OPENSUSE-SU-2026:11773-1
Vulnerability from csaf_opensuse - Published: 2026-09-14 00:00 - Updated: 2026-09-15 07:43Summary
kernel-devel-7.2.5-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: kernel-devel-7.2.5-1.1 on GA media
Description of the patch: These are all security issues fixed in the kernel-devel-7.2.5-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11773
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
4.6 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
6.8 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
5.8 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
4.2 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.6 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
5.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.8 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
4.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
8.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
6.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
low
5.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-80758
Threats
Impact
moderate
References
343 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "kernel-devel-7.2.5-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the kernel-devel-7.2.5-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11773",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11773-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80758 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80759 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80760 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80761 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80762 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80763 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80764 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80765 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80767 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80768 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80768/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80769 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80770 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80771 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80772 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80773 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80774 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80775 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80777 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80778 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80779 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80780 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80781 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80782 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80783 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80787 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80788 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80789 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80790 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80791 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80792 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80793 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80794 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80795 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80796 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80797 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80798 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80799 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80800 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80801 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80802 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80803 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80804 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80805 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80806 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80807 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80808 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80809 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80810 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80811 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80812 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80813 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80814 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80815 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80816 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80817 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80818 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80819 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80822 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80823 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80824 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80825 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80826 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80827 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80829 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80830 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80831 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80833 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80834 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80835 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80836 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80837 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80838 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80839 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80840 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80841 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80842 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80843 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80843/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80844 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80844/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80845 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80846 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80846/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80847 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80848 