleaf_to_pfn(entry))\n      smp_wmb()                                        VM_WARN_ON_ONCE(!folio_test_locked(folio))\n      prep_compound_page() for tail pages\n\nIn __split_folio_to_order(), smp_wmb() guarantees page flags of tail pages\nare visible before the tail page becomes non-compound.  smp_wmb() should\nbe paired with smp_rmb() in softleaf_to_folio(), which is missed.  As a\nresult, if zap_nonpresent_ptes() accesses migration entry that stores tail\npfn, softleaf_to_folio() may see the updated compound_head of tail page\nbefore page-\u003eflags.\n\nThis issue will trigger VM_WARN_ON_ONCE() in pfn_swap_entry_folio()\nbecause of the race between folio split and zap_nonpresent_ptes()\nleading to a folio incorrectly undergoing modification without a folio\nlock being held.\n\nThis is a BUG_ON() before commit 93976a20345b (\"mm: eliminate further\nswapops predicates\"), which in merged in v6.19-rc1.\n\nTo fix it, add missing smp_rmb() if the softleaf entry is migration entry\nin softleaf_to_folio() and softleaf_to_page().\n\n[tujinjiang@huawei.com: update function name and comments]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31466",
          "url": "https://www.suse.com/security/cve/CVE-2026-31466"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267825 for CVE-2026-31466",
          "url": "https://bugzilla.suse.com/1267825"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31466"
    },
    {
      "cve": "CVE-2026-31502",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31502"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nteam: fix header_ops type confusion with non-Ethernet ports\n\nSimilar to commit 950803f72547 (\"bonding: fix type confusion in\nbond_setup_by_slave()\") team has the same class of header_ops type\nconfusion.\n\nFor non-Ethernet ports, team_setup_by_port() copies port_dev-\u003eheader_ops\ndirectly. When the team device later calls dev_hard_header() or\ndev_parse_header(), these callbacks can run with the team net_device\ninstead of the real lower device, so netdev_priv(dev) is interpreted as\nthe wrong private type and can crash.\n\nThe syzbot report shows a crash in bond_header_create(), but the root\ncause is in team: the topology is gre -\u003e bond -\u003e team, and team calls\nthe inherited header_ops with its own net_device instead of the lower\ndevice, so bond_header_create() receives a team device and interprets\nnetdev_priv() as bonding private data, causing a type confusion crash.\n\nFix this by introducing team header_ops wrappers for create/parse,\nselecting a team port under RCU, and calling the lower device callbacks\nwith port-\u003edev, so each callback always sees the correct net_device\ncontext.\n\nAlso pass the selected lower device to the lower parse callback, so\nrecursion is bounded in stacked non-Ethernet topologies and parse\ncallbacks always run with the correct device context.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31502",
          "url": "https://www.suse.com/security/cve/CVE-2026-31502"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263072 for CVE-2026-31502",
          "url": "https://bugzilla.suse.com/1263072"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31502"
    },
    {
      "cve": "CVE-2026-31670",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31670"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: rfkill: prevent unlimited numbers of rfkill events from being created\n\nUserspace can create an unlimited number of rfkill events if the system\nis so configured, while not consuming them from the rfkill file\ndescriptor, causing a potential out of memory situation.  Prevent this\nfrom bounding the number of pending rfkill events at a \"large\" number\n(i.e. 1000) to prevent abuses like this.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31670",
          "url": "https://www.suse.com/security/cve/CVE-2026-31670"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263573 for CVE-2026-31670",
          "url": "https://bugzilla.suse.com/1263573"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31670"
    },
    {
      "cve": "CVE-2026-31677",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-31677"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - limit RX SG extraction by receive buffer budget\n\nMake af_alg_get_rsgl() limit each RX scatterlist extraction to the\nremaining receive buffer budget.\n\naf_alg_get_rsgl() currently uses af_alg_readable() only as a gate\nbefore extracting data into the RX scatterlist. Limit each extraction\nto the remaining af_alg_rcvbuf(sk) budget so that receive-side\naccounting matches the amount of data attached to the request.\n\nIf skcipher cannot obtain enough RX space for at least one chunk while\nmore data remains to be processed, reject the recvmsg call instead of\nrounding the request length down to zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-31677",
          "url": "https://www.suse.com/security/cve/CVE-2026-31677"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263560 for CVE-2026-31677",
          "url": "https://bugzilla.suse.com/1263560"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-31677"
    },
    {
      "cve": "CVE-2026-43010",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43010"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Reject sleepable kprobe_multi programs at attach time\n\nkprobe.multi programs run in atomic/RCU context and cannot sleep.\nHowever, bpf_kprobe_multi_link_attach() did not validate whether the\nprogram being attached had the sleepable flag set, allowing sleepable\nhelpers such as bpf_copy_from_user() to be invoked from a non-sleepable\ncontext.\n\nThis causes a \"sleeping function called from invalid context\" splat:\n\n  BUG: sleeping function called from invalid context at ./include/linux/uaccess.h:169\n  in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1787, name: sudo\n  preempt_count: 1, expected: 0\n  RCU nest depth: 2, expected: 0\n\nFix this by rejecting sleepable programs early in\nbpf_kprobe_multi_link_attach(), before any further processing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43010",
          "url": "https://www.suse.com/security/cve/CVE-2026-43010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264015 for CVE-2026-43010",
          "url": "https://bugzilla.suse.com/1264015"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43010"
    },
    {
      "cve": "CVE-2026-43022",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43022"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists\n\nhci_cmd_sync_queue_once() needs to indicate whether a queue item was\nadded, so caller can know if callbacks are called, so it can avoid\nleaking resources.\n\nChange the function to return -EEXIST if queue item already exists.\n\nModify all callsites to handle that.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43022",
          "url": "https://www.suse.com/security/cve/CVE-2026-43022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264001 for CVE-2026-43022",
          "url": "https://bugzilla.suse.com/1264001"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43022"
    },
    {
      "cve": "CVE-2026-43034",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43034"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: set backing store type from query type\n\nbnxt_hwrm_func_backing_store_qcaps_v2() stores resp-\u003etype from the\nfirmware response in ctxm-\u003etype and later uses that value to index\nfixed backing-store metadata arrays such as ctx_arr[] and\nbnxt_bstore_to_trace[].\n\nctxm-\u003etype is fixed by the current backing-store query type and matches\nthe array index of ctx-\u003ectx_arr. Set ctxm-\u003etype from the current loop\nvariable instead of depending on resp-\u003etype.\n\nAlso update the loop to advance type from next_valid_type in the for\nstatement, which keeps the control flow simpler for non-valid and\nunchanged entries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43034",
          "url": "https://www.suse.com/security/cve/CVE-2026-43034"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263998 for CVE-2026-43034",
          "url": "https://bugzilla.suse.com/1263998"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43034"
    },
    {
      "cve": "CVE-2026-43079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/x86/intel/uncore: Skip discovery table for offline dies\n\nThis warning can be triggered if NUMA is disabled and the system\nboots with fewer CPUs than the number of CPUs in die 0.\n\nWARNING: CPU: 9 PID: 7257 at uncore.c:1157 uncore_pci_pmu_register+0x136/0x160 [intel_uncore]\n\nCurrently, the discovery table continues to be parsed even if all CPUs\nin the associated die are offline.  This can lead to an array overflow\nat \"pmu-\u003eboxes[die] = box\" in uncore_pci_pmu_register(), which may\ntrigger the warning above or cause other issues.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43079",
          "url": "https://www.suse.com/security/cve/CVE-2026-43079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264228 for CVE-2026-43079",
          "url": "https://bugzilla.suse.com/1264228"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43079"
    },
    {
      "cve": "CVE-2026-43080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nl2tp: Drop large packets with UDP encap\n\nsyzbot reported a WARN on my patch series [1]. The actual issue is an\noverflow of 16-bit UDP length field, and it exists in the upstream code.\nMy series added a debug WARN with an overflow check that exposed the\nissue, that\u0027s why syzbot tripped on my patches, rather than on upstream\ncode.\n\nsyzbot\u0027s repro:\n\nr0 = socket$pppl2tp(0x18, 0x1, 0x1)\nr1 = socket$inet6_udp(0xa, 0x2, 0x0)\nconnect$inet6(r1, \u0026(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c)\nconnect$pppl2tp(r0, \u0026(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={\u0027\\x00\u0027, \u0027\\xff\\xff\u0027, @empty}}}}, 0x32)\nwritev(r0, \u0026(0x7f0000000080)=[{\u0026(0x7f0000000000)=\"ee\", 0x34000}], 0x1)\n\nIt basically sends an oversized (0x34000 bytes) PPPoL2TP packet with UDP\nencapsulation, and l2tp_xmit_core doesn\u0027t check for overflows when it\nassigns the UDP length field. The value gets trimmed to 16 bites.\n\nAdd an overflow check that drops oversized packets and avoids sending\npackets with trimmed UDP length to the wire.\n\nsyzbot\u0027s stack trace (with my patch applied):\n\nlen \u003e= 65536u\nWARNING: ./include/linux/udp.h:38 at udp_set_len_short include/linux/udp.h:38 [inline], CPU#1: syz.0.17/5957\nWARNING: ./include/linux/udp.h:38 at l2tp_xmit_core net/l2tp/l2tp_core.c:1293 [inline], CPU#1: syz.0.17/5957\nWARNING: ./include/linux/udp.h:38 at l2tp_xmit_skb+0x1204/0x18d0 net/l2tp/l2tp_core.c:1327, CPU#1: syz.0.17/5957\nModules linked in:\nCPU: 1 UID: 0 PID: 5957 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014\nRIP: 0010:udp_set_len_short include/linux/udp.h:38 [inline]\nRIP: 0010:l2tp_xmit_core net/l2tp/l2tp_core.c:1293 [inline]\nRIP: 0010:l2tp_xmit_skb+0x1204/0x18d0 net/l2tp/l2tp_core.c:1327\nCode: 0f 0b 90 e9 21 f9 ff ff e8 e9 05 ec f6 90 0f 0b 90 e9 8d f9 ff ff e8 db 05 ec f6 90 0f 0b 90 e9 cc f9 ff ff e8 cd 05 ec f6 90 \u003c0f\u003e 0b 90 e9 de fa ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 4f\nRSP: 0018:ffffc90003d67878 EFLAGS: 00010293\nRAX: ffffffff8ad985e3 RBX: ffff8881a6400090 RCX: ffff8881697f0000\nRDX: 0000000000000000 RSI: 0000000000034010 RDI: 000000000000ffff\nRBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004\nR10: dffffc0000000000 R11: fffff520007acf00 R12: ffff8881baf20900\nR13: 0000000000034010 R14: ffff8881a640008e R15: ffff8881760f7000\nFS:  000055557e81f500(0000) GS:ffff8882a9467000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000200000033000 CR3: 00000001612f4000 CR4: 00000000000006f0\nCall Trace:\n \u003cTASK\u003e\n pppol2tp_sendmsg+0x40a/0x5f0 net/l2tp/l2tp_ppp.c:302\n sock_sendmsg_nosec net/socket.c:727 [inline]\n __sock_sendmsg net/socket.c:742 [inline]\n sock_write_iter+0x503/0x550 net/socket.c:1195\n do_iter_readv_writev+0x619/0x8c0 fs/read_write.c:-1\n vfs_writev+0x33c/0x990 fs/read_write.c:1059\n do_writev+0x154/0x2e0 fs/read_write.c:1105\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f636479c629\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007ffffd4241c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014\nRAX: ffffffffffffffda RBX: 00007f6364a15fa0 RCX: 00007f636479c629\nRDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003\nRBP: 00007f6364832b39 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f6364a15fac R14: 00007f6364a15fa0 R15: 00007f6364a15fa0\n \u003c/TASK\u003e\n\n[1]: https://lore.kernel.org/all/20260226201600.222044-1-alice.kernel@fastmail.im/",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43080",
          "url": "https://www.suse.com/security/cve/CVE-2026-43080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264236 for CVE-2026-43080",
          "url": "https://bugzilla.suse.com/1264236"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43080"
    },
    {
      "cve": "CVE-2026-43081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipa: fix GENERIC_CMD register field masks for IPA v5.0+\n\nFix the field masks to match the hardware layout documented in\ndownstream GSI (GSI_V3_0_EE_n_GSI_EE_GENERIC_CMD_*).\n\nNotably this fixes a WARN I was seeing when I tried to send \"stop\"\nto the MPSS remoteproc while IPA was up.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43081",
          "url": "https://www.suse.com/security/cve/CVE-2026-43081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264241 for CVE-2026-43081",
          "url": "https://bugzilla.suse.com/1264241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43081"
    },
    {
      "cve": "CVE-2026-43085",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43085"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator\n\nWhen batching multiple NFLOG messages (inst-\u003eqlen \u003e 1), __nfulnl_send()\nappends an NLMSG_DONE terminator with sizeof(struct nfgenmsg) payload via\nnlmsg_put(), but never initializes the nfgenmsg bytes. The nlmsg_put()\nhelper only zeroes alignment padding after the payload, not the payload\nitself, so four bytes of stale kernel heap data are leaked to userspace\nin the NLMSG_DONE message body.\n\nUse nfnl_msg_put() to build the NLMSG_DONE terminator, which initializes\nthe nfgenmsg payload via nfnl_fill_hdr(), consistent with how\n__build_packet_message() already constructs NFULNL_MSG_PACKET headers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43085",
          "url": "https://www.suse.com/security/cve/CVE-2026-43085"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264230 for CVE-2026-43085",
          "url": "https://bugzilla.suse.com/1264230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43085"
    },
    {
      "cve": "CVE-2026-43086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: fix NULL deref in ip_vs_add_service error path\n\nWhen ip_vs_bind_scheduler() succeeds in ip_vs_add_service(), the local\nvariable sched is set to NULL.  If ip_vs_start_estimator() subsequently\nfails, the out_err cleanup calls ip_vs_unbind_scheduler(svc, sched)\nwith sched == NULL.  ip_vs_unbind_scheduler() passes the cur_sched NULL\ncheck (because svc-\u003escheduler was set by the successful bind) but then\ndereferences the NULL sched parameter at sched-\u003edone_service, causing a\nkernel panic at offset 0x30 from NULL.\n\n Oops: general protection fault, [..] [#1] PREEMPT SMP KASAN NOPTI\n KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\n RIP: 0010:ip_vs_unbind_scheduler (net/netfilter/ipvs/ip_vs_sched.c:69)\n Call Trace:\n  \u003cTASK\u003e\n  ip_vs_add_service.isra.0 (net/netfilter/ipvs/ip_vs_ctl.c:1500)\n  do_ip_vs_set_ctl (net/netfilter/ipvs/ip_vs_ctl.c:2809)\n  nf_setsockopt (net/netfilter/nf_sockopt.c:102)\n  [..]\n\nFix by simply not clearing the local sched variable after a successful\nbind.  ip_vs_unbind_scheduler() already detects whether a scheduler is\ninstalled via svc-\u003escheduler, and keeping sched non-NULL ensures the\nerror path passes the correct pointer to both ip_vs_unbind_scheduler()\nand ip_vs_scheduler_put().\n\nWhile the bug is older, the problem popups in more recent kernels (6.2),\nwhen the new error path is taken after the ip_vs_start_estimator() call.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43086",
          "url": "https://www.suse.com/security/cve/CVE-2026-43086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264286 for CVE-2026-43086",
          "url": "https://bugzilla.suse.com/1264286"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43086"
    },
    {
      "cve": "CVE-2026-43089",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43089"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm_user: fix info leak in build_mapping()\n\nstruct xfrm_usersa_id has a one-byte padding hole after the proto\nfield, which ends up never getting set to zero before copying out to\nuserspace.  Fix that up by zeroing out the whole structure before\nsetting individual variables.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43089",
          "url": "https://www.suse.com/security/cve/CVE-2026-43089"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264261 for CVE-2026-43089",
