RHSA-2026:67468
Vulnerability from csaf_opensuse - Published: 2026-09-15 00:00 - Updated: 2026-09-16 09:01Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:67468.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:67468.
Patchnames: RHSA-2026:67468
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.1 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
important
8.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-53161
Threats
Impact
important
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:67468.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:67468.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:67468",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_67468.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53161 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-71127 page",
"url": "https://www.suse.com/security/cve/CVE-2025-71127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43133 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53182 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63802 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63889 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64117 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68363 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68363/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-72098 page",
"url": "https://www.suse.com/security/cve/CVE-2026-72098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74556 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74556/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T09:01:14Z",
"generator": {
"date": "2026-09-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:67468",
"initial_release_date": "2026-09-15T00:00:00Z",
"revision_history": [
{
"date": "2026-09-15T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T09:01:14Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch"
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.163.1.el8_10.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.163.1.el8_10.x86_64"
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.163.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.163.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.163.1.el8_10.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.163.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.163.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.163.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-53161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53161"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/bluefield: Fix potential integer overflow\n\nThe 64-bit argument for the \"get DIMM info\" SMC call consists of mem_ctrl_idx\nleft-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as\n32-bits wide the left-shift operation truncates the upper 16 bits of\ninformation during the calculation of the SMC argument.\n\nThe mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any\npotential integer overflow, i.e. loss of data from upper 16 bits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53161",
"url": "https://www.suse.com/security/cve/CVE-2024-53161"
},
{
"category": "external",
"summary": "SUSE Bug 1234856 for CVE-2024-53161",
"url": "https://bugzilla.suse.com/1234856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-53161"
},
{
"cve": "CVE-2025-71127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-71127"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Discard Beacon frames to non-broadcast address\n\nBeacon frames are required to be sent to the broadcast address, see IEEE\nStd 802.11-2020, 11.1.3.1 (\"The Address 1 field of the Beacon .. frame\nshall be set to the broadcast address\"). A unicast Beacon frame might be\nused as a targeted attack to get one of the associated STAs to do\nsomething (e.g., using CSA to move it to another channel). As such, it\nis better have strict filtering for this on the received side and\ndiscard all Beacon frames that are sent to an unexpected address.\n\nThis is even more important for cases where beacon protection is used.\nThe current implementation in mac80211 is correctly discarding unicast\nBeacon frames if the Protected Frame bit in the Frame Control field is\nset to 0. However, if that bit is set to 1, the logic used for checking\nfor configured BIGTK(s) does not actually work. If the driver does not\nhave logic for dropping unicast Beacon frames with Protected Frame bit\n1, these frames would be accepted in mac80211 processing as valid Beacon\nframes even though they are not protected. This would allow beacon\nprotection to be bypassed. While the logic for checking beacon\nprotection could be extended to cover this corner case, a more generic\ncheck for discard all Beacon frames based on A1=unicast address covers\nthis without needing additional changes.\n\nAddress all these issues by dropping received Beacon frames if they are\nsent to a non-broadcast address.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-71127",