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80849 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80850 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80851 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80852 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80853 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80854 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80855 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80856 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80857 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80858 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80859 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80860 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80861 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80862 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80863 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80864 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80916 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80918 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80918/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80920 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80920/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80921 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80922 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80923 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80924 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-80925 page",
"url": "https://www.suse.com/security/cve/CVE-2026-80925/"
}
],
"title": "kernel-devel-7.2.5-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-15T07:43:35Z",
"generator": {
"date": "2026-09-14T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11773-1",
"initial_release_date": "2026-09-14T00:00:00Z",
"revision_history": [
{
"date": "2026-09-14T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-15T07:43:35Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.2.5-1.1.aarch64",
"product": {
"name": "kernel-devel-7.2.5-1.1.aarch64",
"product_id": "kernel-devel-7.2.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-macros-7.2.5-1.1.aarch64",
"product": {
"name": "kernel-macros-7.2.5-1.1.aarch64",
"product_id": "kernel-macros-7.2.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-source-7.2.5-1.1.aarch64",
"product": {
"name": "kernel-source-7.2.5-1.1.aarch64",
"product_id": "kernel-source-7.2.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.2.5-1.1.aarch64",
"product": {
"name": "kernel-source-vanilla-7.2.5-1.1.aarch64",
"product_id": "kernel-source-vanilla-7.2.5-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.2.5-1.1.ppc64le",
"product": {
"name": "kernel-devel-7.2.5-1.1.ppc64le",
"product_id": "kernel-devel-7.2.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-macros-7.2.5-1.1.ppc64le",
"product": {
"name": "kernel-macros-7.2.5-1.1.ppc64le",
"product_id": "kernel-macros-7.2.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-source-7.2.5-1.1.ppc64le",
"product": {
"name": "kernel-source-7.2.5-1.1.ppc64le",
"product_id": "kernel-source-7.2.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.2.5-1.1.ppc64le",
"product": {
"name": "kernel-source-vanilla-7.2.5-1.1.ppc64le",
"product_id": "kernel-source-vanilla-7.2.5-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.2.5-1.1.s390x",
"product": {
"name": "kernel-devel-7.2.5-1.1.s390x",
"product_id": "kernel-devel-7.2.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-macros-7.2.5-1.1.s390x",
"product": {
"name": "kernel-macros-7.2.5-1.1.s390x",
"product_id": "kernel-macros-7.2.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-source-7.2.5-1.1.s390x",
"product": {
"name": "kernel-source-7.2.5-1.1.s390x",
"product_id": "kernel-source-7.2.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.2.5-1.1.s390x",
"product": {
"name": "kernel-source-vanilla-7.2.5-1.1.s390x",
"product_id": "kernel-source-vanilla-7.2.5-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-7.2.5-1.1.x86_64",
"product": {
"name": "kernel-devel-7.2.5-1.1.x86_64",
"product_id": "kernel-devel-7.2.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-macros-7.2.5-1.1.x86_64",
"product": {
"name": "kernel-macros-7.2.5-1.1.x86_64",
"product_id": "kernel-macros-7.2.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-source-7.2.5-1.1.x86_64",
"product": {
"name": "kernel-source-7.2.5-1.1.x86_64",
"product_id": "kernel-source-7.2.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-7.2.5-1.1.x86_64",
"product": {
"name": "kernel-source-vanilla-7.2.5-1.1.x86_64",
"product_id": "kernel-source-vanilla-7.2.5-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.2.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64"
},
"product_reference": "kernel-devel-7.2.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.2.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le"
},
"product_reference": "kernel-devel-7.2.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.2.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x"
},
"product_reference": "kernel-devel-7.2.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-7.2.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64"
},
"product_reference": "kernel-devel-7.2.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.2.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64"
},
"product_reference": "kernel-macros-7.2.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.2.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le"
},
"product_reference": "kernel-macros-7.2.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.2.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x"
},
"product_reference": "kernel-macros-7.2.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-7.2.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64"
},
"product_reference": "kernel-macros-7.2.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.2.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64"
},
"product_reference": "kernel-source-7.2.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.2.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le"
},
"product_reference": "kernel-source-7.2.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.2.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x"
},
"product_reference": "kernel-source-7.2.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-7.2.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64"