          "url": "https://bugzilla.suse.com/1264261"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43089"
    },
    {
      "cve": "CVE-2026-43093",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43093"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: tighten UMEM headroom validation to account for tailroom and min frame\n\nThe current headroom validation in xdp_umem_reg() could leave us with\ninsufficient space dedicated to even receive minimum-sized ethernet\nframe. Furthermore if multi-buffer would come to play then\nskb_shared_info stored at the end of XSK frame would be corrupted.\n\nHW typically works with 128-aligned sizes so let us provide this value\nas bare minimum.\n\nMulti-buffer setting is known later in the configuration process so\nbesides accounting for 128 bytes, let us also take care of tailroom space\nupfront.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43093",
          "url": "https://www.suse.com/security/cve/CVE-2026-43093"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264254 for CVE-2026-43093",
          "url": "https://bugzilla.suse.com/1264254"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43093"
    },
    {
      "cve": "CVE-2026-43107",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43107"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: account XFRMA_IF_ID in aevent size calculation\n\nxfrm_get_ae() allocates the reply skb with xfrm_aevent_msgsize(), then\nbuild_aevent() appends attributes including XFRMA_IF_ID when x-\u003eif_id is\nset.\n\nxfrm_aevent_msgsize() does not include space for XFRMA_IF_ID. For states\nwith if_id, build_aevent() can fail with -EMSGSIZE and hit BUG_ON(err \u003c 0)\nin xfrm_get_ae(), turning a malformed netlink interaction into a kernel\npanic.\n\nAccount XFRMA_IF_ID in the size calculation unconditionally and replace\nthe BUG_ON with normal error unwinding.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43107",
          "url": "https://www.suse.com/security/cve/CVE-2026-43107"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264258 for CVE-2026-43107",
          "url": "https://bugzilla.suse.com/1264258"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43107"
    },
    {
      "cve": "CVE-2026-43128",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43128"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/umem: Fix double dma_buf_unpin in failure path\n\nIn ib_umem_dmabuf_get_pinned_with_dma_device(), the call to\nib_umem_dmabuf_map_pages() can fail. If this occurs, the dmabuf\nis immediately unpinned but the umem_dmabuf-\u003epinned flag is still\nset. Then, when ib_umem_release() is called, it calls\nib_umem_dmabuf_revoke() which will call dma_buf_unpin() again.\n\nFix this by removing the immediate unpin upon failure and just let\nthe ib_umem_release/revoke path handle it. This also ensures the\nproper unmap-unpin unwind ordering if the dmabuf_map_pages call\nhappened to fail due to dma_resv_wait_timeout (and therefore has\na non-NULL umem_dmabuf-\u003esgt).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43128",
          "url": "https://www.suse.com/security/cve/CVE-2026-43128"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264612 for CVE-2026-43128",
          "url": "https://bugzilla.suse.com/1264612"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43128"
    },
    {
      "cve": "CVE-2026-43139",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43139"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm6: fix uninitialized saddr in xfrm6_get_saddr()\n\nxfrm6_get_saddr() does not check the return value of\nipv6_dev_get_saddr(). When ipv6_dev_get_saddr() fails to find a suitable\nsource address (returns -EADDRNOTAVAIL), saddr-\u003ein6 is left\nuninitialized, but xfrm6_get_saddr() still returns 0 (success).\n\nThis causes the caller xfrm_tmpl_resolve_one() to use the uninitialized\naddress in xfrm_state_find(), triggering KMSAN warning:\n\n=====================================================\nBUG: KMSAN: uninit-value in xfrm_state_find+0x2424/0xa940\n xfrm_state_find+0x2424/0xa940\n xfrm_resolve_and_create_bundle+0x906/0x5a20\n xfrm_lookup_with_ifid+0xcc0/0x3770\n xfrm_lookup_route+0x63/0x2b0\n ip_route_output_flow+0x1ce/0x270\n udp_sendmsg+0x2ce1/0x3400\n inet_sendmsg+0x1ef/0x2a0\n __sock_sendmsg+0x278/0x3d0\n __sys_sendto+0x593/0x720\n __x64_sys_sendto+0x130/0x200\n x64_sys_call+0x332b/0x3e70\n do_syscall_64+0xd3/0xf80\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nLocal variable tmp.i.i created at:\n xfrm_resolve_and_create_bundle+0x3e3/0x5a20\n xfrm_lookup_with_ifid+0xcc0/0x3770\n=====================================================\n\nFix by checking the return value of ipv6_dev_get_saddr() and propagating\nthe error.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43139",
          "url": "https://www.suse.com/security/cve/CVE-2026-43139"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264294 for CVE-2026-43139",
          "url": "https://bugzilla.suse.com/1264294"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43139"
    },
    {
      "cve": "CVE-2026-43233",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43233"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_h323: fix OOB read in decode_choice()\n\nIn decode_choice(), the boundary check before get_len() uses the\nvariable `len`, which is still 0 from its initialization at the top of\nthe function:\n\n    unsigned int type, ext, len = 0;\n    ...\n    if (ext || (son-\u003eattr \u0026 OPEN)) {\n        BYTE_ALIGN(bs);\n        if (nf_h323_error_boundary(bs, len, 0))  /* len is 0 here */\n            return H323_ERROR_BOUND;\n        len = get_len(bs);                        /* OOB read */\n\nWhen the bitstream is exactly consumed (bs-\u003ecur == bs-\u003eend), the check\nnf_h323_error_boundary(bs, 0, 0) evaluates to (bs-\u003ecur + 0 \u003e bs-\u003eend),\nwhich is false.  The subsequent get_len() call then dereferences\n*bs-\u003ecur++, reading 1 byte past the end of the buffer.  If that byte\nhas bit 7 set, get_len() reads a second byte as well.\n\nThis can be triggered remotely by sending a crafted Q.931 SETUP message\nwith a User-User Information Element containing exactly 2 bytes of\nPER-encoded data ({0x08, 0x00}) to port 1720 through a firewall with\nthe nf_conntrack_h323 helper active.  The decoder fully consumes the\nPER buffer before reaching this code path, resulting in a 1-2 byte\nheap-buffer-overflow read confirmed by AddressSanitizer.\n\nFix this by checking for 2 bytes (the maximum that get_len() may read)\ninstead of the uninitialized `len`.  This matches the pattern used at\nevery other get_len() call site in the same file, where the caller\nchecks for 2 bytes of available data before calling get_len().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43233",
          "url": "https://www.suse.com/security/cve/CVE-2026-43233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264337 for CVE-2026-43233",
          "url": "https://bugzilla.suse.com/1264337"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43233"
    },
    {
      "cve": "CVE-2026-43238",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43238"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()\n\nCommit 38a6f0865796 (\"net: sched: support hash selecting tx queue\")\nadded SKBEDIT_F_TXQ_SKBHASH support. The inclusive range size is\ncomputed as:\n\nmapping_mod = queue_mapping_max - queue_mapping + 1;\n\nThe range size can be 65536 when the requested range covers all possible\nu16 queue IDs (e.g. queue_mapping=0 and queue_mapping_max=U16_MAX).\nThat value cannot be represented in a u16 and previously wrapped to 0,\nso tcf_skbedit_hash() could trigger a divide-by-zero:\n\nqueue_mapping += skb_get_hash(skb) % params-\u003emapping_mod;\n\nCompute mapping_mod in a wider type and reject ranges larger than U16_MAX\nto prevent params-\u003emapping_mod from becoming 0 and avoid the crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43238",
          "url": "https://www.suse.com/security/cve/CVE-2026-43238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264320 for CVE-2026-43238",
          "url": "https://bugzilla.suse.com/1264320"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43238"
    },
    {
      "cve": "CVE-2026-43303",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43303"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/page_alloc: clear page-\u003eprivate in free_pages_prepare()\n\nSeveral subsystems (slub, shmem, ttm, etc.) use page-\u003eprivate but don\u0027t\nclear it before freeing pages.  When these pages are later allocated as\nhigh-order pages and split via split_page(), tail pages retain stale\npage-\u003eprivate values.\n\nThis causes a use-after-free in the swap subsystem.  The swap code uses\npage-\u003eprivate to track swap count continuations, assuming freshly\nallocated pages have page-\u003eprivate == 0.  When stale values are present,\nswap_count_continued() incorrectly assumes the continuation list is valid\nand iterates over uninitialized page-\u003elru containing LIST_POISON values,\ncausing a crash:\n\n  KASAN: maybe wild-memory-access in range [0xdead000000000100-0xdead000000000107]\n  RIP: 0010:__do_sys_swapoff+0x1151/0x1860\n\nFix this by clearing page-\u003eprivate in free_pages_prepare(), ensuring all\nfreed pages have clean state regardless of previous use.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43303",
          "url": "https://www.suse.com/security/cve/CVE-2026-43303"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264974 for CVE-2026-43303",
          "url": "https://bugzilla.suse.com/1264974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43303"
    },
    {
      "cve": "CVE-2026-43336",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43336"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib/crypto: chacha: Zeroize permuted_state before it leaves scope\n\nSince the ChaCha permutation is invertible, the local variable\n\u0027permuted_state\u0027 is sufficient to compute the original \u0027state\u0027, and thus\nthe key, even after the permutation has been done.\n\nWhile the kernel is quite inconsistent about zeroizing secrets on the\nstack (and some prominent userspace crypto libraries don\u0027t bother at all\nsince it\u0027s not guaranteed to work anyway), the kernel does try to do it\nas a best practice, especially in cases involving the RNG.\n\nThus, explicitly zeroize \u0027permuted_state\u0027 before it goes out of scope.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43336",
          "url": "https://www.suse.com/security/cve/CVE-2026-43336"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265113 for CVE-2026-43336",
          "url": "https://bugzilla.suse.com/1265113"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43336"
    },
    {
      "cve": "CVE-2026-43420",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43420"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix i_nlink underrun during async unlink\n\nDuring async unlink, we drop the `i_nlink` counter before we receive\nthe completion (that will eventually update the `i_nlink`) because \"we\nassume that the unlink will succeed\".  That is not a bad idea, but it\nraces against deletions by other clients (or against the completion of\nour own unlink) and can lead to an underrun which emits a WARNING like\nthis one:\n\n WARNING: CPU: 85 PID: 25093 at fs/inode.c:407 drop_nlink+0x50/0x68\n Modules linked in:\n CPU: 85 UID: 3221252029 PID: 25093 Comm: php-cgi8.1 Not tainted 6.14.11-cm4all1-ampere #655\n Hardware name: Supermicro ARS-110M-NR/R12SPD-A, BIOS 1.1b 10/17/2023\n pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : drop_nlink+0x50/0x68\n lr : ceph_unlink+0x6c4/0x720\n sp : ffff80012173bc90\n x29: ffff80012173bc90 x28: ffff086d0a45aaf8 x27: ffff0871d0eb5680\n x26: ffff087f2a64a718 x25: 0000020000000180 x24: 0000000061c88647\n x23: 0000000000000002 x22: ffff07ff9236d800 x21: 0000000000001203\n x20: ffff07ff9237b000 x19: ffff088b8296afc0 x18: 00000000f3c93365\n x17: 0000000000070000 x16: ffff08faffcbdfe8 x15: ffff08faffcbdfec\n x14: 0000000000000000 x13: 45445f65645f3037 x12: 34385f6369706f74\n x11: 0000a2653104bb20 x10: ffffd85f26d73290 x9 : ffffd85f25664f94\n x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 0000000000000002\n x5 : 0000000000000081 x4 : 0000000000000481 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff08727d3f91e8\n Call trace:\n  drop_nlink+0x50/0x68 (P)\n  vfs_unlink+0xb0/0x2e8\n  do_unlinkat+0x204/0x288\n  __arm64_sys_unlinkat+0x3c/0x80\n  invoke_syscall.constprop.0+0x54/0xe8\n  do_el0_svc+0xa4/0xc8\n  el0_svc+0x18/0x58\n  el0t_64_sync_handler+0x104/0x130\n  el0t_64_sync+0x154/0x158\n\nIn ceph_unlink(), a call to ceph_mdsc_submit_request() submits the\nCEPH_MDS_OP_UNLINK to the MDS, but does not wait for completion.\n\nMeanwhile, between this call and the following drop_nlink() call, a\nworker thread may process a CEPH_CAP_OP_IMPORT, CEPH_CAP_OP_GRANT or\njust a CEPH_MSG_CLIENT_REPLY (the latter of which could be our own\ncompletion).  These will lead to a set_nlink() call, updating the\n`i_nlink` counter to the value received from the MDS.  If that new\n`i_nlink` value happens to be zero, it is illegal to decrement it\nfurther.  But that is exactly what ceph_unlink() will do then.\n\nThe WARNING can be reproduced this way:\n\n1. Force async unlink; only the async code path is affected.  Having\n   no real clue about Ceph internals, I was unable to find out why the\n   MDS wouldn\u0027t give me the \"Fxr\" capabilities, so I patched\n   get_caps_for_async_unlink() to always succeed.\n\n   (Note that the WARNING dump above was found on an unpatched kernel,\n   without this kludge - this is not a theoretical bug.)\n\n2. Add a sleep call after ceph_mdsc_submit_request() so the unlink\n   completion gets handled by a worker thread before drop_nlink() is\n   called.  This guarantees that the `i_nlink` is already zero before\n   drop_nlink() runs.\n\nThe solution is to skip the counter decrement when it is already zero,\nbut doing so without a lock is still racy (TOCTOU).  Since\nceph_fill_inode() and handle_cap_grant() both hold the\n`ceph_inode_info.i_ceph_lock` spinlock while set_nlink() runs, this\nseems like the proper lock to protect the `i_nlink` updates.\n\nI found prior art in NFS and SMB (using `inode.i_lock`) and AFS (using\n`afs_vnode.cb_lock`).  All three have the zero check as well.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43420",
          "url": "https://www.suse.com/security/cve/CVE-2026-43420"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264814 for CVE-2026-43420",
          "url": "https://bugzilla.suse.com/1264814"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43420"
    },
    {
      "cve": "CVE-2026-43456",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43456"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: fix type confusion in bond_setup_by_slave()\n\nkernel BUG at net/core/skbuff.c:2306!\nOops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\nRIP: 0010:pskb_expand_head+0xa08/0xfe0 net/core/skbuff.c:2306\nRSP: 0018:ffffc90004aff760 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: ffff88807e3c8780 RCX: ffffffff89593e0e\nRDX: ffff88807b7c4900 RSI: ffffffff89594747 RDI: ffff88807b7c4900\nRBP: 0000000000000820 R08: 0000000000000005 R09: 0000000000000000\nR10: 00000000961a63e0 R11: 0000000000000000 R12: ffff88807e3c8780\nR13: 00000000961a6560 R14: dffffc0000000000 R15: 00000000961a63e0\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fe1a0ed8df0 CR3: 000000002d816000 CR4: 00000000003526f0\nCall Trace:\n \u003cTASK\u003e\n ipgre_header+0xdd/0x540 net/ipv4/ip_gre.c:900\n dev_hard_header include/linux/netdevice.h:3439 [inline]\n packet_snd net/packet/af_packet.c:3028 [inline]\n packet_sendmsg+0x3ae5/0x53c0 net/packet/af_packet.c:3108\n sock_sendmsg_nosec net/socket.c:727 [inline]\n __sock_sendmsg net/socket.c:742 [inline]\n ____sys_sendmsg+0xa54/0xc30 net/socket.c:2592\n ___sys_sendmsg+0x190/0x1e0 net/socket.c:2646\n __sys_sendmsg+0x170/0x220 net/socket.c:2678\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fe1a0e6c1a9\n\nWhen a non-Ethernet device (e.g. GRE tunnel) is enslaved to a bond,\nbond_setup_by_slave() directly copies the slave\u0027s header_ops to the\nbond device:\n\n    bond_dev-\u003eheader_ops = slave_dev-\u003eheader_ops;\n\nThis causes a type confusion when dev_hard_header() is later called\non the bond device. Functions like ipgre_header(), ip6gre_header(),all use\nnetdev_priv(dev) to access their device-specific private data. When\ncalled with the bond device, netdev_priv() returns the bond\u0027s private\ndata (struct bonding) instead of the expected type (e.g. struct\nip_tunnel), leading to garbage values being read and kernel crashes.\n\nFix this by introducing bond_header_ops with wrapper functions that\ndelegate to the active slave\u0027s header_ops using the slave\u0027s own\ndevice. This ensures netdev_priv() in the slave\u0027s header functions\nalways receives the correct device.\n\nThe fix is placed in the bonding driver rather than individual device\ndrivers, as the root cause is bond blindly inheriting header_ops from\nthe slave without considering that these callbacks expect a specific\nnetdev_priv() layout.\n\nThe type confusion can be observed by adding a printk in\nipgre_header() and running the following commands:\n\n    ip link add dummy0 type dummy\n    ip addr add 10.0.0.1/24 dev dummy0\n    ip link set dummy0 up\n    ip link add gre1 type gre local 10.0.0.1\n    ip link add bond1 type bond mode active-backup\n    ip link set gre1 master bond1\n    ip link set gre1 up\n    ip link set bond1 up\n    ip addr add fe80::1/64 dev bond1",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43456",