"url": "https://www.suse.com/security/cve/CVE-2025-71127"
},
{
"category": "external",
"summary": "SUSE Bug 1256767 for CVE-2025-71127",
"url": "https://bugzilla.suse.com/1256767"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-71127"
},
{
"cve": "CVE-2026-43133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43133"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation\n\nCommit cc3ed80ae69f (\"KVM: nSVM: always use vmcb01 to for vmsave/vmload\nof guest state\") made KVM always use vmcb01 for the fields controlled by\nVMSAVE/VMLOAD, but it missed updating the VMLOAD/VMSAVE emulation code\nto always use vmcb01.\n\nAs a result, if VMSAVE/VMLOAD is executed by an L2 guest and is not\nintercepted by L1, KVM will mistakenly use vmcb02. Always use vmcb01\ninstead of the current VMCB.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43133",
"url": "https://www.suse.com/security/cve/CVE-2026-43133"
},
{
"category": "external",
"summary": "SUSE Bug 1264640 for CVE-2026-43133",
"url": "https://bugzilla.suse.com/1264640"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43133"
},
{
"cve": "CVE-2026-52947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52947"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove\n\nIn qrtr_port_remove(), the socket reference count is decremented via\n__sock_put() before the port is removed from the qrtr_ports XArray and\nbefore the RCU grace period elapses.\n\nThis breaks the fundamental RCU update paradigm. It exposes a race\nwindow where a concurrent RCU reader (such as qrtr_reset_ports() or\nqrtr_port_lookup()) can obtain a pointer to the socket from the XArray,\nand attempt to call sock_hold() on a socket whose reference count has\nalready dropped to zero.\n\nThis exact race condition was hit during syzkaller fuzzing, leading to\nthe following refcount saturation warning and a potential Use-After-Free:\n\n refcount_t: saturated; leaking memory.\n WARNING: CPU: 3 PID: 1273 at lib/refcount.c:22 refcount_warn_saturate+0xae/0x1d0\n Modules linked in: qrtr(+) bochs drm_shmem_helper ...\n Call Trace:\n \u003cTASK\u003e\n qrtr_reset_ports net/qrtr/af_qrtr.c:768 [inline] [qrtr]\n __qrtr_bind.isra.0+0x48b/0x570 net/qrtr/af_qrtr.c:805 [qrtr]\n qrtr_bind+0x17d/0x210 net/qrtr/af_qrtr.c:901 [qrtr]\n kernel_bind+0xe4/0x120 net/socket.c:3592\n qrtr_ns_init+0x1a6/0x380 net/qrtr/ns.c:715 [qrtr]\n qrtr_proto_init+0x3b/0xff0 net/qrtr/af_qrtr.c:169 [qrtr]\n do_one_initcall+0xf5/0x5e0 init/main.c:1283\n ...\n \u003c/TASK\u003e\n\nFix this by deferring the reference count decrement until after the\nxa_erase() and the synchronize_rcu() complete.\n\n(Note: The v1 of this patch incorrectly replaced __sock_put() with\nsock_put(). As Simon Horman pointed out, the callers of qrtr_port_remove()\nstill hold a reference to the socket, so freeing the socket memory here\nwould lead to a subsequent UAF in the caller. Thus, the __sock_put() is\nkept, but only repositioned to close the RCU race.)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52947",
"url": "https://www.suse.com/security/cve/CVE-2026-52947"
},
{
"category": "external",
"summary": "SUSE Bug 1269115 for CVE-2026-52947",
"url": "https://bugzilla.suse.com/1269115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-52947"
},
{
"cve": "CVE-2026-53182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53182"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject oversized EMA RNR lists\n\nnl80211_parse_rnr_elems() stores the parsed element count in a\nu8-backed cfg80211_rnr_elems::cnt field and uses that count to size\nthe flexible array allocation.\n\nReject nested NL80211_ATTR_EMA_RNR_ELEMS input once the count reaches\n255, before incrementing it again. This keeps the parser aligned with\nthe data structure it fills and matches the existing bound check used\nby nl80211_parse_mbssid_elems().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53182",
"url": "https://www.suse.com/security/cve/CVE-2026-53182"
},
{
"category": "external",
"summary": "SUSE Bug 1269884 for CVE-2026-53182",
"url": "https://bugzilla.suse.com/1269884"
},
{
"category": "external",
"summary": "SUSE Bug 1269885 for CVE-2026-53182",
"url": "https://bugzilla.suse.com/1269885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-53182"
},
{