},
"product_reference": "kernel-source-7.2.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.2.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64"
},
"product_reference": "kernel-source-vanilla-7.2.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.2.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le"
},
"product_reference": "kernel-source-vanilla-7.2.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.2.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x"
},
"product_reference": "kernel-source-vanilla-7.2.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-7.2.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
},
"product_reference": "kernel-source-vanilla-7.2.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-80758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80758"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex: Avoid private hash use-after-free on final put\n\nfutex_private_hash_put() drops the reference to fph before evaluating\nfph-\u003emm for wake_up_var(). futex_ref_put() enables preemption again before\nreturning. If that put drops the final reference and the task is preempted,\nanother task can pivot to the replacement hash and free the old hash after\nan RCU grace period. The first task then reads fph-\u003emm from the freed\nallocation when it resumes.\n\nKASAN reports a slab-use-after-free in futex_private_hash_put(), with the\nread at offset 24 in a freed kmalloc-512 allocation. The allocation and\nfree stacks point to futex_hash_allocate() and the RCU free path,\nrespectively.\n\nLoad the mm pointer while the fph reference is still held and pass the\nsaved value to wake_up_var(). wake_up_var() uses the pointer as a waitqueue\nkey and does not dereference the mm through it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80758",
"url": "https://www.suse.com/security/cve/CVE-2026-80758"
},
{
"category": "external",
"summary": "SUSE Bug 1279469 for CVE-2026-80758",
"url": "https://bugzilla.suse.com/1279469"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80758"
},
{
"cve": "CVE-2026-80759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_aml: validate firmware segment lengths\n\naml_download_firmware() reads two lengths from the firmware header and\nuses them to build pointers before checking that the header and segment\ndata are present. A truncated or inconsistent firmware image can make\nthe driver read past firmware-\u003edata while constructing TCI commands.\n\nReject images shorter than the header and ensure that the ICCM and DCCM\nranges fit within the loaded firmware before downloading either segment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80759",
"url": "https://www.suse.com/security/cve/CVE-2026-80759"
},
{
"category": "external",
"summary": "SUSE Bug 1279470 for CVE-2026-80759",
"url": "https://bugzilla.suse.com/1279470"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80759"
},
{
"cve": "CVE-2026-80760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255\n\nmgmt_hci_cmd_sync() checks that the message length agrees with params_len\nbut puts no upper bound on it. params_len is __le16 while the parameter\nlength in the HCI command header is a u8:\n\n\tstruct hci_command_hdr {\n\t\t__le16\topcode;\n\t\t__u8\tplen;\n\t} __packed;\n\nhci_cmd_sync_alloc() assigns one to the other:\n\n\thdr-\u003eplen = plen;\n\n\tif (plen)\n\t\tskb_put_data(skb, param, plen);\n\nso a params_len of 256 leaves plen at 0 while all 256 bytes are still\nappended. The frame handed to the driver then declares no parameters and\ncarries 256 of them. On a length framed transport such as H:4 the\ncontroller takes the trailing bytes as the start of the next packet.\n\nThe mgmt socket MTU is HCI_MAX_FRAME_SIZE, so params_len can reach about\n1KB this way. Commit 03f1700b9b4d (\"Bluetooth: MGMT: reject malformed\nHCI_CMD_SYNC commands\") only made params_len agree with the message\nlength, a value that fits the message but not the header field is still\naccepted.\n\nReject params_len that does not fit the header field.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80760",
"url": "https://www.suse.com/security/cve/CVE-2026-80760"
},
{
"category": "external",
"summary": "SUSE Bug 1279472 for CVE-2026-80760",
"url": "https://bugzilla.suse.com/1279472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80760"
},
{
"cve": "CVE-2026-80761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80761"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: zero the sockaddr before returning it in getname\n\niso_sock_getname() fills a struct sockaddr_iso in place and returns its\nsize without clearing it first, so bytes it does not write are copied to\nuser space from the kernel stack. The getsockname(2) and getpeername(2)\npaths both run through do_getsockname(), which hands getname() an\nuninitialized sockaddr_storage on the stack and copies back up to the\nnumber of bytes getname() returns, so the driver has to initialize every\nbyte it accounts for.\n\nTwo ranges are left uninitialized:\n\n - struct sockaddr_iso is 10 bytes but only 9 are written (family,\n iso_bdaddr, iso_bdaddr_type), leaking the trailing pad byte on every\n call.\n\n - for a broadcast peer (BIS_LINK or PA_LINK) the returned length grows\n by sizeof(struct sockaddr_iso_bc), but only bc_sid, bc_num_bis and\n bc_bis are filled; bc_bdaddr and bc_bdaddr_type, the first 7 bytes of\n that structure, are never written.\n\nAn unprivileged process can open a BTPROTO_ISO socket and reach the pad\nleak with getsockname(); the broadcast leak needs an established BIS/PA\nconnection. l2cap and rfcomm already memset their sockaddr in getname\nfor the same reason; do the same here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80761",
"url": "https://www.suse.com/security/cve/CVE-2026-80761"
},
{
"category": "external",
"summary": "SUSE Bug 1279473 for CVE-2026-80761",
"url": "https://bugzilla.suse.com/1279473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80761"
},
{