          "url": "https://www.suse.com/security/cve/CVE-2026-43456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264734 for CVE-2026-43456",
          "url": "https://bugzilla.suse.com/1264734"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271473 for CVE-2026-43456",
          "url": "https://bugzilla.suse.com/1271473"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-43456"
    },
    {
      "cve": "CVE-2026-43472",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43472"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nunshare: fix unshare_fs() handling\n\nThere\u0027s an unpleasant corner case in unshare(2), when we have a\nCLONE_NEWNS in flags and current-\u003efs hadn\u0027t been shared at all; in that\ncase copy_mnt_ns() gets passed current-\u003efs instead of a private copy,\nwhich causes interesting warts in proof of correctness]\n\n\u003e I guess if private means fs-\u003eusers == 1, the condition could still be true.\n\nUnfortunately, it\u0027s worse than just a convoluted proof of correctness.\nConsider the case when we have CLONE_NEWCGROUP in addition to CLONE_NEWNS\n(and current-\u003efs-\u003eusers == 1).\n\nWe pass current-\u003efs to copy_mnt_ns(), all right.  Suppose it succeeds and\nflips current-\u003efs-\u003e{pwd,root} to corresponding locations in the new namespace.\nNow we proceed to copy_cgroup_ns(), which fails (e.g. with -ENOMEM).\nWe call put_mnt_ns() on the namespace created by copy_mnt_ns(), it\u0027s\ndestroyed and its mount tree is dissolved, but...  current-\u003efs-\u003eroot and\ncurrent-\u003efs-\u003epwd are both left pointing to now detached mounts.\n\nThey are pinning those, so it\u0027s not a UAF, but it leaves the calling\nprocess with unshare(2) failing with -ENOMEM _and_ leaving it with\npwd and root on detached isolated mounts.  The last part is clearly a bug.\n\nThere is other fun related to that mess (races with pivot_root(), including\nthe one between pivot_root() and fork(), of all things), but this one\nis easy to isolate and fix - treat CLONE_NEWNS as \"allocate a new\nfs_struct even if it hadn\u0027t been shared in the first place\".  Sure, we could\ngo for something like \"if both CLONE_NEWNS *and* one of the things that might\nend up failing after copy_mnt_ns() call in create_new_namespaces() are set,\nforce allocation of new fs_struct\", but let\u0027s keep it simple - the cost\nof copy_fs_struct() is trivial.\n\nAnother benefit is that copy_mnt_ns() with CLONE_NEWNS *always* gets\na freshly allocated fs_struct, yet to be attached to anything.  That\nseriously simplifies the analysis...\n\nFWIW, that bug had been there since the introduction of unshare(2) ;-/",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43472",
          "url": "https://www.suse.com/security/cve/CVE-2026-43472"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264748 for CVE-2026-43472",
          "url": "https://bugzilla.suse.com/1264748"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43472"
    },
    {
      "cve": "CVE-2026-43492",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43492"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()\n\nYiming reports an integer underflow in mpi_read_raw_from_sgl() when\nsubtracting \"lzeros\" from the unsigned \"nbytes\".\n\nFor this to happen, the scatterlist \"sgl\" needs to occupy more bytes\nthan the \"nbytes\" parameter and the first \"nbytes + 1\" bytes of the\nscatterlist must be zero.  Under these conditions, the while loop\niterating over the scatterlist will count more zeroes than \"nbytes\",\nsubtract the number of zeroes from \"nbytes\" and cause the underflow.\n\nWhen commit 2d4d1eea540b (\"lib/mpi: Add mpi sgl helpers\") originally\nintroduced the bug, it couldn\u0027t be triggered because all callers of\nmpi_read_raw_from_sgl() passed a scatterlist whose length was equal to\n\"nbytes\".\n\nHowever since commit 63ba4d67594a (\"KEYS: asymmetric: Use new crypto\ninterface without scatterlists\"), the underflow can now actually be\ntriggered.  When invoking a KEYCTL_PKEY_ENCRYPT system call with a\nlarger \"out_len\" than \"in_len\" and filling the \"in\" buffer with zeroes,\ncrypto_akcipher_sync_prep() will create an all-zero scatterlist used for\nboth the \"src\" and \"dst\" member of struct akcipher_request and thereby\nfulfil the conditions to trigger the bug:\n\n  sys_keyctl()\n    keyctl_pkey_e_d_s()\n      asymmetric_key_eds_op()\n        software_key_eds_op()\n          crypto_akcipher_sync_encrypt()\n            crypto_akcipher_sync_prep()\n              crypto_akcipher_encrypt()\n                rsa_enc()\n                  mpi_read_raw_from_sgl()\n\nTo the user this will be visible as a DoS as the kernel spins forever,\ncausing soft lockup splats as a side effect.\n\nFix it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43492",
          "url": "https://www.suse.com/security/cve/CVE-2026-43492"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265629 for CVE-2026-43492",
          "url": "https://bugzilla.suse.com/1265629"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-43492"
    },
    {
      "cve": "CVE-2026-43502",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-43502"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: handle zerocopy send cleanup before the message is queued\n\nA zerocopy send can fail after user pages have been pinned but before\nthe message is attached to the sending socket.\n\nThe purge path currently infers zerocopy state from rm-\u003em_rs, so an\nunqueued message can be cleaned up as if it owned normal payload pages.\nHowever, zerocopy ownership is really determined by the presence of\nop_mmp_znotifier, regardless of whether the message has reached the\nsocket queue.\n\nCapture op_mmp_znotifier up front in rds_message_purge() and use it as\nthe cleanup discriminator. If the message is already associated with a\nsocket, keep the existing completion path. Otherwise, drop the pinned\npage accounting directly and release the notifier before putting the\npayload pages.\n\nThis keeps early send failure cleanup consistent with the zerocopy\nlifetime rules without changing the normal queued completion path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-43502",
          "url": "https://www.suse.com/security/cve/CVE-2026-43502"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266008 for CVE-2026-43502",
          "url": "https://bugzilla.suse.com/1266008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1279563 for CVE-2026-43502",
          "url": "https://bugzilla.suse.com/1279563"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-43502"
    },
    {
      "cve": "CVE-2026-45838",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45838"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix end-of-list detection in cgroup_storage_get_next_key()\n\nlist_next_entry() never returns NULL -- when the current element is the\nlast entry it wraps to the list head via container_of(). The subsequent\nNULL check is therefore dead code and get_next_key() never returns\n-ENOENT for the last element, instead reading storage-\u003ekey from a bogus\npointer that aliases internal map fields and copying the result to\nuserspace.\n\nReplace it with list_entry_is_head() so the function correctly returns\n-ENOENT when there are no more entries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45838",
          "url": "https://www.suse.com/security/cve/CVE-2026-45838"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266396 for CVE-2026-45838",
          "url": "https://bugzilla.suse.com/1266396"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45838"
    },
    {
      "cve": "CVE-2026-45848",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45848"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\napparmor: fix NULL sock in aa_sock_file_perm\n\nDeal with the potential that sock and sock-sk can be NULL during\nsocket setup or teardown. This could lead to an oops. The fix for NULL\npointer dereference in __unix_needs_revalidation shows this is at\nleast possible for af_unix sockets. While the fix for af_unix sockets\napplies for newer mediation this is still the fall back path for older\naf_unix mediation and other sockets, so ensure it is covered.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45848",
          "url": "https://www.suse.com/security/cve/CVE-2026-45848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266734 for CVE-2026-45848",
          "url": "https://bugzilla.suse.com/1266734"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45848"
    },
    {
      "cve": "CVE-2026-45891",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45891"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix double free issue for tx spare buffer\n\nIn hns3_set_ringparam(), a temporary copy (tmp_rings) of the ring structure\nis created for rollback. However, the tx_spare pointer in the original\nring handle is incorrectly left pointing to the old backup memory.\n\nLater, if memory allocation fails in hns3_init_all_ring() during the setup,\nthe error path attempts to free all newly allocated rings. Since tx_spare\ncontains a stale (non-NULL) pointer from the backup, it is mistaken for\na newly allocated buffer and is erroneously freed, leading to a double-free\nof the backup memory.\n\nThe root cause is that the tx_spare field was not cleared after its value\nwas saved in tmp_rings, leaving a dangling pointer.\n\nFix this by setting tx_spare to NULL in the original ring structure\nwhen the creation of the new `tx_spare` fails. This ensures the\nerror cleanup path only frees genuinely newly allocated buffers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45891",
          "url": "https://www.suse.com/security/cve/CVE-2026-45891"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266717 for CVE-2026-45891",
          "url": "https://bugzilla.suse.com/1266717"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45891"
    },
    {
      "cve": "CVE-2026-45912",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45912"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: don\u0027t cache extent during splitting extent\n\nCaching extents during the splitting process is risky, as it may result\nin stale extents remaining in the status tree. Moreover, in most cases,\nthe corresponding extent block entries are likely already cached before\nthe split happens, making caching here not particularly useful.\n\nAssume we have an unwritten extent, and then DIO writes the first half.\n\n  [UUUUUUUUUUUUUUUU] on-disk extent        U: unwritten extent\n  [UUUUUUUUUUUUUUUU] extent status tree\n  |\u003c-   -\u003e| ----\u003e dio write this range\n\nFirst, when ext4_split_extent_at() splits this extent, it truncates the\nexisting extent and then inserts a new one. During this process, this\nextent status entry may be shrunk, and calls to ext4_find_extent() and\next4_cache_extents() may occur, which could potentially insert the\ntruncated range as a hole into the extent status tree. After the split\nis completed, this hole is not replaced with the correct status.\n\n  [UUUUUUU|UUUUUUUU] on-disk extent        U: unwritten extent\n  [UUUUUUU|HHHHHHHH] extent status tree    H: hole\n\nThen, the outer calling functions will not correct this remaining hole\nextent either. Finally, if we perform a delayed buffer write on this\nlatter part, it will re-insert the delayed extent and cause an error in\nspace accounting.\n\nIn adition, if the unwritten extent cache is not shrunk during the\nsplitting, ext4_cache_extents() also conflicts with existing extents\nwhen caching extents. In the future, we will add checks when caching\nextents, which will trigger a warning. Therefore, Do not cache extents\nthat are being split.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45912",
          "url": "https://www.suse.com/security/cve/CVE-2026-45912"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266899 for CVE-2026-45912",
          "url": "https://bugzilla.suse.com/1266899"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45912"
    },
    {
      "cve": "CVE-2026-45948",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45948"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix memory leak in ext4_ext_shift_extents()\n\nIn ext4_ext_shift_extents(), if the extent is NULL in the while loop, the\nfunction returns immediately without releasing the path obtained via\next4_find_extent(), leading to a memory leak.\n\nFix this by jumping to the out label to ensure the path is properly\nreleased.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45948",
          "url": "https://www.suse.com/security/cve/CVE-2026-45948"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266929 for CVE-2026-45948",
          "url": "https://bugzilla.suse.com/1266929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45948"
    },
    {
      "cve": "CVE-2026-45985",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45985"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: don\u0027t set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O\n\nWhen allocating blocks during within-EOF DIO and writeback with\ndioread_nolock enabled, EXT4_GET_BLOCKS_PRE_IO was set to split an\nexisting large unwritten extent. However, EXT4_GET_BLOCKS_CONVERT was\nset when calling ext4_split_convert_extents(), which may potentially\nresult in stale data issues.\n\nAssume we have an unwritten extent, and then DIO writes the second half.\n\n   [UUUUUUUUUUUUUUUU] on-disk extent        U: unwritten extent\n   [UUUUUUUUUUUUUUUU] extent status tree\n            |\u003c-   -\u003e| ----\u003e dio write this range\n\nFirst, ext4_iomap_alloc() call ext4_map_blocks() with\nEXT4_GET_BLOCKS_PRE_IO, EXT4_GET_BLOCKS_UNWRIT_EXT and\nEXT4_GET_BLOCKS_CREATE flags set. ext4_map_blocks() find this extent and\ncall ext4_split_convert_extents() with EXT4_GET_BLOCKS_CONVERT and the\nabove flags set.\n\nThen, ext4_split_convert_extents() calls ext4_split_extent() with\nEXT4_EXT_MAY_ZEROOUT, EXT4_EXT_MARK_UNWRIT2 and EXT4_EXT_DATA_VALID2\nflags set, and it calls ext4_split_extent_at() to split the second half\nwith EXT4_EXT_DATA_VALID2, EXT4_EXT_MARK_UNWRIT1, EXT4_EXT_MAY_ZEROOUT\nand EXT4_EXT_MARK_UNWRIT2 flags set. However, ext4_split_extent_at()\nfailed to insert extent since a temporary lack -ENOSPC. It zeroes out\nthe first half but convert the entire on-disk extent to written since\nthe EXT4_EXT_DATA_VALID2 flag set, but left the second half as unwritten\nin the extent status tree.\n\n   [0000000000SSSSSS]  data                S: stale data, 0: zeroed\n   [WWWWWWWWWWWWWWWW]  on-disk extent      W: written extent\n   [WWWWWWWWWWUUUUUU]  extent status tree\n\nFinally, if the DIO failed to write data to the disk, the stale data in\nthe second half will be exposed once the cached extent entry is gone.\n\nFix this issue by not passing EXT4_GET_BLOCKS_CONVERT when splitting\nan unwritten extent before submitting I/O, and make\next4_split_convert_extents() to zero out the entire extent range\nto zero for this case, and also mark the extent in the extent status\ntree for consistency.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45985",
          "url": "https://www.suse.com/security/cve/CVE-2026-45985"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266700 for CVE-2026-45985",
          "url": "https://bugzilla.suse.com/1266700"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-45985"
    },
    {
      "cve": "CVE-2026-46028",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46028"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - snapshot IV for async AEAD requests\n\nAF_ALG AEAD AIO requests currently use the socket-wide IV buffer during\nrequest processing.  For async requests, later socket activity can\nupdate that shared state before the original request has fully\ncompleted, which can lead to inconsistent IV handling.\n\nSnapshot the IV into per-request storage when preparing the AEAD\nrequest, so in-flight operations no longer depend on mutable socket\nstate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46028",
          "url": "https://www.suse.com/security/cve/CVE-2026-46028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267430 for CVE-2026-46028",
          "url": "https://bugzilla.suse.com/1267430"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46028"
    },
    {
      "cve": "CVE-2026-46053",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46053"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: rds: fix MR cleanup on copy error\n\n__rds_rdma_map() hands sg/pages ownership to the transport after\nget_mr() succeeds. If copying the generated cookie back to user space\nfails after that point, the error path must not free those resources\nagain before dropping the MR reference.\n\nRemove the duplicate unpin/free from the put_user() failure branch so\nthat MR teardown is handled only through the existing final cleanup\npath.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46053",