"cve": "CVE-2026-63802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: fix UAF in __blkcg_rstat_flush()\n\nWhen multiple blkgs in the same blkcg are released concurrently,\na use-after-free can occur. The race happens when one blkg\u0027s\n__blkcg_rstat_flush() removes another blkg\u0027s iostat entries via\nllist_del_all(). The second blkg sees an empty list and proceeds\nto free itself while the first is still iterating over its entries.\n\nMove the flush from __blkg_release() (RCU callback) to blkg_release()\n(before call_rcu). This ensures the RCU grace period waits for any\nconcurrent flush\u0027s rcu_read_lock() section to complete before freeing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63802",
"url": "https://www.suse.com/security/cve/CVE-2026-63802"
},
{
"category": "external",
"summary": "SUSE Bug 1272282 for CVE-2026-63802",
"url": "https://bugzilla.suse.com/1272282"
},
{
"category": "external",
"summary": "SUSE Bug 1272283 for CVE-2026-63802",
"url": "https://bugzilla.suse.com/1272283"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63802"
},
{
"cve": "CVE-2026-63889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63889"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: scsi_transport_fc: Widen FPIN pname walker counter to u32\n\nAn adjacent Fibre Channel fabric actor that can deliver an FPIN ELS\nframe to an lpfc or qla2xxx Linux initiator can trigger a non-return in\nthe generic FC transport. This is not a local userspace or IP network\npath; the attacker must be able to inject fabric traffic, for example as\na compromised switch or fabric controller, or as a same-zone N_Port on a\nfabric that permits source spoofing.\n\nThe Link-Integrity and Peer-Congestion FPIN walkers used a u8 loop\ncounter against the 32-bit on-wire pname_count field, and did not bound\npname_count by the descriptor body already validated by the TLV walker.\nA pname_count of 256 therefore wraps the counter and keeps the loop\ncondition true indefinitely.\n\nFactor the shared pname_list[] walk into one helper, widen the counter\nto u32, and clamp pname_count against the entries that fit in the\ndescriptor body before iterating.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63889",
"url": "https://www.suse.com/security/cve/CVE-2026-63889"
},
{
"category": "external",
"summary": "SUSE Bug 1272423 for CVE-2026-63889",
"url": "https://bugzilla.suse.com/1272423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-63889"
},
{
"cve": "CVE-2026-64117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: capture fast-RX rate before mesh reuses skb-\u003ecb\n\nieee80211_invoke_fast_rx() reads RX status through\nIEEE80211_SKB_RXCB(skb), which aliases the same skb-\u003ecb storage\nthat ieee80211_rx_mesh_data() reuses as IEEE80211_TX_INFO. In the\nunicast forward path, mesh_data does:\n\n\tinfo = IEEE80211_SKB_CB(fwd_skb);\n\tmemset(info, 0, sizeof(*info));\n\non the same skb the caller still names via rx-\u003eskb, then either\nqueues the skb for TX (success) or kfree_skb()\u0027s it (no-route)\nbefore returning RX_QUEUED. The caller\u0027s RX_QUEUED arm then\ncalls sta_stats_encode_rate(status) on memory that is either\nzeroed (success path) or freed (no-route path). The latter is\nKASAN slab-use-after-free in ieee80211_prepare_and_rx_handle.\n\nFix by encoding the rate from status before invoking\nieee80211_rx_mesh_data(), so the RX_QUEUED arm consumes a value\ncaptured while status was still backed by valid memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64117",
"url": "https://www.suse.com/security/cve/CVE-2026-64117"
},
{
"category": "external",
"summary": "SUSE Bug 1273760 for CVE-2026-64117",
"url": "https://bugzilla.suse.com/1273760"
},
{
"category": "external",
"summary": "SUSE Bug 1273836 for CVE-2026-64117",
"url": "https://bugzilla.suse.com/1273836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-64117"
},
{
"cve": "CVE-2026-68363",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68363"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: hif_usb: don\u0027t dereference hif_dev after re-arming firmware request\n\nath9k_hif_request_firmware() re-arms an asynchronous firmware load via\nrequest_firmware_nowait(), passing hif_dev as the completion context, and\nthen still dereferences hif_dev:\n\n\tdev_info(\u0026hif_dev-\u003eudev-\u003edev, \"ath9k_htc: Firmware %s requested\\n\",\n\t\t hif_dev-\u003efw_name);\n\nThe re-armed callback ath9k_hif_usb_firmware_cb() runs on the \"events\"\nworkqueue and, when the firmware is missing, walks the retry chain into\nath9k_hif_usb_firmware_fail() -\u003e complete_all(\u0026hif_dev-\u003efw_done). That\nreleases the wait_for_completion(\u0026hif_dev-\u003efw_done) in a concurrent\nath9k_hif_usb_disconnect(), which then kfree()s hif_dev. The trailing\ndev_info() in the frame that re-armed the request can therefore read freed\nmemory (hif_dev-\u003eudev, the first field of struct hif_device_usb):\n\n BUG: KASAN: slab-use-after-free in ath9k_hif_request_firmware\n Read of size 8 ... by task kworker/...