"cve": "CVE-2026-80762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80762"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Fix accept list UAF during suspend\n\nhci_update_event_filter_sync() walks hdev-\u003eaccept_list while sending a\nsynchronous HCI command for each remote-wakeup device. The suspend path\nholds hdev-\u003ereq_lock, but accept-list updates are serialized by hdev-\u003elock.\nConsequently, remove_device() can free the current list entry during the\ncontroller wait.\n\nThe following interleaving causes the use-after-free:\n\n hci_update_event_filter_sync() remove_device()\n fetch accept-list entry\n hci_set_event_filter_sync()\n wait for controller response hci_dev_lock()\n list_del()\n kfree()\n hci_dev_unlock()\n read the freed list.next\n\nKASAN reported:\n\n BUG: KASAN: slab-use-after-free in hci_suspend_sync+0x835/0x910\n Read of size 8 at addr ffff88810bec8440 by task kworker/0:1/10\n Workqueue: events vhci_suspend_work\n Call Trace:\n hci_suspend_sync+0x835/0x910\n hci_suspend_dev+0x182/0x450\n process_one_work+0x661/0x1090\n worker_thread+0x45b/0xd10\n\n Allocated by task 86:\n hci_bdaddr_list_add_with_flags+0x1a8/0x400\n add_device+0x381/0x820\n hci_sock_sendmsg+0x1033/0x1ea0\n\n Freed by task 91:\n kfree+0x131/0x3c0\n remove_device+0x429/0xb70\n hci_sock_sendmsg+0x1033/0x1ea0\n\nSnapshot the remote-wakeup addresses under hdev-\u003elock. Release the lock\nbefore sending HCI commands. Clear the controller event filter before\nbuilding the snapshot, and skip allocation and the second list traversal\nwhen there are no matching entries. This preserves the original filter\nand scan-state updates without retaining an accept-list node across a\ncontroller wait.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80762",
"url": "https://www.suse.com/security/cve/CVE-2026-80762"
},
{
"category": "external",
"summary": "SUSE Bug 1279477 for CVE-2026-80762",
"url": "https://bugzilla.suse.com/1279477"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80762"
},
{
"cve": "CVE-2026-80763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: validate LE Set CIG Parameters response\n\nThe Command Complete dispatch validates only the fixed part of the LE Set\nCIG Parameters response. After that part is pulled from the skb,\nhci_cc_le_set_cig_params() trusts num_handles and reads each entry in the\ntrailing handle array.\n\nMatching num_handles against the command\u0027s num_cis does not guarantee\nthat the response contains the advertised handles. A truncated response\nfrom a malfunctioning controller can therefore make the handler read\nbeyond the skb data.\n\nValidate that the remaining skb data contains all advertised handles.\nInclude this in the existing response validation so malformed responses\nalso follow the established CIG failure handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80763",
"url": "https://www.suse.com/security/cve/CVE-2026-80763"
},
{
"category": "external",
"summary": "SUSE Bug 1279483 for CVE-2026-80763",
"url": "https://bugzilla.suse.com/1279483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80763"
},
{
"cve": "CVE-2026-80764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80764"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: fix LE list UAF on reset\n\nhci_cc_reset() clears the LE accept and resolving lists without taking\nhdev-\u003elock. Other command-complete handlers serialize updates to these\nlists with that lock, and the debugfs readers hold it while walking them.\n\nThis permits the reset completion and a debugfs read to interleave as\nfollows:\n\n hci_rx_work debugfs reader\n ----------- --------------\n lock hdev-\u003elock\n fetch current entry\n list_del(entry)\n kfree(entry)\n read entry fields\n\nThe reader then dereferences a freed list entry and may follow its stale\nnext pointer.\n\nKASAN reported:\n\n BUG: KASAN: slab-use-after-free in white_list_show+0x15f/0x180\n Read of size 1 at addr ffff8881015dab16 by task poc/95\n\n Call Trace:\n white_list_show+0x15f/0x180\n seq_read_iter+0x3ff/0x1190\n seq_read+0x267/0x3d0\n vfs_read+0x177/0xa20\n ksys_read+0xf7/0x1c0\n\n Allocated by task 91:\n hci_bdaddr_list_add+0x1a6/0x3a0\n hci_cc_le_add_to_accept_list+0xab/0x140\n hci_cmd_complete_evt+0x26c/0x9a0\n hci_event_packet+0x454/0xb20\n hci_rx_work+0x293/0x730\n\n Freed by task 90:\n kfree+0x131/0x3c0\n hci_bdaddr_list_clear+0xd8/0x160\n hci_cc_reset+0x28a/0x370\n hci_cmd_complete_evt+0x26c/0x9a0\n hci_event_packet+0x454/0xb20\n hci_rx_work+0x293/0x730\n\nTake hdev-\u003elock around both list clears. This matches the existing\nmutation and traversal locking convention.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80764",
"url": "https://www.suse.com/security/cve/CVE-2026-80764"
},
{
"category": "external",
"summary": "SUSE Bug 1279493 for CVE-2026-80764",
"url": "https://bugzilla.suse.com/1279493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80764"
},
{
"cve": "CVE-2026-80765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hyperv: validate initial device info bounds\n\nThe Hyper-V synthetic HID host supplies SYNTH_HID_INITIAL_DEVICE_INFO\nmessages that contain a HID descriptor followed by the report descriptor\nbytes. mousevsc_on_receive_device_info() trusts bLength and\nwDescriptorLength without checking that the received packet contains both\nbyte ranges.\n\nA malformed host or backend message can therefore make the guest read\npast the received VMBus packet while copying the report descriptor. Pass\nthe received initial-device-info size into the parser and reject\ndescriptor lengths that exceed the packet.\n\nImpact: A malicious Hyper-V host or backend can crash a guest by sending\na short initial device-info message with an oversized HID report\ndescriptor length.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80765",
"url": "https://www.suse.com/security/cve/CVE-2026-80765"
},
{
"category": "external",
"summary": "SUSE Bug 1279499 for CVE-2026-80765",
"url": "https://bugzilla.suse.com/1279499"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80765"
},
{