          "url": "https://www.suse.com/security/cve/CVE-2026-46053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267427 for CVE-2026-46053",
          "url": "https://bugzilla.suse.com/1267427"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46053"
    },
    {
      "cve": "CVE-2026-46063",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46063"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/shstk: Prevent deadlock during shstk sigreturn\n\nDuring sigreturn the shadow stack signal frame is popped. The kernel does\nthis by reading the shadow stack using normal read accesses. When it can\u0027t\nassume the memory is shadow stack, it takes extra steps to makes sure it is\nreading actual shadow stack memory and not other normal readable memory. It\ndoes this by holding the mmap read lock while doing the access and checking\nthe flags of the VMA.\n\nUnfortunately that is not safe. If the read of the shadow stack sigframe\nhits a page fault, the fault handler will try to recursively grab another\nmmap read lock. This normally works ok, but if a writer on another CPU is\nalso waiting, the second read lock could fail and cause a deadlock.\n\nFix this by not holding mmap lock during the read access to userspace.\n\nInstead use mmap_lock_speculate_...() to watch for changes between dropping\nmmap lock and the userspace access. Retry if anything grabbed an mmap write\nlock in between and could have changed the VMA.\n\nThese mmap_lock_speculate_...() helpers use mm::mm_lock_seq, which is only\navailable when PER_VMA_LOCK is configured. So make X86_USER_SHADOW_STACK\ndepend on it. On x86, PER_VMA_LOCK is a default configuration for SMP\nkernels. So drop support for the other configs under the assumption that\nthe !SMP shadow stack user base does not exist.\n\nCurrently there is a check that skips the lookup work when the SSP can be\nassumed to be on a shadow stack. While reorganizing the function, remove\nthe optimization to make the tricky code flows more common, such that\nissues like this cannot escape detection for so long.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46063",
          "url": "https://www.suse.com/security/cve/CVE-2026-46063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267228 for CVE-2026-46063",
          "url": "https://bugzilla.suse.com/1267228"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46063"
    },
    {
      "cve": "CVE-2026-46065",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46065"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info\n\nHold state of deferred I/O in struct fb_deferred_io_state. Allocate an\ninstance as part of initializing deferred I/O and remove it only after\nthe final mapping has been closed. If the fb_info and the contained\ndeferred I/O meanwhile goes away, clear struct fb_deferred_io_state.info\nto invalidate the mapping. Any access will then result in a SIGBUS\nsignal.\n\nFixes a long-standing problem, where a device hot-unplug happens while\nuser space still has an active mapping of the graphics memory. The hot-\nunplug frees the instance of struct fb_info. Accessing the memory will\noperate on undefined state.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46065",
          "url": "https://www.suse.com/security/cve/CVE-2026-46065"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267458 for CVE-2026-46065",
          "url": "https://bugzilla.suse.com/1267458"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46065"
    },
    {
      "cve": "CVE-2026-46069",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46069"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()\n\nThe mwifiex_adapter_cleanup() function uses timer_delete()\n(non-synchronous) for the wakeup_timer before the adapter structure is\nfreed. This is incorrect because timer_delete() does not wait for any\nrunning timer callback to complete.\n\nIf the wakeup_timer callback (wakeup_timer_fn) is executing when\nmwifiex_adapter_cleanup() is called, the callback will continue to\naccess adapter fields (adapter-\u003ehw_status, adapter-\u003eif_ops.card_reset,\netc.) which may be freed by mwifiex_free_adapter() called later in the\nmwifiex_remove_card() path.\n\nUse timer_delete_sync() instead to ensure any running timer callback has\ncompleted before returning.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46069",
          "url": "https://www.suse.com/security/cve/CVE-2026-46069"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267437 for CVE-2026-46069",
          "url": "https://bugzilla.suse.com/1267437"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46069"
    },
    {
      "cve": "CVE-2026-46071",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46071"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Avoid clearing VMCB_LBR in vmcb12\n\nsvm_copy_lbrs() always marks VMCB_LBR dirty in the destination VMCB.\nHowever, nested_svm_vmexit() uses it to copy LBRs to vmcb12, and\nclearing clean bits in vmcb12 is not architecturally defined.\n\nMove vmcb_mark_dirty() to callers and drop it for vmcb12.\n\nThis also facilitates incoming refactoring that does not pass the entire\nVMCB to svm_copy_lbrs().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46071",
          "url": "https://www.suse.com/security/cve/CVE-2026-46071"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267591 for CVE-2026-46071",
          "url": "https://bugzilla.suse.com/1267591"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267896 for CVE-2026-46071",
          "url": "https://bugzilla.suse.com/1267896"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46071"
    },
    {
      "cve": "CVE-2026-46076",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46076"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1\n\nExplicitly synthesize a #UD for VMMCALL if L2 is active, L1 does NOT want\nto intercept VMMCALL, nested_svm_l2_tlb_flush_enabled() is true, and the\nhypercall is something other than one of the supported Hyper-V hypercalls.\nWhen all of the above conditions are met, KVM will intercept VMMCALL but\nnever forward it to L1, i.e. will let L2 make hypercalls as if it were L1.\n\nThe TLFS says a whole lot of nothing about this scenario, so go with the\narchitectural behavior, which says that VMMCALL #UDs if it\u0027s not\nintercepted.\n\nOpportunistically do a 2-for-1 stub trade by stub-ifying the new API\ninstead of the helpers it uses.  The last remaining \"single\" stub will\nsoon be dropped as well.\n\n[sean: rewrite changelog and comment, tag for stable, remove defunct stubs]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46076",
          "url": "https://www.suse.com/security/cve/CVE-2026-46076"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267365 for CVE-2026-46076",
          "url": "https://bugzilla.suse.com/1267365"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267366 for CVE-2026-46076",
          "url": "https://bugzilla.suse.com/1267366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46076"
    },
    {
      "cve": "CVE-2026-46112",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46112"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix unlocked call to hns_roce_qp_remove()\n\nSashiko points out that hns_roce_qp_remove() requires the caller to hold\nlocks.  The error flow in hns_roce_create_qp_common() doesn\u0027t hold those\nlocks for the error unwind so it risks corrupting memory.\n\nGrab the same locks the other two callers use.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46112",
          "url": "https://www.suse.com/security/cve/CVE-2026-46112"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267582 for CVE-2026-46112",
          "url": "https://bugzilla.suse.com/1267582"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46112"
    },
    {
      "cve": "CVE-2026-46116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: defensively unhash xfrm_state lists in __xfrm_state_delete\n\nKASAN reproduces a slab-use-after-free in __xfrm_state_delete()\u0027s\nhlist_del_rcu calls under syzkaller load on linux-6.12.y stable\n(reproduced on 6.12.47, also reachable via the same code path on\ntorvalds/master and on the ipsec tree). Nine unique signatures cluster\nin the xfrm_state lifecycle, the load-bearing one being:\n\n  BUG: KASAN: slab-use-after-free in __hlist_del include/linux/list.h:990 [inline]\n  BUG: KASAN: slab-use-after-free in hlist_del_rcu include/linux/rculist.h:516 [inline]\n  BUG: KASAN: slab-use-after-free in __xfrm_state_delete net/xfrm/xfrm_state.c\n  Write of size 8 at addr ffff8881198bcb70 by task kworker/u8:9/435\n\n  Workqueue: netns cleanup_net\n  Call Trace:\n   __hlist_del / hlist_del_rcu\n   __xfrm_state_delete\n   xfrm_state_delete\n   xfrm_state_flush\n   xfrm_state_fini\n   ops_exit_list\n   cleanup_net\n\nThe other observed signatures hit the same slab object from\n__xfrm_state_lookup, xfrm_alloc_spi, __xfrm_state_insert and an OOB\nwrite variant of __xfrm_state_delete, all on the byseq/byspi\nhash chains.\n\n__xfrm_state_delete() guards its byseq and byspi unhashes with\nvalue-based predicates:\n\n\tif (x-\u003ekm.seq)\n\t\thlist_del_rcu(\u0026x-\u003ebyseq);\n\tif (x-\u003eid.spi)\n\t\thlist_del_rcu(\u0026x-\u003ebyspi);\n\nwhile everywhere else in the file (e.g. state_cache, state_cache_input)\nthe safer hlist_unhashed() check is used. xfrm_alloc_spi() sets\nx-\u003eid.spi = newspi inside xfrm_state_lock and then immediately inserts\ninto byspi, but a path that observes x-\u003eid.spi != 0 outside of\nxfrm_state_lock can still skip-or-hit the byspi unhash inconsistently\nwith whether x is actually on the list. The same holds for x-\u003ekm.seq\nversus byseq, and the bydst/bysrc unhashes have no predicate at all,\nso a second __xfrm_state_delete() on the same object writes through\nLIST_POISON pprev.\n\nThe defensive change here:\n\n  - Use hlist_del_init_rcu() instead of hlist_del_rcu() on bydst,\n    bysrc, byseq and byspi so a second deletion is a no-op rather\n    than a write through LIST_POISON pprev. The byseq/byspi nodes\n    are already initialised in xfrm_state_alloc().\n  - Test hlist_unhashed() rather than the value predicate for\n    byseq/byspi, so the unhash decision tracks list state rather than\n    mutable scalar fields.\n\nEmpirical verification: applied this patch on top of v6.12.47, rebuilt,\nand re-ran the same syzkaller harness for 1h16m on a previously-crashy\nconfiguration that produced ~100 hits each of slab-use-after-free\nRead in xfrm_alloc_spi / Read in __xfrm_state_lookup / Write in\n__xfrm_state_delete. After the patch, 7.1M execs across 32 VMs at\n~1550 exec/sec produced zero xfrm_state UAF/OOB hits. /proc/slabinfo\nconfirms the xfrm_state slab is actively allocated and freed during\nthe run (~143 KiB resident), so the fuzzer is still exercising those\ncode paths -- they just no longer crash.\n\nReproduction:\n\n  - Linux 6.12.47 x86_64 + KASAN_GENERIC + KASAN_INLINE + KCOV\n  - syzkaller @ 746545b8b1e4c3a128db8652b340d3df90ce61db\n  - 32 QEMU/KVM VMs x 2 vCPU on AWS c5.metal bare metal\n  - 9 unique signatures collected in ~9h, all within xfrm_state\n    lifecycle",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46116",
          "url": "https://www.suse.com/security/cve/CVE-2026-46116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267369 for CVE-2026-46116",
          "url": "https://bugzilla.suse.com/1267369"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267370 for CVE-2026-46116",
          "url": "https://bugzilla.suse.com/1267370"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274780 for CVE-2026-46116",
          "url": "https://bugzilla.suse.com/1274780"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46116"
    },
    {
      "cve": "CVE-2026-46124",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46124"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nisofs: validate block number from NFS file handle in isofs_export_iget\n\nisofs_fh_to_dentry() and isofs_fh_to_parent() pass an attacker-\ncontrolled block number (ifid-\u003eblock or ifid-\u003eparent_block) from\nthe NFS file handle to isofs_export_iget(), which only rejects\nblock == 0 before calling isofs_iget() and ultimately sb_bread().\nA crafted file handle with fh_len sufficient to pass the check\nadded by commit 0405d4b63d08 (\"isofs: Prevent the use of too small\nfid\") can still drive the server to read any in-range block on the\nbacking device as if it were an iso_directory_record.  That earlier\nfix was assigned CVE-2025-37780.\n\nsb_bread() on an out-of-range block returns NULL cleanly via the\nEIO path, so there is no memory-safety violation.  For in-range\nreads of adjacent-partition data on the same block device, the\nunrelated bytes end up in iso_inode_info fields that reach the NFS\nclient as dentry metadata.  The deployment surface (isofs exported\nover NFS from loop-mounted images) is narrow and requires an\nauthenticated NFS peer, but the malformed-file-handle class is\nreportable as hardening next to the existing CVE-2025-37780 fix.\n\nReject block \u003e= ISOFS_SB(sb)-\u003es_nzones in isofs_export_iget() so\nthe check covers both isofs_fh_to_dentry() and isofs_fh_to_parent()\ncall sites with a single line.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46124",
          "url": "https://www.suse.com/security/cve/CVE-2026-46124"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266847 for CVE-2026-46124",
          "url": "https://bugzilla.suse.com/1266847"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46124"
    },
    {
      "cve": "CVE-2026-46133",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46133"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Reject unknown opcodes before ICRC processing\n\nEven after applying commit 7244491dab34 (\"RDMA/rxe: Validate pad and ICRC\nbefore payload_size() in rxe_rcv\"), a single unauthenticated UDP packet\ncan still trigger panic.  That patch handled payload_size() underflow only\nfor valid opcodes with short packets, not for packets carrying an unknown\nopcode.  The unknown-opcode OOB read described below predates that commit\nand reaches back to the initial Soft RoCE driver.\n\nThe check added there reads\n\n    pkt-\u003epaylen \u003c header_size(pkt) + bth_pad(pkt) + RXE_ICRC_SIZE\n\nwhere header_size(pkt) expands to rxe_opcode[pkt-\u003eopcode].length.  The\nrxe_opcode[] array has 256 entries but is only populated for defined IB\nopcodes; any other entry (for example opcode 0xff) is zero-initialized, so\nlength == 0 and the check degenerates to\n\n    pkt-\u003epaylen \u003c 0 + bth_pad(pkt) + RXE_ICRC_SIZE\n\nwhich does not constrain pkt-\u003epaylen enough.  rxe_icrc_hdr() then computes\n\n    rxe_opcode[pkt-\u003eopcode].length - RXE_BTH_BYTES\n\nwhich underflows when length == 0 and passes a huge value to rxe_crc32(),\ncausing an out-of-bounds read of the skb payload.\n\nReproduced on v7.0-rc7 with that fix applied, QEMU/KVM with\nCONFIG_RDMA_RXE=y and CONFIG_KASAN=y, after\n\n    rdma link add rxe0 type rxe netdev eth0\n\nA single 48-byte UDP packet to port 4791 with BTH opcode=0xff and\nQPN=IB_MULTICAST_QPN triggers:\n\n    BUG: KASAN: slab-out-of-bounds in crc32_le+0x115/0x170\n    Read of size 1 at addr ...\n    The buggy address is located 0 bytes to the right of\n     allocated 704-byte region\n    Call Trace:\n     crc32_le+0x115/0x170\n     rxe_icrc_hdr.isra.0+0x226/0x300\n     rxe_icrc_check+0x13f/0x3a0\n     rxe_rcv+0x6e1/0x16e0\n     rxe_udp_encap_recv+0x20a/0x320\n     udp_queue_rcv_one_skb+0x7ed/0x12c0\n\nSubsequent packets with the same shape fault on unmapped memory and panic\nthe kernel.  The trigger requires only module load and \"rdma link add\"; no\nQP, no connection, and no authentication.\n\nFix this by rejecting packets whose opcode has no rxe_opcode[] entry,\ndetected via the zero mask or zero length, before any length arithmetic\nruns.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46133",
          "url": "https://www.suse.com/security/cve/CVE-2026-46133"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266928 for CVE-2026-46133",
          "url": "https://bugzilla.suse.com/1266928"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46133"
    },
    {
      "cve": "CVE-2026-46173",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46173"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexit: prevent preemption of oopsing TASK_DEAD task\n\nWhen an already-exiting task oopses, make_task_dead() currently calls\ndo_task_dead() with preemption enabled.  That is forbidden:\ndo_task_dead() calls __schedule(), which has a comment saying \"WARNING:\nmust be called with preemption disabled!\".\n\nIf an oopsing task is preempted in do_task_dead(), between becoming\nTASK_DEAD and entering the scheduler explicitly, bad things happen:\nfinish_task_switch() assumes that once the scheduler has switched away\nfrom a TASK_DEAD task, the task can never run again and its stack is no\nlonger needed; but that assumption apparently doesn\u0027t hold if the dead\ntask was preempted (the SM_PREEMPT case).\n\nThis means that the scheduler ends up repeatedly dropping references on\nthe dead task\u0027s stack, which can lead to use-after-free or double-free\nof the entire task stack; in other words, two tasks can end up running\non the same stack, resulting in various kinds of memory corruption.\n\n(This does not just affect \"recursively oopsing\" tasks; it is enough to\noops once during task exit, for example in a file_operations::release\nhandler)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46173",