\n ath9k_hif_request_firmware\n ath9k_hif_usb_firmware_cb drivers/net/wireless/ath/ath9k/hif_usb.c:1247\n request_firmware_work_func\n Allocated by ...:\n ath9k_hif_usb_probe drivers/net/wireless/ath/ath9k/hif_usb.c\n Freed by ...:\n ath9k_hif_usb_disconnect -\u003e kfree drivers/net/wireless/ath/ath9k/hif_usb.c\n\nThe fw_done barrier only makes disconnect wait for the firmware chain to\n*terminate*; it does not protect the outer ath9k_hif_request_firmware()\nframe that re-armed the request and keeps touching hif_dev afterwards.\n\nDrop the post-request dev_info(): it is the only use of hif_dev after the\nasync request is armed, and it is purely informational (the dev_err() on the\nfailure path runs only when request_firmware_nowait() did not arm a callback,\nso hif_dev is still alive there).\n\nThis was first reported by syzbot as a single, non-reproduced crash that was\nlater auto-obsoleted, and was independently rediscovered by the reFuzz fuzzer,\nwhich produced a C reproducer (USB-gadget connect/disconnect of an ath9k_htc\ndevice whose firmware download fails). The vulnerable code is unchanged and\nstill present in v7.1-rc6, where the slab-use-after-free reproduces under KASAN\nonce the (sub-microsecond) race window is widened.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68363",
"url": "https://www.suse.com/security/cve/CVE-2026-68363"
},
{
"category": "external",
"summary": "SUSE Bug 1275164 for CVE-2026-68363",
"url": "https://bugzilla.suse.com/1275164"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-68363"
},
{
"cve": "CVE-2026-72098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-72098"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix buffer overflow in FEC calculation\n\nThere\u0027s a buffer overflow in dm-verity-fec:\n\nif (neras \u0026\u0026 *neras \u003c= v-\u003efec-\u003eroots)\n\tfio-\u003eerasures[(*neras)++] = i;\n\nThis allows *neras to reach roots + 1 (the post-increment pushes it past\nroots). This value is then passed as no_eras to decode_rs8(). Inside the\nRS decoder (lib/reed_solomon/decode_rs.c:113-121), the erasure locator\npolynomial loop writes lambda[j] where j can reach nroots + 1 - one\nelement past the end of lambda[] (which is sized nroots + 1, valid\nindices 0..nroots). The out-of-bounds write lands on syn[0], corrupting\nthe syndrome buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-72098",
"url": "https://www.suse.com/security/cve/CVE-2026-72098"
},
{
"category": "external",
"summary": "SUSE Bug 1275543 for CVE-2026-72098",
"url": "https://bugzilla.suse.com/1275543"
},
{
"category": "external",
"summary": "SUSE Bug 1275544 for CVE-2026-72098",
"url": "https://bugzilla.suse.com/1275544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-72098"
},
{
"cve": "CVE-2026-74556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74556"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer\n\niscsi_tcp_hdr_dissect() receives the data segment of several PDU types\ninto the fixed-size conn-\u003edata buffer, which is allocated for\nISCSI_DEF_MAX_RECV_SEG_LEN (8192) bytes. For the LOGIN_RSP, TEXT_RSP,\nREJECT and ASYNC_EVENT opcodes the dissect path already rejects a PDU\nwhose DataSegmentLength exceeds that buffer.\n\nThe SCSI Command Response (ISCSI_OP_SCSI_CMD_RSP) path also copies its\ndata segment (sense/response data) into conn-\u003edata via\niscsi_tcp_data_recv_prep(), but it does so without the same check. The\nonly upstream bound on in.datalen is conn-\u003emax_recv_dlength, the\ninitiator\u0027s advertised MaxRecvDataSegmentLength, which is commonly\nnegotiated well above 8192 (open-iscsi defaults to 262144). A target\nthat returns a SCSI Response with a DataSegmentLength between 8193 and\nmax_recv_dlength therefore overflows the 8192-byte conn-\u003edata buffer.\n\nOnce the same bound applies, ISCSI_OP_SCSI_CMD_RSP is handled exactly\nlike those responses: bound the data segment, receive it into conn-\u003edata\nwhen present, and otherwise complete the PDU with no data. Fold the\nopcode into that case group rather than duplicating the check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74556",
"url": "https://www.suse.com/security/cve/CVE-2026-74556"
},
{
"category": "external",
"summary": "SUSE Bug 1275696 for CVE-2026-74556",
"url": "https://bugzilla.suse.com/1275696"
},
{
"category": "external",
"summary": "SUSE Bug 1275700 for CVE-2026-74556",
"url": "https://bugzilla.suse.com/1275700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.163.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.163.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.163.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74556"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…