"cve": "CVE-2026-80766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80766"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: uclogic: fix use-after-free of inrange_timer on remove\n\nuclogic_remove() cancels the pen in-range timer and then stops the\ndevice:\n\n\ttimer_delete_sync(\u0026drvdata-\u003einrange_timer);\n\thid_hw_stop(hdev);\n\ntimer_delete_sync() only guarantees the timer is idle at that instant.\nuclogic_raw_event_pen() keeps delivering pen reports until hid_hw_stop()\nstops the transport several lines later, and every report with\npen-\u003einrange == UCLOGIC_PARAMS_PEN_INRANGE_NONE re-arms the timer:\n\n\tmod_timer(\u0026drvdata-\u003einrange_timer, jiffies + msecs_to_jiffies(100));\n\nA report landing between the timer_delete_sync() call and the transport\nteardown in hid_hw_stop() re-arms inrange_timer after it was cancelled.\nuclogic_remove() then returns and the devm drvdata is freed, while\nhid_hw_stop() has already freed the input device drvdata-\u003epen_input\npoints at, so when the timer fires ~100 ms later\nuclogic_inrange_timeout() dereferences freed memory -- a use-after-free\nin timer-softirq context.\n\nSwapping the two calls is not a fix: stopping the device first frees\ndrvdata-\u003epen_input via hidinput_disconnect() while the timer may still\nbe pending, so a timer already armed before removal fires on the freed\ninput device in the window before timer_delete_sync() runs.\n\nUse timer_shutdown_sync() before hid_hw_stop() instead. It cancels the\ntimer, waits for a running callback while pen_input is still valid, and\nprevents any further re-arming -- a later mod_timer() from an in-flight\nreport is silently ignored -- so the timer is provably dead before\nhid_hw_stop() frees the inputs. This is the ordering the timer core\ndocuments for this \"timer re-armed from another path\" teardown case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80766",
"url": "https://www.suse.com/security/cve/CVE-2026-80766"
},
{
"category": "external",
"summary": "SUSE Bug 1279502 for CVE-2026-80766",
"url": "https://bugzilla.suse.com/1279502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80766"
},
{
"cve": "CVE-2026-80767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80767"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: sensor: custom: Fix use-after-free in enable_sensor\n\nenable_sensor_store() can call set_power_report_state(), which\ndereferences sensor_inst-\u003epower_state and sensor_inst-\u003ereport_state.\nThese pointers refer to entries in sensor_inst-\u003efields.\n\nCreate the field attributes before exposing the enable_sensor sysfs\nattribute, so enable_sensor cannot be accessed before the state it\ndepends on has been initialized.\n\nOn remove, delete enable_sensor before freeing the field attributes,\nso a concurrent sysfs write cannot dereference freed memory through\npower_state or report_state.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80767",
"url": "https://www.suse.com/security/cve/CVE-2026-80767"
},
{
"category": "external",
"summary": "SUSE Bug 1279504 for CVE-2026-80767",
"url": "https://bugzilla.suse.com/1279504"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80767"
},
{
"cve": "CVE-2026-80768",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80768"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: ft260: fix stack-use-after-return write in I2C read race\n\nft260_i2c_read() points dev-\u003eread_buf at a caller-supplied buffer\n(often an on-stack variable), arms a completion and waits up to five\nseconds for the device to return the data. The HID input callback\nft260_raw_event() runs in the input/IRQ path, independent of the\ndev-\u003elock mutex held by the read path, and copies the device-supplied\npayload into dev-\u003eread_buf after a plain NULL check.\n\nThese two paths share read_buf, read_idx and read_len with no\nserialization. If the device delays its response until the read\ntimes out, ft260_i2c_read() resets the controller, clears read_buf\nand returns, unwinding the stack frame the buffer lived in. A\nresponse that arrives at that moment lets ft260_raw_event() pass the\nNULL check and then memcpy() the device-controlled payload into the\nnow-freed stack location, a bounded but attacker-influenced\nstack-use-after-return write triggerable by malicious or\nmalfunctioning hardware.\n\nAdd a dedicated spinlock that serializes every access to read_buf,\nread_idx and read_len. ft260_raw_event() now holds it across the\nNULL check, the memcpy and the index update, while the read path\ntakes it when arming and when clearing the buffer, so the teardown\ncan no longer slip between the check and the copy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80768",
"url": "https://www.suse.com/security/cve/CVE-2026-80768"
},
{
"category": "external",
"summary": "SUSE Bug 1279508 for CVE-2026-80768",
"url": "https://bugzilla.suse.com/1279508"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80768"
},
{
"cve": "CVE-2026-80769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: rapoo: fix missing hid_is_usb() check\n\nto_usb_interface() can only be used on a hid_device whose parent is really\nUSB; uhid can create devices that identify as being on BUS_USB, but don\u0027t\nactually have a USB parent.\nFix the use of to_usb_interface() without a hid_is_usb() check.\n\nAdd a dependency on USB_HID for hid_is_usb(), as other HID drivers do; the\nalternative would be to provide a simple stub implementation on !USB_HID\nbuilds.\n\nI have verified that it is currently possible to trigger a kernel splat due\nto this bug in an ASAN build, and that this commit fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80769",
"url": "https://www.suse.com/security/cve/CVE-2026-80769"
},
{
"category": "external",
"summary": "SUSE Bug 1279515 for CVE-2026-80769",
"url": "https://bugzilla.suse.com/1279515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80769"
},
{
"cve": "CVE-2026-80770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80770"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: stop device IO before hid_hw_stop on probe failure\n\nnintendo_hid_probe() calls hid_device_io_start() before joycon_init()\nand joycon_leds_create(). If either fails, the error path jumps to\nerr_close which calls hid_hw_close()/hid_hw_stop() without first calling\nhid_device_io_stop().\n\nhid_hw_stop() does not stop device IO, so hid_input_report() may still\nrun and access driver data that is being torn down, resulting in a\nuse-after-free.\n\nAdd an err_io_stop label that calls hid_device_io_stop() before\nhid_hw_close(), and point the two post-io_start error paths at it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80770",
"url": "https://www.suse.com/security/cve/CVE-2026-80770"
},
{
"category": "external",
"summary": "SUSE Bug 1279516 for CVE-2026-80770",
"url": "https://bugzilla.suse.com/1279516"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80770"
},
{