          "url": "https://www.suse.com/security/cve/CVE-2026-46173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267722 for CVE-2026-46173",
          "url": "https://bugzilla.suse.com/1267722"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267723 for CVE-2026-46173",
          "url": "https://bugzilla.suse.com/1267723"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46173"
    },
    {
      "cve": "CVE-2026-46185",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46185"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: fix out-of-bounds read in symlink_data()\n\nSince smb2_check_message() returns success without length validation for\nthe symlink error response, in symlink_data() it is possible for\niov-\u003eiov_len to be smaller than sizeof(struct smb2_err_rsp). If the buffer\nonly contains the base SMB2 header (64 bytes), accessing\nerr-\u003eErrorContextCount (at offset 66) or err-\u003eByteCount later in\nsymlink_data() will cause an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46185",
          "url": "https://www.suse.com/security/cve/CVE-2026-46185"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266830 for CVE-2026-46185",
          "url": "https://bugzilla.suse.com/1266830"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46185"
    },
    {
      "cve": "CVE-2026-46214",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46214"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: fix accept queue count leak on transport mismatch\n\nvirtio_transport_recv_listen() calls sk_acceptq_added() before\nvsock_assign_transport(). If vsock_assign_transport() fails or\nselects a different transport, the error path returns without\ncalling sk_acceptq_removed(), permanently incrementing\nsk_ack_backlog.\n\nAfter approximately backlog+1 such failures, sk_acceptq_is_full()\nreturns true, causing the listener to reject all new connections.\n\nFix by moving sk_acceptq_added() to after the transport validation,\nmatching the pattern used by vmci_transport and hyperv_transport.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46214",
          "url": "https://www.suse.com/security/cve/CVE-2026-46214"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267717 for CVE-2026-46214",
          "url": "https://bugzilla.suse.com/1267717"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46214"
    },
    {
      "cve": "CVE-2026-46229",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46229"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Clear VRAM on allocation to prevent stale data exposure\n\nKFD VRAM allocations set AMDGPU_GEM_CREATE_VRAM_WIPE_ON_RELEASE\nbut not AMDGPU_GEM_CREATE_VRAM_CLEARED, leaving freshly allocated\nVRAM with stale data from prior use observable by compute kernels.\n\nThe GEM ioctl path already sets VRAM_CLEARED for all userspace\nallocations via amdgpu_gem_create_ioctl() and\namdgpu_mode_dumb_create(). The KFD path was missing this flag,\nallowing stale page table remnants to leak into user buffers.\n\nThis causes crashes in RCCL P2P transport where non-zero data in\nptrExchange/head/tail fields corrupts the protocol handshake.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46229",
          "url": "https://www.suse.com/security/cve/CVE-2026-46229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267567 for CVE-2026-46229",
          "url": "https://bugzilla.suse.com/1267567"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267568 for CVE-2026-46229",
          "url": "https://bugzilla.suse.com/1267568"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46229"
    },
    {
      "cve": "CVE-2026-46253",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46253"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npstore/ram: fix buffer overflow in persistent_ram_save_old()\n\npersistent_ram_save_old() can be called multiple times for the same\npersistent_ram_zone (e.g., via ramoops_pstore_read -\u003e ramoops_get_next_prz\nfor PSTORE_TYPE_DMESG records).\n\nCurrently, the function only allocates prz-\u003eold_log when it is NULL,\nbut it unconditionally updates prz-\u003eold_log_size to the current buffer\nsize and then performs memcpy_fromio() using this new size. If the\nbuffer size has grown since the first allocation (which can happen\nacross different kernel boot cycles), this leads to:\n\n1. A heap buffer overflow (OOB write) in the memcpy_fromio() calls\n2. A subsequent OOB read when ramoops_pstore_read() accesses the buffer\n   using the incorrect (larger) old_log_size\n\nThe KASAN splat would look similar to:\n  BUG: KASAN: slab-out-of-bounds in ramoops_pstore_read+0x...\n  Read of size N at addr ... by task ...\n\nThe conditions are likely extremely hard to hit:\n\n  0. Crash with a ramoops write of less-than-record-max-size bytes.\n  1. Reboot: ramoops registers, pstore_get_records(0) reads old crash,\n     allocates old_log with size X\n  2. Crash handler registered, timer started (if pstore_update_ms \u003e= 0)\n  3. Oops happens (non-fatal, system continues)\n  4. pstore_dump() writes oops via ramoops_pstore_write() size Y (\u003eX)\n  5. pstore_new_entry = 1, pstore_timer_kick() called\n  6. System continues running (not a panic oops)\n  7. Timer fires after pstore_update_ms milliseconds\n  8. pstore_timefunc() -\u003e schedule_work() -\u003e pstore_dowork() -\u003e pstore_get_records(1)\n  9. ramoops_get_next_prz() -\u003e persistent_ram_save_old()\n 10. buffer_size() returns Y, but old_log is X bytes\n 11. Y \u003e X: memcpy_fromio() overflows heap\n\n  Requirements:\n  - a prior crash record exists that did not fill the record size\n    (almost impossible since the crash handler writes as much as it\n    can possibly fit into the record, capped by max record size and\n    the kmsg buffer almost always exceeds the max record size)\n  - pstore_update_ms \u003e= 0 (disabled by default)\n  - Non-fatal oops (system survives)\n\nFree and reallocate the buffer when the new size differs from the\npreviously allocated size. This ensures old_log always has sufficient\nspace for the data being copied.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46253",
          "url": "https://www.suse.com/security/cve/CVE-2026-46253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267635 for CVE-2026-46253",
          "url": "https://bugzilla.suse.com/1267635"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46253"
    },
    {
      "cve": "CVE-2026-46254",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46254"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nAppArmor: Allow apparmor to handle unaligned dfa tables\n\nThe dfa tables can originate from kernel or userspace and 8-byte alignment\nisn\u0027t always guaranteed and as such may trigger unaligned memory accesses\non various architectures. Resulting in the following\n\n[     73.901376] WARNING: CPU: 0 PID: 341 at security/apparmor/match.c:316 aa_dfa_unpack+0x6cc/0x720\n[     74.015867] Modules linked in: binfmt_misc evdev flash sg drm drm_panel_orientation_quirks backlight i2c_core configfs nfnetlink autofs4 ext4 crc16 mbcache jbd2 hid_generic usbhid sr_mod hid cdrom\nsd_mod ata_generic ohci_pci ehci_pci ehci_hcd ohci_hcd pata_ali libata sym53c8xx scsi_transport_spi tg3 scsi_mod usbcore libphy scsi_common mdio_bus usb_common\n[     74.428977] CPU: 0 UID: 0 PID: 341 Comm: apparmor_parser Not tainted 6.18.0-rc6+ #9 NONE\n[     74.536543] Call Trace:\n[     74.568561] [\u003c0000000000434c24\u003e] dump_stack+0x8/0x18\n[     74.633757] [\u003c0000000000476438\u003e] __warn+0xd8/0x100\n[     74.696664] [\u003c00000000004296d4\u003e] warn_slowpath_fmt+0x34/0x74\n[     74.771006] [\u003c00000000008db28c\u003e] aa_dfa_unpack+0x6cc/0x720\n[     74.843062] [\u003c00000000008e643c\u003e] unpack_pdb+0xbc/0x7e0\n[     74.910545] [\u003c00000000008e7740\u003e] unpack_profile+0xbe0/0x1300\n[     74.984888] [\u003c00000000008e82e0\u003e] aa_unpack+0xe0/0x6a0\n[     75.051226] [\u003c00000000008e3ec4\u003e] aa_replace_profiles+0x64/0x1160\n[     75.130144] [\u003c00000000008d4d90\u003e] policy_update+0xf0/0x280\n[     75.201057] [\u003c00000000008d4fc8\u003e] profile_replace+0xa8/0x100\n[     75.274258] [\u003c0000000000766bd0\u003e] vfs_write+0x90/0x420\n[     75.340594] [\u003c00000000007670cc\u003e] ksys_write+0x4c/0xe0\n[     75.406932] [\u003c0000000000767174\u003e] sys_write+0x14/0x40\n[     75.472126] [\u003c0000000000406174\u003e] linux_sparc_syscall+0x34/0x44\n[     75.548802] ---[ end trace 0000000000000000 ]---\n[     75.609503] dfa blob stream 0xfff0000008926b96 not aligned.\n[     75.682695] Kernel unaligned access at TPC[8db2a8] aa_dfa_unpack+0x6e8/0x720\n\nWork around it by using the get_unaligned_xx() helpers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46254",
          "url": "https://www.suse.com/security/cve/CVE-2026-46254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267637 for CVE-2026-46254",
          "url": "https://bugzilla.suse.com/1267637"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46254"
    },
    {
      "cve": "CVE-2026-46266",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46266"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP\n\nYizhou Zhao reported that simply having one RAW socket on protocol\nIPPROTO_RAW (255) was dangerous.\n\n  socket(AF_INET, SOCK_RAW, 255);\n\nA malicious incoming ICMP packet can set the protocol field to 255\nand match this socket, leading to FNHE cache changes.\n\ninner = IP(src=\"192.168.2.1\", dst=\"8.8.8.8\", proto=255)/Raw(\"TEST\")\npkt = IP(src=\"192.168.1.1\", dst=\"192.168.2.1\")/ICMP(type=3, code=4, nexthopmtu=576)/inner\n\n\"man 7 raw\" states:\n\n  A protocol of IPPROTO_RAW implies enabled IP_HDRINCL and is able\n  to send any IP protocol that is specified in the passed header.\n  Receiving of all IP protocols via IPPROTO_RAW is not possible\n  using raw sockets.\n\nMake sure we drop these malicious packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46266",
          "url": "https://www.suse.com/security/cve/CVE-2026-46266"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267684 for CVE-2026-46266",
          "url": "https://bugzilla.suse.com/1267684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267888 for CVE-2026-46266",
          "url": "https://bugzilla.suse.com/1267888"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46266"
    },
    {
      "cve": "CVE-2026-46274",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46274"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio-wq: check that the predecessor is hashed in io_wq_remove_pending()\n\nio_wq_remove_pending() needs to fix up wq-\u003ehash_tail[] if the cancelled\nwork was the tail of its hash bucket. When doing this, it checks whether\nthe preceding entry in acct-\u003ework_list has the same hash value, but\nnever checks that the predecessor is hashed at all. io_get_work_hash()\nis simply atomic_read(\u0026work-\u003eflags) \u003e\u003e IO_WQ_HASH_SHIFT, and the hash\nbits are never set for non-hashed work, so it returns 0. Thus, when a\nhashed bucket-0 work is cancelled while a non-hashed work is its list\npredecessor, the check spuriously passes and a pointer to the non-hashed\nio_kiocb is stored in wq-\u003ehash_tail[0].\n\nBecause non-hashed work is dequeued via the fast path in\nio_get_next_work(), which never touches hash_tail[], the stale pointer\nis never cleared. Therefore, after the non-hashed io_kiocb completes and\nis freed back to req_cachep, wq-\u003ehash_tail[0] is a dangling pointer. The\nio_wq is per-task (tctx-\u003eio_wq) and survives ring open/close, so the\ndangling pointer persists for the lifetime of the task; the next hashed\nbucket-0 enqueue dereferences it in io_wq_insert_work() and\nwq_list_add_after() writes through freed memory.\n\nAdd the missing io_wq_is_hashed() check so a non-hashed predecessor\nnever inherits a hash_tail[] slot.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46274",
          "url": "https://www.suse.com/security/cve/CVE-2026-46274"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267918 for CVE-2026-46274",
          "url": "https://bugzilla.suse.com/1267918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268624 for CVE-2026-46274",
          "url": "https://bugzilla.suse.com/1268624"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46274"
    },
    {
      "cve": "CVE-2026-46289",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46289"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib/scatterlist: fix length calculations in extract_kvec_to_sg\n\nPatch series \"Fix bugs in extract_iter_to_sg()\", v3.\n\nFix bugs in the kvec and user variants of extract_iter_to_sg.  This series\nis growing due to useful remarks made by sashiko.dev.\n\nThe main bugs are:\n- The length for an sglist entry when extracting from\n  a kvec can exceed the number of bytes in the page. This\n  is obviously not intended.\n- When extracting a user buffer the sglist is temporarily\n  used as a scratch buffer for extracted page pointers.\n  If the sglist already contains some elements this scratch\n  buffer could overlap with existing entries in the sglist.\n\nThe series adds test cases to the kunit_iov_iter test that demonstrate all\nof these bugs.  Additionally, there is a memory leak fix for the test\nitself.\n\nThe bugs were orignally introduced into kernel v6.3 where the function\nlived in fs/netfs/iterator.c.  It was later moved to lib/scatterlist.c in\nv6.5.  Thus the actual fix is only marked for backports to v6.5+.\n\n\nThis patch (of 5):\n\nWhen extracting from a kvec to a scatterlist, do not cross page\nboundaries.  The required length was already calculated but not used as\nintended.\n\nAdjust the copied length if the loop runs out of sglist entries without\nextracting everything.\n\nWhile there, return immediately from extract_iter_to_sg if there are no\nsglist entries at all.\n\nA subsequent commit will add kunit test cases that demonstrate that the\npatch is necessary.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46289",
          "url": "https://www.suse.com/security/cve/CVE-2026-46289"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267966 for CVE-2026-46289",
          "url": "https://bugzilla.suse.com/1267966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46289"
    },
    {
      "cve": "CVE-2026-46291",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46291"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: caam - guard HMAC key hex dumps in hash_digest_key\n\nUse print_hex_dump_devel() for dumping sensitive HMAC key bytes in\nhash_digest_key() to avoid leaking secrets at runtime when\nCONFIG_DYNAMIC_DEBUG is enabled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46291",
          "url": "https://www.suse.com/security/cve/CVE-2026-46291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267937 for CVE-2026-46291",
          "url": "https://bugzilla.suse.com/1267937"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46291"
    },
    {