"cve": "CVE-2026-80771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80771"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: register input device after capabilities are set\n\ninput_register_device() exposes the device to userspace immediately.\nIn joycon_input_create() it was called before joycon_config_rumble()\nconfigures the FF_RUMBLE capability and the memless force-feedback\ndevice, so a concurrent EVIOCSFF could dereference a NULL dev-\u003eff.\n\nRegistering early also means the initial udev event lacks button and\naxis information, which can make input managers ignore the device.\n\nMove input_register_device() to the end of joycon_input_create(), after\nall capabilities, the IMU input device and the force-feedback callbacks\nhave been configured.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80771",
"url": "https://www.suse.com/security/cve/CVE-2026-80771"
},
{
"category": "external",
"summary": "SUSE Bug 1279518 for CVE-2026-80771",
"url": "https://bugzilla.suse.com/1279518"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80771"
},
{
"cve": "CVE-2026-80772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80772"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()\n\njoycon_ctlr_read_handler() casts an incoming HID input report to\nstruct joycon_input_report and parses it, guarding the cast only with a\n12-byte length check:\n\n\tif (size \u003e= 12) /* make sure it contains the input report */\n\t\tjoycon_parse_report(ctlr, (struct joycon_input_report *)data);\n\nstruct joycon_input_report is 49 bytes: a 13-byte header followed by a\nunion whose IMU arm is 36 bytes. For an IMU report joycon_parse_report()\n-\u003e joycon_parse_imu_report() walks that union (struct offsets 13..48),\nso a report of exactly 12 bytes with data[0] == JC_INPUT_IMU_DATA passes\nthe guard yet is read up to 37 bytes past its declared length. The\nover-read bytes are decoded into accelerometer/gyroscope values and\nforwarded to userspace through the \"(IMU)\" input device, leaking\ndriver-internal memory. data[0] and size are fully controlled by a\nmalicious or spoofed Joy-Con/Pro Controller.\n\nReceive buffers are sized to the maximum report length, so this is an\nover-read within the allocation rather than a slab OOB, but the decoded\nbytes still reach userspace.\n\nThe sibling subcmd path in joycon_ctlr_handle_event() already bounds the\nsame cast correctly:\n\n\tif (size \u003c sizeof(struct joycon_input_report) ||\n\t data[0] != JC_INPUT_SUBCMD_REPLY)\n\t\tbreak;\n\nUse the same sizeof(struct joycon_input_report) bound here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80772",
"url": "https://www.suse.com/security/cve/CVE-2026-80772"
},
{
"category": "external",
"summary": "SUSE Bug 1279520 for CVE-2026-80772",
"url": "https://bugzilla.suse.com/1279520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80772"
},
{
"cve": "CVE-2026-80773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80773"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: huawei: fix missing hid_is_usb() check\n\nto_usb_interface() can only be used on a hid_device whose parent is really\nUSB; uhid can create devices that identify as being on BUS_USB, but don\u0027t\nactually have a USB parent.\nFix the use of to_usb_interface() without a hid_is_usb() check.\n\nI have verified that it is currently possible to trigger a kernel splat due\nto this bug in an ASAN build, and that this commit fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80773",
"url": "https://www.suse.com/security/cve/CVE-2026-80773"
},
{
"category": "external",
"summary": "SUSE Bug 1279478 for CVE-2026-80773",
"url": "https://bugzilla.suse.com/1279478"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80773"
},
{
"cve": "CVE-2026-80774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80774"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: asus: fix missing hid_is_usb() check\n\nto_usb_interface() can only be used on a hid_device whose parent is really\nUSB; uhid can create devices that identify as being on BUS_USB, but don\u0027t\nactually have a USB parent.\nFix the use of to_usb_interface() without a hid_is_usb() check.\n\nI have verified that it is currently possible to trigger a kernel splat due\nto this bug in an ASAN build, and that this commit fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80774",
"url": "https://www.suse.com/security/cve/CVE-2026-80774"
},
{
"category": "external",
"summary": "SUSE Bug 1279486 for CVE-2026-80774",
"url": "https://bugzilla.suse.com/1279486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80774"
},
{
"cve": "CVE-2026-80775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80775"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex: Fix race on the initial mm-\u003efutex.phash.ref allocation\n\nfutex_hash_allocate() allocates mm-\u003efutex.phash.ref without any locking.\nCommit d9b05321e21e (\"futex: Move futex_hash_free() back to __mmput()\")\nmoved the allocation here and assumed that the process has just a single\nthread at this point.\n\nCommit ee9dce44362b (\"futex: Drop CLONE_THREAD requirement for private\ndefault hash alloc\") widened need_futex_hash_allocate_default() to cover\nany CLONE_VM clone, but left out vfork because the parent is suspended and\ncannot race.\n\nThat no longer holds once vfork is nested. If a vfork child calls vfork\nagain and is then killed with SIGKILL, the parent is released from its\nvfork wait and runs concurrently with the grandchild in the same mm.\nNeither of them went through futex_hash_allocate_default().\n\nWhen both call prctl(PR_FUTEX_HASH, PR_FUTEX_HASH_SET_SLOTS) at the same\ntime, each one sees mm-\u003efutex.phash.ref as NULL and stores its own percpu\ncounter. Only the last store survives. The counter stored first is no\nlonger reachable from the mm, so the references on it are not seen by\n__futex_ref_atomic_end(). A private hash that still has references is then\nconsidered dead and freed, and a task that still holds one of its buckets\nwrites into freed memory in futex_q_lock().\n\nStore the counter once with cmpxchg() and let the loser free_percpu() its\nown. The initial reference has to be taken before the store, otherwise\nanother task can install a private hash while the counter is still 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80775",
"url": "https://www.suse.com/security/cve/CVE-2026-80775"
},
{
"category": "external",
"summary": "SUSE Bug 1279583 for CVE-2026-80775",
"url": "https://bugzilla.suse.com/1279583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80775"
},
{
"cve": "CVE-2026-80777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80777"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex/pi: Plug private futex exec() race\n\nThe check for private futexes whether the waiter\u0027s mm, which is stored in\nthe futex_key and copied into the pi_state, is the same as the owner\u0027s mm\nis not sufficient for exec(). exec() has a gap where the mm check fails to\ngive the correct answer:\n\n exec()\n ...\n exec_release_mm()\n futex_exec_release()\n tsk::futex::exit_state = EXITING;\n cleanup_robust_list();\n1) tsk::futex::exit_state = OK;\n ...\n old_mm = tsk::mm;\n2) tsk::mm = -\u003emm;\n\nBetween #1 and #2 the check for the mm is wrong as that mm is about to be\nswapped out and eventually freed.\n\nPlug this gap by:\n\n 1) Setting tsk::futex::exit_state to FUTEX_STATE_DEAD in\n futex_exec_release()\n\n 2) Setting tsk::futex::exit_state to FUTEX_STATE_OK after\n the mm has been switched.\n\nFrom a futex point of view the task is dead after it finished the robust\nlist cleanup up to the point where it sets the state to OK again.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80777",
"url": "https://www.suse.com/security/cve/CVE-2026-80777"
},
{
"category": "external",
"summary": "SUSE Bug 1279586 for CVE-2026-80777",
"url": "https://bugzilla.suse.com/1279586"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80777"
},
{
"cve": "CVE-2026-80778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfutex/pi: Reject cross-mm private futex owners\n\nA private futex key borrows the waiter\u0027s mm without taking an mm_users\nreference. Nevertheless, attach_to_pi_owner() currently accepts an owner\nfrom a different address space and copies the private key into the owner\u0027s\nPI state.\n\nWhen that owner exits, exit_pi_state_list() uses the saved key to find the\nhash bucket and acquires a reference to the waiter\u0027s private hash. If the\nlast user of the waiter\u0027s mm exits concurrently, futex_hash_free() frees\nthe hash while the owner still uses its bucket and reference.\n\nPrevent this by validating in attach_to_pi_owner() that, for private\nfutexes, the owner mm and waiter mm are the same. Perform the check with\nthe owner\u0027s pi_lock held and after validating owner::futex::state to\nserialize against a concurrent PI-state exit cleanup.\n\n[ tglx: Amended comment ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80778",
"url": "https://www.suse.com/security/cve/CVE-2026-80778"
},
{
"category": "external",
"summary": "SUSE Bug 1279587 for CVE-2026-80778",
"url": "https://bugzilla.suse.com/1279587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80778"
},
{
"cve": "CVE-2026-80779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ionic: avoid OOB TX partner lookup for hwstamp RXQ\n\nThe dedicated hardware timestamp RX queue is allocated with q-\u003eindex\nequal to lif-\u003eionic-\u003enrxqs_per_lif. The normal txqcqs array only\ncontains the regular queue pairs, so using that index to set rxq-\u003epartner\ncan read one entry past txqcqs[] and then write through the derived\npointer.\nOnly link RX/TX partners for normal queue-pair indexes. Leave the hwstamp\nRX queue unpaired, and make the XDP_TX path abort cleanly if an RX queue\nhas no TX partner.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80779",
"url": "https://www.suse.com/security/cve/CVE-2026-80779"
},
{
"category": "external",
"summary": "SUSE Bug 1279590 for CVE-2026-80779",
"url": "https://bugzilla.suse.com/1279590"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80779"
},
{
"cve": "CVE-2026-80780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: pidff: fix OOB write when hid-\u003einputs is empty\n\nhid_pidff_init_with_quirks() derives its input_dev from\n\n\tlist_entry(hid-\u003einputs.next, struct hid_input, list)\n\nwithout first checking that hid-\u003einputs is non-empty. The list member\nof struct hid_input is at offset 0, so on an empty list list_entry()\nyields \u0026hid-\u003einputs itself and the following hidinput-\u003einput load reads\nan unrelated member of struct hid_device. dev is then a type-confused\npointer, and force-feedback init writes through it: each\nset_bit(FF_*, dev-\u003effbit) stores 8 bytes at dev + 192, past the end of\nthe object dev actually aliases, and input_ff_create() adds further\nwrites of a heap pointer and two function pointers.\n\nUntil hid-universal-pidff the only caller was hid_pidff_init() from\nusbhid, which runs under HID_CLAIMED_INPUT and therefore always has at\nleast one hid_input. universal_pidff_probe() starts the device with\nHID_CONNECT_DEFAULT \u0026 ~HID_CONNECT_FF and then calls\nhid_pidff_init_with_quirks() directly whenever the descriptor carries a\nPID usage page, bypassing that gate. A report descriptor whose only\napplication collection is on HID_UP_PID leaves hid-\u003einputs empty while\nhid_connect() still succeeds through the hidraw claim, so probe reaches\nthe unguarded list_entry().\n\nThe write happens in the USB probe path, on the hotplug workqueue, so\nplugging in a malicious device is enough to trigger it; no attacker\nsoftware and no logged-in user are required. KASAN reports an 8-byte\nout-of-bounds write in hid_pidff_init_with_quirks() reached from\nuniversal_pidff_probe().\n\nCheck for an empty list before deriving dev and return -ENODEV, as the\nother HID force-feedback drivers already do. universal_pidff_probe()\npropagates the error and unwinds.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80780",
"url": "https://www.suse.com/security/cve/CVE-2026-80780"
},
{
"category": "external",
"summary": "SUSE Bug 1279491 for CVE-2026-80780",
"url": "https://bugzilla.suse.com/1279491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80780"
},
{