      "cve": "CVE-2026-46319",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46319"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ct: Only release RCU read lock after ct_ft\n\nWhen looking up a flow table in act_ct in tcf_ct_flow_table_get(),\nrhashtable_lookup_fast() internally opens and closes an RCU read critical\nsection before returning ct_ft.\nThe tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero()\nis invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft\nobject. This vulnerability can lead to privilege escalation.\n\nAnalysis from zdi-disclosures@trendmicro.com:\nWhen initializing act_ct, tcf_ct_init() is called, which internally triggers\ntcf_ct_flow_table_get().\n\nstatic int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)\n\n{\n                struct zones_ht_key key = { .net = net, .zone = params-\u003ezone };\n                struct tcf_ct_flow_table *ct_ft;\n                int err = -ENOMEM;\n\n                mutex_lock(\u0026zones_mutex);\n                ct_ft = rhashtable_lookup_fast(\u0026zones_ht, \u0026key, zones_params); // [1]\n                if (ct_ft \u0026\u0026 refcount_inc_not_zero(\u0026ct_ft-\u003eref)) // [2]\n                                goto out_unlock;\n                ...\n}\n\nstatic __always_inline void *rhashtable_lookup_fast(\n                struct rhashtable *ht, const void *key,\n                const struct rhashtable_params params)\n{\n                void *obj;\n\n                rcu_read_lock();\n                obj = rhashtable_lookup(ht, key, params);\n                rcu_read_unlock();\n\n                return obj;\n}\n\nAt [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft\nfrom zones_ht . The lookup is performed within an RCU read critical section\nthrough rcu_read_lock() / rcu_read_unlock(), which prevents the object from\nbeing freed. However, at the point of function return, rcu_read_unlock() has\nalready been called, and there is nothing preventing ct_ft from being freed\nbefore reaching refcount_inc_not_zero(\u0026ct_ft-\u003eref) at [2]. This interval becomes\nthe race window, during which ct_ft can be freed.\n\nFree Process:\n\ntcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu()\ntcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().\n\nstatic void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft)\n{\n                if (refcount_dec_and_test(\u0026ct_ft-\u003eref)) {\n                                rhashtable_remove_fast(\u0026zones_ht, \u0026ct_ft-\u003enode, zones_params);\n                                INIT_RCU_WORK(\u0026ct_ft-\u003erwork, tcf_ct_flow_table_cleanup_work); // [3]\n                                queue_rcu_work(act_ct_wq, \u0026ct_ft-\u003erwork);\n                }\n}\n\nAt [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work\n\nstatic void tcf_ct_flow_table_cleanup_work(struct work_struct *work)\n\n{\n                struct tcf_ct_flow_table *ct_ft;\n                struct flow_block *block;\n\n                ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,\n                                                                rwork);\n                nf_flow_table_free(\u0026ct_ft-\u003enf_ft);\n                block = \u0026ct_ft-\u003enf_ft.flow_block;\n                down_write(\u0026ct_ft-\u003enf_ft.flow_block_lock);\n                WARN_ON(!list_empty(\u0026block-\u003ecb_list));\n                up_write(\u0026ct_ft-\u003enf_ft.flow_block_lock);\n                kfree(ct_ft); // [4]\n\n                module_put(THIS_MODULE);\n}\n\ntcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes\nbetween [1] and [2], UAF occurs.\n\nThis race condition has a very short race window, making it generally\ndifficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was\ninserted after[1]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46319",
          "url": "https://www.suse.com/security/cve/CVE-2026-46319"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268022 for CVE-2026-46319",
          "url": "https://bugzilla.suse.com/1268022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268281 for CVE-2026-46319",
          "url": "https://bugzilla.suse.com/1268281"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46319"
    },
    {
      "cve": "CVE-2026-46320",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46320"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntap: free page on error paths in tap_get_user_xdp()\n\ntap_get_user_xdp() rejects a frame shorter than ETH_HLEN with -EINVAL,\nand returns -ENOMEM when build_skb() fails. Both paths jump to the err\nlabel without freeing the page that vhost_net_build_xdp() allocated for\nthe frame. tap_sendmsg() discards the per-buffer return value and always\nreturns 0, so vhost_tx_batch() takes the success path and never frees\nthe page; each rejected frame in a batch leaks one page-frag chunk.\n\nFree the page on both error paths, before the skb is built. This is the\ntap counterpart of the same leak in tun_xdp_one().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46320",
          "url": "https://www.suse.com/security/cve/CVE-2026-46320"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267993 for CVE-2026-46320",
          "url": "https://bugzilla.suse.com/1267993"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-46320"
    },
    {
      "cve": "CVE-2026-46328",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46328"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\napparmor: fix rlimit for posix cpu timers\n\nPosix cpu timers requires an additional step beyond setting the rlimit.\nRefactor the code so its clear when what code is setting the\nlimit and conditionally update the posix cpu timers when appropriate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46328",
          "url": "https://www.suse.com/security/cve/CVE-2026-46328"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268037 for CVE-2026-46328",
          "url": "https://bugzilla.suse.com/1268037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46328"
    },
    {
      "cve": "CVE-2026-46331",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46331"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fix pedit partial COW leading to page cache corruption\n\ntcf_pedit_act() computes the COW range for skb_ensure_writable()\nonce before the key loop using tcfp_off_max_hint, but the hint does\nnot account for the runtime header offset added by typed keys. This\ncan leave part of the write region un-COW\u0027d.\n\nFix by moving skb_ensure_writable() inside the per-key loop where\nthe actual write offset is known, and add overflow checking on the\noffset arithmetic. For negative offsets (e.g. Ethernet header edits\nat ingress), use skb_cow() to COW the headroom instead. Guard\noffset_valid() against INT_MIN, where negation is undefined.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46331",
          "url": "https://www.suse.com/security/cve/CVE-2026-46331"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265421 for CVE-2026-46331",
          "url": "https://bugzilla.suse.com/1265421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268335 for CVE-2026-46331",
          "url": "https://bugzilla.suse.com/1268335"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46331"
    },
    {
      "cve": "CVE-2026-52908",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52908"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA: During rereg_mr ensure that REREG_ACCESS is compatible\n\nIf IB_MR_REREG_ACCESS changes from RO to RW then the umem has to be\nre-evaluated to ensure it is properly pinned as RW. Since the umem is\nhidden inside each driver\u0027s mr struct add a ib_umem_check_rereg() function\nthat each driver has to call before processing IB_MR_REREG_ACCESS.\n\nmlx4 has to retain its duplicate ib_access_writable check because it\nimplements IB_MR_REREG_ACCESS | IB_MR_REREG_TRANS by changing both items\nin place sequentially while the MR is live, so it will continue to not\nsupport this combination.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52908",
          "url": "https://www.suse.com/security/cve/CVE-2026-52908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268661 for CVE-2026-52908",
          "url": "https://bugzilla.suse.com/1268661"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-52908"
    },
    {
      "cve": "CVE-2026-52909",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52909"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_vti: set netns_immutable on the fallback device.\n\njohn1988 and Noam Rathaus reported that vti6_init_net() does not set the\nnetns_immutable flag on the per-netns fallback tunnel device (ip6_vti0).\n\nOther similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel)\ncorrectly set this flag during their fallback device initialization to\nprevent them from being moved to another network namespace.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52909",
          "url": "https://www.suse.com/security/cve/CVE-2026-52909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268660 for CVE-2026-52909",
          "url": "https://bugzilla.suse.com/1268660"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268662 for CVE-2026-52909",
          "url": "https://bugzilla.suse.com/1268662"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52909"
    },
    {
      "cve": "CVE-2026-52918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: serialize accept_q access\n\nbt_sock_poll() walks the accept queue without synchronization, while\nchild teardown can unlink the same socket and drop its last reference.\nThe unsynchronized accept queue walk has existed since the initial\nBluetooth import.\n\nProtect accept_q with a dedicated lock for queue updates and polling.\nAlso rework bt_accept_dequeue() to take temporary child references under\nthe queue lock before dropping it and locking the child socket.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52918",
          "url": "https://www.suse.com/security/cve/CVE-2026-52918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269100 for CVE-2026-52918",
          "url": "https://bugzilla.suse.com/1269100"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269102 for CVE-2026-52918",
          "url": "https://bugzilla.suse.com/1269102"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52918"
    },
    {
      "cve": "CVE-2026-52923",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52923"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: limit next_id allocation to the valid ID range\n\nThe checkpoint/restore sysctl path can request the next SysV IPC id\nthrough ids-\u003enext_id.  ipc_idr_alloc() currently forwards that request to\nidr_alloc() with an open-ended upper bound.\n\nIf the valid tail of the SysV IPC id space is full, the allocation can\nspill beyond ipc_mni.  The returned SysV IPC id still uses the normal\nindex encoding, so later lookup and removal can target the wrong slot. \nThis leaves the real IDR entry behind and breaks the IDR state for the\nobject.\n\nThe bug is in ipc_idr_alloc() in the checkpoint/restore path.\n\n1. ids-\u003enext_id is passed to:\n\n       idr_alloc(\u0026ids-\u003eipcs_idr, new, ipcid_to_idx(next_id), 0, ...)\n\n2. The zero upper bound makes the allocation effectively open-ended.\n   Once the valid SysV IPC tail is occupied, idr_alloc() can spill past\n   ipc_mni and allocate an entry beyond the valid IPC id range.\n\n3. The new object id is still encoded with the narrower SysV IPC index\n   width:\n\n       new-\u003eid = (new-\u003eseq \u003c\u003c ipcmni_seq_shift()) + idx\n\n4. Later removal goes through ipc_rmid(), which uses:\n\n       ipcid_to_idx(ipcp-\u003eid)\n\n   That truncates the real IDR index. An object actually stored at a\n   high index can then be removed as if it lived at a low in-range\n   index.\n\n5. For shared memory, shm_destroy() frees the current object anyway, but\n   the real high IDR slot is left behind as a dangling pointer.\n\n6. A subsequent walk of /proc/sysvipc/shm reaches the stale IDR entry\n   and dereferences freed memory.\n\nPrevent this by bounding the requested allocation to ipc_mni so the\ncheckpoint/restore path fails once the valid range is exhausted.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52923",
          "url": "https://www.suse.com/security/cve/CVE-2026-52923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269033 for CVE-2026-52923",
          "url": "https://bugzilla.suse.com/1269033"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269034 for CVE-2026-52923",
          "url": "https://bugzilla.suse.com/1269034"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274780 for CVE-2026-52923",
          "url": "https://bugzilla.suse.com/1274780"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52923"
    },
    {
      "cve": "CVE-2026-52943",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52943"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: fix missing zerocopy reference in pskb_carve helpers\n\npskb_carve_inside_header() and pskb_carve_inside_nonlinear() both copy\nthe old skb_shared_info header into a new buffer via memcpy(), which\nincludes the destructor_arg pointer (uarg) for MSG_ZEROCOPY skbs.\nNeither function calls net_zcopy_get() for the new shinfo, creating an\nunaccounted holder: every skb_shared_info with destructor_arg set will\ncall skb_zcopy_clear() once when freed, but the corresponding\nnet_zcopy_get() was never called for the new copy. Repeated calls\ndrive uarg-\u003erefcnt to zero prematurely, freeing ubuf_info_msgzc while\nTX skbs still hold live destructor_arg pointers.\n\nKASAN reports use-after-free on a freed ubuf_info_msgzc:\n\n  BUG: KASAN: slab-use-after-free in skb_release_data+0x77b/0x810\n  Read of size 8 at addr ffff88801574d3e8 by task poc/220\n\n  Call Trace:\n   skb_release_data+0x77b/0x810\n   kfree_skb_list_reason+0x13e/0x610\n   skb_release_data+0x4cd/0x810\n   sk_skb_reason_drop+0xf3/0x340\n   skb_queue_purge_reason+0x282/0x440\n   rds_tcp_inc_free+0x1e/0x30\n   rds_recvmsg+0x354/0x1780\n   __sys_recvmsg+0xdf/0x180\n\n  Allocated by task 219:\n   msg_zerocopy_realloc+0x157/0x7b0\n   tcp_sendmsg_locked+0x2892/0x3ba0\n\n  Freed by task 219:\n   ip_recv_error+0x74a/0xb10\n   tcp_recvmsg+0x475/0x530\n\nThe skb consuming the late access still referenced the same uarg via\nshinfo-\u003edestructor_arg copied by pskb_carve_inside_nonlinear() without\na refcount bump. This has been verified to be reliably exploitable: a\nworking proof-of-concept achieves full root privilege escalation from\nan unprivileged local user on a default kernel configuration.\n\nThe fix follows the pattern of pskb_expand_head() which has the same\nmemcpy/cloned structure. For pskb_carve_inside_header(), net_zcopy_get()\nis placed after skb_orphan_frags() succeeds, so the orphan error path\nneeds no cleanup. For pskb_carve_inside_nonlinear(), net_zcopy_get() is\nplaced after all failure points and just before skb_release_data(), so\nno error path needs cleanup at all -- matching pskb_expand_head() more\nclosely and avoiding the need for a balancing net_zcopy_put().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52943",
          "url": "https://www.suse.com/security/cve/CVE-2026-52943"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269022 for CVE-2026-52943",
          "url": "https://bugzilla.suse.com/1269022"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269023 for CVE-2026-52943",
          "url": "https://bugzilla.suse.com/1269023"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52943"
    },
    {
      "cve": "CVE-2026-52954",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52954"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: handle rbtree insertion error in decode_choose_args()\n\nA message of type CEPH_MSG_OSD_MAP contains an OSD map that itself\ncontains a CRUSH map. The received CRUSH map may optionally contain\nchoose_args that get decoded in decode_choose_args(). In this function,\nnum_choose_arg_maps is read from the message, and a corresponding number\nof crush_choose_arg_maps gets decoded afterwards. Each\ncrush_choose_arg_map has a choose_args_index, which serves as the key\nwhen inserting it into the choose_args rbtree of the decoded crush_map.\nIf a (potentially corrupted) message contains two crush_choose_arg_maps\nwith the same index, the assertion in insert_choose_arg_map() triggers a\nkernel BUG when trying to insert the second crush_choose_arg_map.\n\nThis patch fixes the issue by switching to the non-asserting rbtree\ninsertion function and rejecting the message if the insertion fails.\n\n[ idryomov: changelog ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52954",
          "url": "https://www.suse.com/security/cve/CVE-2026-52954"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269137 for CVE-2026-52954",
          "url": "https://bugzilla.suse.com/1269137"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-52954"
    },
    {
      "cve": "CVE-2026-52957",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52957"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: Fix potential null-ptr-deref in decode_choose_args()\n\nA message of type CEPH_MSG_OSD_MAP contains an OSD map that itself\ncontains a CRUSH map. When decoding this CRUSH map in crush_decode(), an\narray of max_buckets CRUSH buckets is decoded, where some indices may\nnot refer to actual buckets and are therefore set to NULL. The received\nCRUSH map may optionally contain choose_args that get decoded in\ndecode_choose_args(). When decoding a crush_choose_arg_map, a series of\nchoose_args for different buckets is decoded, with the bucket_index\nbeing read from the incoming message. It is only checked that the bucket\nindex does not exceed max_buckets, but not that it doesn\u0027t point to an\nindex with a NULL bucket. If a (potentially corrupted) message contains\na crush_choose_arg_map including such a bucket_index, a null pointer\ndereference may occur in the subsequent processing when attempting to\naccess the bucket with the given index.\n\nThis patch fixes the issue by extending the affected check. Now, it is\nonly attempted to access the bucket if it is not NULL.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52957",
          "url": "https://www.suse.com/security/cve/CVE-2026-52957"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269103 for CVE-2026-52957",
          "url": "https://bugzilla.suse.com/1269103"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-52957"
    },
    {
      "cve": "CVE-2026-52962",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52962"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix a buffer leak in __ceph_setxattr()\n\nThe old_blob in __ceph_setxattr() can store\nci-\u003ei_xattrs.prealloc_blob value during the retry.\nHowever, it is never called the ceph_buffer_put()\nfor the old_blob object. This patch fixes the issue of\nthe buffer leak.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52962",
          "url": "https://www.suse.com/security/cve/CVE-2026-52962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269135 for CVE-2026-52962",
          "url": "https://bugzilla.suse.com/1269135"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-52962"
    },
    {
      "cve": "CVE-2026-52969",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52969"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Reject wrapped offset in kvm_reset_dirty_gfn()\n\nkvm_reset_dirty_gfn() guards the gfn range with\n\n\tif (!memslot || (offset + __fls(mask)) \u003e= memslot-\u003enpages)\n\t\treturn;\n\nbut offset is u64 and the addition is unchecked.  The check can be\nsilently bypassed by a u64 wrap.\n\nThe dirty ring backing those entries is MAP_SHARED at\nKVM_DIRTY_LOG_PAGE_OFFSET of the vcpu fd, so the VMM can rewrite the\nslot and offset fields of any entry between when the kernel pushes\nthem and when KVM_RESET_DIRTY_RINGS consumes them.  On reset,\nkvm_dirty_ring_reset() re-reads the values via READ_ONCE() and feeds\nthem straight back into this check; only the flags handshake is\ntreated as the handover, the slot/offset payload is taken on trust.\n\nCrafting two entries\n\n\tentry[i].offset   = 0xffffffffffffffc1\n\tentry[i+1].offset = 0\n\nmakes the coalescing loop in kvm_dirty_ring_reset() compute\n\n\tdelta = (s64)(0 - 0xffffffffffffffc1) = 63\n\nwhich falls in [0, BITS_PER_LONG), so it folds entry[i+1] into the\nexisting mask by setting bit 63.  The trailing kvm_reset_dirty_gfn()\ncall then sees offset = 0xffffffffffffffc1 and __fls(mask) = 63;\nthe sum is 0 in u64 and the bounds check passes.\n\nThat offset propagates into kvm_arch_mmu_enable_log_dirty_pt_masked()\nunchanged.  On the legacy MMU path -- kvm_memslots_have_rmaps() ==\ntrue, i.e. shadow paging, any VM that has allocated shadow roots, or\na write-tracked slot -- it reaches gfn_to_rmap(), which indexes\nslot-\u003earch.rmap[0][] with a near-U64_MAX gfn.  That is an\nout-of-bounds load of a kvm_rmap_head, followed by a conditional\nclear of PT_WRITABLE_MASK in whatever the loaded pointer points at.\nThe path is reachable from any process holding /dev/kvm.\n\nRange-check offset on its own first, so the addition cannot wrap.\nmemslot-\u003enpages is bounded well below U64_MAX, so once offset \u003c\nnpages holds, offset + __fls(mask) (with __fls(mask) \u003c BITS_PER_LONG)\nstays in range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52969",
          "url": "https://www.suse.com/security/cve/CVE-2026-52969"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269184 for CVE-2026-52969",
          "url": "https://bugzilla.suse.com/1269184"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270385 for CVE-2026-52969",
          "url": "https://bugzilla.suse.com/1270385"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-52969"
    },
    {
      "cve": "CVE-2026-52972",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-52972"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Cap AEAD AD length to 0x80000000\n\nIn order to prevent arithmetic overflows when checking the TX\nbuffer size, cap the associated data length to 0x80000000.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-52972",
          "url": "https://www.suse.com/security/cve/CVE-2026-52972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269195 for CVE-2026-52972",
          "url": "https://bugzilla.suse.com/1269195"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269196 for CVE-2026-52972",
          "url": "https://bugzilla.suse.com/1269196"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-52972"
    },
    {
      "cve": "CVE-2026-53016",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53016"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - copy IV using skcipher ivsize\n\nAF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.\n\nccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller\u0027s IV\nbuffer while RFC3686 skciphers expose an 8-byte IV, so the restore\noverruns the provided buffer.\n\nUse crypto_skcipher_ivsize() to copy only the algorithm\u0027s IV length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53016",
          "url": "https://www.suse.com/security/cve/CVE-2026-53016"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269090 for CVE-2026-53016",
          "url": "https://bugzilla.suse.com/1269090"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269766 for CVE-2026-53016",
          "url": "https://bugzilla.suse.com/1269766"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53016"
    },
    {
      "cve": "CVE-2026-53040",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53040"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: validate bg_bits during freefrag scan\n\n[BUG]\nA crafted filesystem can trigger an out-of-bounds bitmap walk when\nOCFS2_IOC_INFO is issued with OCFS2_INFO_FL_NON_COHERENT.\n\nBUG: KASAN: use-after-free in instrument_atomic_read include/linux/instrumented.h:68 [inline]\nBUG: KASAN: use-after-free in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]\nBUG: KASAN: use-after-free in test_bit_le include/asm-generic/bitops/le.h:21 [inline]\nBUG: KASAN: use-after-free in ocfs2_info_freefrag_scan_chain fs/ocfs2/ioctl.c:495 [inline]\nBUG: KASAN: use-after-free in ocfs2_info_freefrag_scan_bitmap fs/ocfs2/ioctl.c:588 [inline]\nBUG: KASAN: use-after-free in ocfs2_info_handle_freefrag fs/ocfs2/ioctl.c:662 [inline]\nBUG: KASAN: use-after-free in ocfs2_info_handle_request+0x1c66/0x3370 fs/ocfs2/ioctl.c:754\nRead of size 8 at addr ffff888031bce000 by task syz.0.636/1435\nCall Trace:\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xbe/0x130 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xd1/0x650 mm/kasan/report.c:482\n kasan_report+0xfb/0x140 mm/kasan/report.c:595\n check_region_inline mm/kasan/generic.c:186 [inline]\n kasan_check_range+0x11c/0x200 mm/kasan/generic.c:200\n __kasan_check_read+0x11/0x20 mm/kasan/shadow.c:31\n instrument_atomic_read include/linux/instrumented.h:68 [inline]\n _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]\n test_bit_le include/asm-generic/bitops/le.h:21 [inline]\n ocfs2_info_freefrag_scan_chain fs/ocfs2/ioctl.c:495 [inline]\n ocfs2_info_freefrag_scan_bitmap fs/ocfs2/ioctl.c:588 [inline]\n ocfs2_info_handle_freefrag fs/ocfs2/ioctl.c:662 [inline]\n ocfs2_info_handle_request+0x1c66/0x3370 fs/ocfs2/ioctl.c:754\n ocfs2_info_handle+0x18d/0x2a0 fs/ocfs2/ioctl.c:828\n ocfs2_ioctl+0x632/0x6e0 fs/ocfs2/ioctl.c:913\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x197/0x1e0 fs/ioctl.c:583\n ...\n\n[CAUSE]\nocfs2_info_freefrag_scan_chain() uses on-disk bg_bits directly as the\nbitmap scan limit. The coherent path reads group descriptors through\nocfs2_read_group_descriptor(), which validates the descriptor before\nuse. The non-coherent path uses ocfs2_read_blocks_sync() instead and\nskips that validation, so an impossible bg_bits value can drive the\nbitmap walk past the end of the block.\n\n[FIX]\nCompute the bitmap capacity from the filesystem format with\nocfs2_group_bitmap_size(), report descriptors whose bg_bits exceeds\nthat limit, and clamp the scan to the computed capacity. This keeps the\nfreefrag report going while avoiding reads beyond the buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53040",
          "url": "https://www.suse.com/security/cve/CVE-2026-53040"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269397 for CVE-2026-53040",
          "url": "https://bugzilla.suse.com/1269397"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53040"
    },
    {
      "cve": "CVE-2026-53041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix listxattr handling when the buffer is full\n\n[BUG]\nIf an OCFS2 inode has both inline and block-based xattrs, listxattr()\ncan return a size larger than the caller\u0027s buffer when the inline names\nconsume that buffer exactly.\n\nkernel BUG at mm/usercopy.c:102!\nOops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\nRIP: 0010:usercopy_abort+0xb7/0xd0 mm/usercopy.c:102\nCall Trace:\n __check_heap_object+0xe3/0x120 mm/slub.c:8243\n check_heap_object mm/usercopy.c:196 [inline]\n __check_object_size mm/usercopy.c:250 [inline]\n __check_object_size+0x5c5/0x780 mm/usercopy.c:215\n check_object_size include/linux/ucopysize.h:22 [inline]\n check_copy_size include/linux/ucopysize.h:59 [inline]\n copy_to_user include/linux/uaccess.h:219 [inline]\n listxattr+0xb0/0x170 fs/xattr.c:926\n filename_listxattr fs/xattr.c:958 [inline]\n path_listxattrat+0x137/0x320 fs/xattr.c:988\n __do_sys_listxattr fs/xattr.c:1001 [inline]\n __se_sys_listxattr fs/xattr.c:998 [inline]\n __x64_sys_listxattr+0x7f/0xd0 fs/xattr.c:998\n ...\n\n[CAUSE]\nCommit 936b8834366e (\"ocfs2: Refactor xattr list and remove\nocfs2_xattr_handler().\") replaced the old per-handler list accounting\nwith ocfs2_xattr_list_entry(), but it kept using size == 0 to detect\nprobe mode.\n\nThat assumption stops being true once ocfs2_listxattr() finishes the\ninline-xattr pass. If the inline names fill the caller buffer exactly,\nthe block-xattr pass runs with a non-NULL buffer and a remaining size of\nzero. ocfs2_xattr_list_entry() then skips the bounds check, keeps\ncounting block names, and returns a positive size larger than the\nsupplied buffer.\n\n[FIX]\nDetect probe mode by testing whether the destination buffer pointer is\nNULL instead of whether the remaining size is zero.\n\nThat restores the pre-refactor behavior and matches the OCFS2 getxattr\nhelpers. Once the remaining buffer reaches zero while more names are\nleft, the block-xattr pass now returns -ERANGE instead of reporting a\nsize larger than the allocated list buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53041",
          "url": "https://www.suse.com/security/cve/CVE-2026-53041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269398 for CVE-2026-53041",
          "url": "https://bugzilla.suse.com/1269398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270379 for CVE-2026-53041",
          "url": "https://bugzilla.suse.com/1270379"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53041"
    },
    {
      "cve": "CVE-2026-53052",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53052"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: qdsp6: topology: check widget type before accessing data\n\nCheck widget type before accessing the private data, as this could a\nvirtual widget which is no associated with a dsp graph, container and\nmodule. Accessing witout check could lead to incorrect memory access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53052",
          "url": "https://www.suse.com/security/cve/CVE-2026-53052"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269314 for CVE-2026-53052",
          "url": "https://bugzilla.suse.com/1269314"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269315 for CVE-2026-53052",
          "url": "https://bugzilla.suse.com/1269315"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53052"
    },
    {
      "cve": "CVE-2026-53053",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53053"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Fix clone_alias() to use the original device\u0027s devid\n\nCurrently clone_alias() assumes first argument (pdev) is always the\noriginal device pointer. This function is called by\npci_for_each_dma_alias() which based on topology decides to send\noriginal or alias device details in first argument.\n\nThis meant that the source devid used to look up and copy the DTE\nmay be incorrect, leading to wrong or stale DTE entries being\npropagated to alias device.\n\nFix this by passing the original pdev as the opaque data argument to\nboth the direct clone_alias() call and pci_for_each_dma_alias(). Inside\nclone_alias(), retrieve the original device from data and compute devid\nfrom it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53053",
          "url": "https://www.suse.com/security/cve/CVE-2026-53053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269310 for CVE-2026-53053",
          "url": "https://bugzilla.suse.com/1269310"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269311 for CVE-2026-53053",
          "url": "https://bugzilla.suse.com/1269311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53053"
    },
    {
      "cve": "CVE-2026-53071",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53071"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp\n\nl2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding\nl2cap_chan_lock(). Every other l2cap_chan_del() caller in the file\nacquires the lock first. A remote BLE device can send a crafted\nL2CAP ECRED reconfiguration response to corrupt the channel list\nwhile another thread is iterating it.\n\nAdd l2cap_chan_hold() and l2cap_chan_lock() before l2cap_chan_del(),\nand l2cap_chan_unlock() and l2cap_chan_put() after, matching the\npattern used in l2cap_ecred_conn_rsp() and l2cap_conn_del().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53071",
          "url": "https://www.suse.com/security/cve/CVE-2026-53071"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269678 for CVE-2026-53071",
          "url": "https://bugzilla.suse.com/1269678"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270375 for CVE-2026-53071",
          "url": "https://bugzilla.suse.com/1270375"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53071"
    },
    {
      "cve": "CVE-2026-53072",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53072"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER\n\nWhen protocol sets HCI_PROTO_DEFER, hci_conn_request_evt() calls\nhci_connect_cfm(conn) without hdev-\u003elock. Generally hci_connect_cfm()\nassumes it is held, and if conn is deleted concurrently -\u003e UAF.\n\nOnly SCO and ISO set HCI_PROTO_DEFER and only for defer setup listen,\nand HCI_EV_CONN_REQUEST is not generated for ISO.  In the non-deferred\nlistening socket code paths, hci_connect_cfm(conn) is called with\nhdev-\u003elock held.\n\nFix by holding the lock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53072",
          "url": "https://www.suse.com/security/cve/CVE-2026-53072"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269681 for CVE-2026-53072",
          "url": "https://bugzilla.suse.com/1269681"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270374 for CVE-2026-53072",
          "url": "https://bugzilla.suse.com/1270374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53072"
    },
    {
      "cve": "CVE-2026-53122",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53122"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix deadlock between reflink and transaction commit when using flushoncommit\n\nWhen using the flushoncommit mount option, we can have a deadlock between\na transaction commit and a reflink operation that copied an inline extent\nto an offset beyond the current i_size of the destination node.\n\nThe deadlock happens like this:\n\n1) Task A clones an inline extent from inode X to an offset of inode Y\n   that is beyond Y\u0027s current i_size. This means we copied the inline\n   extent\u0027s data to a folio of inode Y that is beyond its EOF, using a\n   call to copy_inline_to_page();\n\n2) Task B starts a transaction commit and calls\n   btrfs_start_delalloc_flush() to flush delalloc;\n\n3) The delalloc flushing sees the new dirty folio of inode Y and when it\n   attempts to flush it, it ends up at extent_writepage() and sees that\n   the offset of the folio is beyond the i_size of inode Y, so it attempts\n   to invalidate the folio by calling folio_invalidate(), which ends up at\n   btrfs\u0027 folio invalidate callback - btrfs_invalidate_folio(). There it\n   tries to lock the folio\u0027s range in inode Y\u0027s extent io tree, but it\n   blocks since it\u0027s currently locked by task A - during a reflink we lock\n   the inodes and the source and destination ranges after flushing all\n   delalloc and waiting for ordered extent completion - after that we\n   don\u0027t expect to have dirty folios in the ranges, the exception is if\n   we have to copy an inline extent\u0027s data (because the destination offset\n   is not zero);\n\n4) Task A then attempts to start a transaction to update the inode item,\n   and then it\u0027s blocked since the current transaction is in the\n   TRANS_STATE_COMMIT_START state. Therefore task A has to wait for the\n   current transaction to become unblocked (its state \u003e=\n   TRANS_STATE_UNBLOCKED).\n\n   So task A is waiting for the transaction commit done by task B, and\n   the later waiting on the extent lock of inode Y that is currently\n   held by task A.\n\nSyzbot recently reported this with the following stack traces:\n\n  INFO: task kworker/u8:7:1053 blocked for more than 143 seconds.\n        Not tainted syzkaller #0\n  \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n  task:kworker/u8:7    state:D stack:23520 pid:1053  tgid:1053  ppid:2      task_flags:0x4208060 flags:0x00080000\n  Workqueue: writeback wb_workfn (flush-btrfs-46)\n  Call Trace:\n   \u003cTASK\u003e\n   context_switch kernel/sched/core.c:5298 [inline]\n   __schedule+0x1553/0x5240 kernel/sched/core.c:6911\n   __schedule_loop kernel/sched/core.c:6993 [inline]\n   schedule+0x164/0x360 kernel/sched/core.c:7008\n   wait_extent_bit fs/btrfs/extent-io-tree.c:811 [inline]\n   btrfs_lock_extent_bits+0x59c/0x700 fs/btrfs/extent-io-tree.c:1914\n   btrfs_lock_extent fs/btrfs/extent-io-tree.h:152 [inline]\n   btrfs_invalidate_folio+0x43d/0xc40 fs/btrfs/inode.c:7704\n   extent_writepage fs/btrfs/extent_io.c:1852 [inline]\n   extent_write_cache_pages fs/btrfs/extent_io.c:2580 [inline]\n   btrfs_writepages+0x12ff/0x2440 fs/btrfs/extent_io.c:2713\n   do_writepages+0x32e/0x550 mm/page-writeback.c:2554\n   __writeback_single_inode+0x133/0x11a0 fs/fs-writeback.c:1750\n   writeback_sb_inodes+0x995/0x19d0 fs/fs-writeback.c:2042\n   wb_writeback+0x456/0xb70 fs/fs-writeback.c:2227\n   wb_do_writeback fs/fs-writeback.c:2374 [inline]\n   wb_workfn+0x41a/0xf60 fs/fs-writeback.c:2414\n   process_one_work kernel/workqueue.c:3276 [inline]\n   process_scheduled_works+0xb6e/0x18c0 kernel/workqueue.c:3359\n   worker_thread+0xa53/0xfc0 kernel/workqueue.c:3440\n   kthread+0x388/0x470 kernel/kthread.c:436\n   ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158\n   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245\n   \u003c/TASK\u003e\n  INFO: task syz.4.64:6910 blocked for more than 143 seconds.\n        Not tainted syzkaller #0\n  \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n  task:syz.4.64        state:D stack:22752 pid:6910  tgid:\n---truncated---",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53122",
          "url": "https://www.suse.com/security/cve/CVE-2026-53122"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269418 for CVE-2026-53122",
          "url": "https://bugzilla.suse.com/1269418"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53122"
    },
    {
      "cve": "CVE-2026-53133",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53133"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/umem: Fix truncation for block sizes \u003e= 4G\n\nWhen the iommu is used the linearization of the mapping can give a single\nblock that is very large split across multiple SG entries.\n\nWhen __rdma_block_iter_next() reassembles the split SG entries it is\noverflowing the 32 bit stack values and computed the wrong DMA addresses\nfor blocks after the truncation.\n\nUse the right types to hold DMA addresses.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53133",
          "url": "https://www.suse.com/security/cve/CVE-2026-53133"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269821 for CVE-2026-53133",
          "url": "https://bugzilla.suse.com/1269821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269822 for CVE-2026-53133",
          "url": "https://bugzilla.suse.com/1269822"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53133"
    },
    {
      "cve": "CVE-2026-53138",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53138"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Bound VBIOS record-chain walk loops\n\n[Why \u0026 How]\nAll record-chain walk loops in bios_parser.c and bios_parser2.c use\nfor(;;) and only terminate on a 0xFF record_type sentinel or zero\nrecord_size. A malformed VBIOS image missing the terminator record\ncauses unbounded iteration at probe time, potentially hundreds of\nthousands of iterations with record_size=1. In the final iterations\nnear the BIOS image boundary, struct casts beyond the 2-byte header\nvalidated by GET_IMAGE can also read out of bounds.\n\nCap all 14 record-chain walk loops to BIOS_MAX_NUM_RECORD (256)\niterations. The atombios.h defines up to 22 distinct record types\nand atomfirmware.h has 13. Assuming an average of less than 10\nrecords per type (which is reasonable since most are connector-\nbased) 256 is a generous upper bound.\n\n(cherry picked from commit 95700a3d660287ed657d6892f7be9ffc0e294a93)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53138",
          "url": "https://www.suse.com/security/cve/CVE-2026-53138"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269281 for CVE-2026-53138",
          "url": "https://bugzilla.suse.com/1269281"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53138"
    },
    {
      "cve": "CVE-2026-53182",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53182"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject oversized EMA RNR lists\n\nnl80211_parse_rnr_elems() stores the parsed element count in a\nu8-backed cfg80211_rnr_elems::cnt field and uses that count to size\nthe flexible array allocation.\n\nReject nested NL80211_ATTR_EMA_RNR_ELEMS input once the count reaches\n255, before incrementing it again. This keeps the parser aligned with\nthe data structure it fills and matches the existing bound check used\nby nl80211_parse_mbssid_elems().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53182",
          "url": "https://www.suse.com/security/cve/CVE-2026-53182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269884 for CVE-2026-53182",
          "url": "https://bugzilla.suse.com/1269884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269885 for CVE-2026-53182",
          "url": "https://bugzilla.suse.com/1269885"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53182"
    },
    {
      "cve": "CVE-2026-53253",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53253"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: bnep: reject short frames before parsing\n\nA BNEP peer can send a short BNEP SDU. bnep_rx_frame() reads the\npacket type byte immediately and, for control packets, reads the control\nopcode and setup UUID-size byte before proving that those bytes are\npresent. bnep_rx_control() also dereferences the control opcode without\nrejecting an empty control payload.\n\nUse skb_pull_data() for the fixed fields in bnep_rx_frame() so a NULL\nreturn gates each dereference. Split the control handler so the frame\npath can pass an opcode that has already been pulled, and keep the\nbyte-buffer wrapper for extension control payloads.\n\nFor BNEP_SETUP_CONN_REQ, name the UUID-size byte before pulling the\nsetup payload. struct bnep_setup_conn_req carries destination and source\nservice UUIDs after that byte, each uuid_size bytes, so the parser now\ndocuments that tuple explicitly instead of leaving the pull length as an\nopaque multiplication.\n\nValidation reproduced this kernel report:\nKASAN slab-out-of-bounds in bnep_rx_frame.isra.0+0x130c/0x1790\nThe buggy address belongs to the object at ffff88800c0f7908 which belongs\nto the cache kmalloc-8 of size 8\nThe buggy address is located 0 bytes to the right of allocated 1-byte\nregion [ffff88800c0f7908, ffff88800c0f7909)\nRead of size 1\nCall trace:\n  dump_stack_lvl+0xb3/0x140 (?:?)\n  print_address_description+0x57/0x3a0 (?:?)\n  bnep_rx_frame+0x130c/0x1790 (net/bluetooth/bnep/core.c:306)\n  print_report+0xb9/0x2b0 (?:?)\n  __virt_addr_valid+0x1ba/0x3a0 (?:?)\n  srso_alias_return_thunk+0x5/0xfbef5 (?:?)\n  kasan_addr_to_slab+0x21/0x60 (?:?)\n  kasan_report+0xe0/0x110 (?:?)\n  process_one_work+0xfce/0x17e0 (kernel/workqueue.c:3200)\n  worker_thread+0x65c/0xe40 (?:?)\n  __kthread_parkme+0x184/0x230 (?:?)\n  kthread+0x35e/0x470 (?:?)\n  _raw_spin_unlock_irq+0x28/0x50 (?:?)\n  ret_from_fork+0x586/0x870 (?:?)\n  __switch_to+0x74f/0xdc0 (?:?)\n  ret_from_fork_asm+0x1a/0x30 (?:?)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53253",
          "url": "https://www.suse.com/security/cve/CVE-2026-53253"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269574 for CVE-2026-53253",
          "url": "https://bugzilla.suse.com/1269574"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269575 for CVE-2026-53253",
          "url": "https://bugzilla.suse.com/1269575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53253"
    },
    {
      "cve": "CVE-2026-53266",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53266"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: make ebt_snat ARP rewrite writable\n\nThe ebtables SNAT target keeps the Ethernet source address rewrite\nbehind skb_ensure_writable(skb, 0).  This is intentional: at the bridge\nebtables hooks the Ethernet header is addressed through\nskb_mac_header()/eth_hdr(), while skb-\u003edata points at the Ethernet\npayload.  Asking skb_ensure_writable() for ETH_HLEN bytes would check\nthe payload, not the Ethernet header, and would reintroduce the small\npacket regression fixed by commit 63137bc5882a.\n\nHowever, the optional ARP sender hardware address rewrite is different.\nIt writes through skb_store_bits() at an offset relative to skb-\u003edata:\n\n        skb_store_bits(skb, sizeof(struct arphdr), info-\u003emac, ETH_ALEN)\n\nskb_header_pointer() only safely reads the ARP header; it does not make\nthe later sender hardware address range writable.  If that range is\nstill held in a nonlinear skb fragment backed by a splice-imported file\npage, skb_store_bits() maps the frag page and copies the new MAC address\ndirectly into it.\n\nEnsure the ARP SHA range is writable before reading the ARP header and\nbefore calling skb_store_bits().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53266",
          "url": "https://www.suse.com/security/cve/CVE-2026-53266"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269136 for CVE-2026-53266",
          "url": "https://bugzilla.suse.com/1269136"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53266"
    },
    {
      "cve": "CVE-2026-53281",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53281"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Avoid NULL pointer dereference or refcount corruption\n\nCommit 60f030f7418d (\"iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE\")\nfixed a NULL pointer dereference in an unlikely situation partly.\n\nIf dev_pasid is not found in the dev_pasids list, it remains NULL.\nHowever, the teardown operations are executed unconditionally, this lead\nto a NULL pointer dereference or refcount corruption.\n\nIf the domain was never attached to this IOMMU, info will be NULL, which\nwould cause an immediate dereference when checking --info-\u003erefcnt.\n\nEven if info is not NULL, decrementing the refcount without having removed\na valid PASID might unbalance the count. This could lead to premature\ndropping of the refcount to 0, potentially causing a use-after-free for the\nremaining active devices sharing the domain.\n\nFix it by returning early if dev_pasid is NULL, before executing the\nteardown operations.\n\nIssue found by AI review and suggested by Kevin Tian.\nhttps://sashiko.dev/#/patchset/20260421031347.1408890-1-zhenzhong.duan%40intel.com",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53281",
          "url": "https://www.suse.com/security/cve/CVE-2026-53281"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269519 for CVE-2026-53281",
          "url": "https://bugzilla.suse.com/1269519"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53281"
    },
    {
      "cve": "CVE-2026-53287",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53287"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\naudit: fix incorrect inheritable capability in CAPSET records\n\n__audit_log_capset() records the effective capability set into the\ninheritable field due to a copy-paste error. Every CAPSET audit\nrecord therefore reports cap_pi (process inheritable) with the value\nof cap_effective instead of cap_inheritable.\n\nThis silently corrupts audit data used for compliance and forensic\nanalysis: an attacker who modifies inheritable capabilities to\nprepare for a privilege-escalating exec would have the change masked\nin the audit trail.\n\nThe bug has been present since the original introduction of CAPSET\naudit records in 2008.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53287",
          "url": "https://www.suse.com/security/cve/CVE-2026-53287"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269506 for CVE-2026-53287",
          "url": "https://bugzilla.suse.com/1269506"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53287"
    },
    {
      "cve": "CVE-2026-53359",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53359"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Fix shadow paging use-after-free due to unexpected role\n\nCommit 0cb2af2ea66ad (\"KVM: x86: Fix shadow paging use-after-free due\nto unexpected GFN\") fixed a shadow paging mismatch between stored and\ncomputed GFNs; the bug could be triggered by changing a PDE mapping from\noutside the guest, and then deleting a memslot.  The rmap_remove()\ncall would miss entries created after the PDE change because the GFN\nof the leaf SPTE does not match the GFN of the struct kvm_mmu_page.\n\nA similar hole however remains if the modified PDE points to a non-leaf\npage.  In this case the gfn can be made to match, but the role does not\nmatch: the original large 2MB page creates a kvm_mmu_page with direct=1,\nwhile the new 4KB needs a kvm_mmu_page with direct=0.  However,\nkvm_mmu_get_child_sp() does not compare the role, and therefore reuses\nthe page.\n\nThe next step is installing a leaf (4KB) SPTE on the new path which\nrecords an rmap entry under the gfn resolved by the walk.  But when\nthat child is zapped its parent kvm_mmu_page has direct=1 and\nkvm_mmu_page_get_gfn() computes the gfn for the 4KB page as\nsp-\u003egfn + index instead of using sp-\u003eshadowed_translation[] (or sp-\u003egfns[]\nin older kernels).  It therefore fails to remove the recorded entry.\n\nWhen the memslot is dropped the shadow page is freed but the rmap\nentry survives, as in the scenario that was already fixed.  Code that\nlater walks that gfn (dirty logging, MMU notifier invalidation, and\nso on) dereferences an sptep that lies in the freed page, causing the\nuse-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53359",
          "url": "https://www.suse.com/security/cve/CVE-2026-53359"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270059 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1270059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1270060 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1270060"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271478 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1271478"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273231 for CVE-2026-53359",
          "url": "https://bugzilla.suse.com/1273231"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53359"
    },
    {
      "cve": "CVE-2026-53362",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53362"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: account for fraggap on the paged allocation path\n\nIn __ip6_append_data(), when the paged-allocation branch is taken\n(MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are\ncomputed as\n\n\talloclen = fragheaderlen + transhdrlen;\n\tpagedlen = datalen - transhdrlen;\n\ndatalen already includes fraggap (datalen = length + fraggap). When\nfraggap is non-zero, this is not the first skb and transhdrlen is zero.\nThe fraggap bytes carried over from the previous skb are copied just past\nthe fragment headers in the new skb\u0027s linear area. The linear area is\ntherefore undersized by fraggap bytes while pagedlen is overstated by the\nsame amount, and the copy writes past skb-\u003eend into the trailing\nskb_shared_info.\n\nAn unprivileged user can trigger this via a UDPv6 socket using\nMSG_MORE together with MSG_SPLICE_PAGES.\n\nThe bad accounting was introduced by commit 773ba4fe9104 (\"ipv6:\navoid partial copy for zc\"). Before commit ce650a166335 (\"udp6: Fix\n__ip6_append_data()\u0027s handling of MSG_SPLICE_PAGES\"), the negative\ncopy value caused -EINVAL to be returned. That later commit allowed\nMSG_SPLICE_PAGES to proceed in this case, making the corruption\ntriggerable.\n\nThe non-paged branch sets alloclen to fraglen, which already accounts\nfor fraggap because datalen does. Bring the paged branch in line by\nadding fraggap to alloclen and subtracting it from pagedlen.\n\nAfter this adjustment, copy no longer collapses to -fraggap on the\npaged path, so remove the stale comment describing that old arithmetic.\nSince a negative copy is no longer expected for a valid MSG_SPLICE_PAGES\ncase, remove the MSG_SPLICE_PAGES exception from the negative copy check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
          "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
          "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
          "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53362",
          "url": "https://www.suse.com/security/cve/CVE-2026-53362"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269493 for CVE-2026-53362",
          "url": "https://bugzilla.suse.com/1269493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269495 for CVE-2026-53362",
          "url": "https://bugzilla.suse.com/1269495"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.aarch64",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.ppc64le",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.s390x",
            "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-devel-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-49.1.x86_64",
            "SUSE Linux Micro 6.1:kernel-macros-6.4.0-49.1.noarch",
            "SUSE Linux Micro 6.1:kernel-source-6.4.0-49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-06T13:11:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-53362"
    }
  ]
}