"cve": "CVE-2026-80781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80781"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: fix OOB read of field-\u003eusage in hid_set_field()\n\nhid_set_field() hands field-\u003eusage + offset to hid_dump_input() before\nthe guard that bounds offset:\n\n\thid_dump_input(field-\u003ereport-\u003edevice, field-\u003eusage + offset, value);\n\n\tif (offset \u003e= field-\u003ereport_count) {\n\t\thid_err(...);\n\t\treturn -1;\n\t}\n\nUnder CONFIG_DEBUG_FS hid_dump_input() dereferences that pointer, with\nbuf = hid_resolv_usage(usage-\u003ehid, NULL). The usage[] array is\nallocated inline with the hid_field in hid_register_field() and holds\nfield-\u003emaxusage entries, so an offset past it reads off the end of the\nkvzalloc()ed allocation and into a neighbouring object. Had the guard\nrun first, offset \u003c report_count \u003c= maxusage would already have confined\nthe pointer to the array.\n\nA caller supplies such an offset today. picolcd_fb_send_tile()\nvalidates only report-\u003emaxfield before issuing\nhid_set_field(report-\u003efield[0], 11 + i, ...) for i = 0..31, so its\noffsets are fixed at 11..42 and are never checked against the bound\nfield. When the device registers that field with fewer usages, the\nframebuffer deferred-io work drives the read on every tile. KASAN\nreports a 4-byte slab-out-of-bounds read in hid_dump_input() below\nhid_set_field(), and the same boot logs \"offset (1) exceeds\nreport_count (1)\" from the guard that runs only afterwards.\n\nMove the hid_dump_input() call below the guard. Because\nfield-\u003emaxusage \u003e= field-\u003ereport_count, the guard then establishes that\nfield-\u003eusage + offset lies inside the array before it is dereferenced,\nfor every caller and without changing behaviour on the valid path.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80781",
"url": "https://www.suse.com/security/cve/CVE-2026-80781"
},
{
"category": "external",
"summary": "SUSE Bug 1279594 for CVE-2026-80781",
"url": "https://bugzilla.suse.com/1279594"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80781"
},
{
"cve": "CVE-2026-80782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80782"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: magicmouse: do not keep a stale msc-\u003einput if no input is claimed\n\nmagicmouse_input_mapping() caches the first hid_input\u0027s input_dev in\nmsc-\u003einput while the report descriptor is parsed, and the rest of the\ndriver treats a non-NULL msc-\u003einput as proof that an input device was\nregistered.\n\nThat does not hold on the hid-input error path. If hidinput_connect()\nfails -- for instance because input_register_device() returns an error --\nit unwinds through hidinput_disconnect(), which frees every input_dev it\ncreated, including the one cached in msc-\u003einput.\n\nThe failure does not abort the probe. hid_connect() only skips the claim:\n\n\tif ((connect_mask \u0026 HID_CONNECT_HIDINPUT) \u0026\u0026 !hidinput_connect(hdev,\n\t\t\t\tconnect_mask \u0026 HID_CONNECT_HIDINPUT_FORCE))\n\t\thdev-\u003eclaimed |= HID_CLAIMED_INPUT;\n\nand the \"device has no listeners\" bailout below it does not fire for this\ndriver, which sets -\u003eraw_event; on the USB Magic Mouse 2 / Magic Trackpad\n2 paths hidraw and hiddev are claimed as well. hid_hw_start() therefore\nreturns 0 and magicmouse_probe() continues with msc-\u003einput pointing at\nfreed memory. Being non-NULL, it passes the \"input not registered\" check\nin probe and the NULL checks in -\u003eraw_event and -\u003eevent, so the next\ninput report dereferences freed memory.\n\nClear msc-\u003einput when the HID core did not claim an input device, so the\nexisting NULL checks cover this case as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80782",
"url": "https://www.suse.com/security/cve/CVE-2026-80782"
},
{
"category": "external",
"summary": "SUSE Bug 1279603 for CVE-2026-80782",
"url": "https://bugzilla.suse.com/1279603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80782"
},
{
"cve": "CVE-2026-80783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80783"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()\n\nmagicmouse_raw_event() handles DOUBLE_REPORT_ID (0xf7) packets, which pack\ntwo touch reports into one, by splitting the packet and calling itself on\neach half. The only guard against runaway recursion is a \"size \u003c 1\" check,\nwhich stops zero-sized calls but does not bound the recursion depth.\n\nA malicious HID device that matches this driver can send a report starting\nwith DOUBLE_REPORT_ID and filled with the sequence [0xf7, 0x00]. Each level\nconsumes two bytes and recurses on the remainder, so an incoming report of\nup to HID_MAX_BUFFER_SIZE (16 KiB) drives roughly 8000 nested calls. That\neasily exhausts the 16 KiB kernel stack, leading to a stack overflow: a\npanic with CONFIG_VMAP_STACK, or memory corruption without it.\n\nA double report only ever wraps two normal reports; it is never\nlegitimately nested. Refuse to re-enter the DOUBLE_REPORT_ID case from a\nrecursive call so the recursion depth is bounded to two, while all valid\npackets keep being parsed exactly as before.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80783",
"url": "https://www.suse.com/security/cve/CVE-2026-80783"
},
{
"category": "external",
"summary": "SUSE Bug 1279605 for CVE-2026-80783",
"url": "https://bugzilla.suse.com/1279605"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80783"
},
{
"cve": "CVE-2026-80787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80787"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: pci-epf: fix use-after-free in nvmet_pci_epf_exec_iod_work()\n\nnvmet_pci_epf_exec_iod_work() submits an I/O command with req-\u003eexecute()\nand then waits for the command to complete and transfers the data back\nto the host. This wait is not needed for commands that do not transfer\ndata from the device to the host. To decide whether that wait is needed,\nit reads iod-\u003edata_len and iod-\u003edma_dir after calling req-\u003eexecute().\n\nHowever, once req-\u003eexecute() is called, the command may complete\nasynchronously on another CPU. For commands that do not require a\ndevice-to-host data transfer, nvmet_pci_epf_queue_response() calls\nnvmet_pci_epf_complete_iod() directly, which can free the iod before it\nreads iod-\u003edata_len and iod-\u003edma_dir, resulting in the KFENCE use-after-\nfree:\n\n BUG: KFENCE: use-after-free read in nvmet_pci_epf_exec_iod_work+0x288/0x798 [nvmet_pci_epf]\n\n Use-after-free read at 0x00000000fdfa6d03 (in kfence-#63):\n nvmet_pci_epf_exec_iod_work+0x288/0x798 [nvmet_pci_epf]\n process_one_work+0x15c/0x4f0\n worker_thread+0x18c/0x30c\n kthread+0x130/0x140\n ret_from_fork+0x10/0x20\n\n kfence-#63: 0x00000000e3de0e71-0x00000000c938ad62, size=712, cache=kmalloc-1k\n\n allocated by task 10 on cpu 0 at 73.995480s (0.005122s ago):\n mempool_kmalloc+0x1c/0x28\n mempool_alloc_noprof+0x40/0x9c\n nvmet_pci_epf_poll_sqs_work+0xd4/0x344 [nvmet_pci_epf]\n process_one_work+0x15c/0x4f0\n worker_thread+0x18c/0x30c\n kthread+0x130/0x140\n ret_from_fork+0x10/0x20\n\n freed by task 131 on cpu 3 at 73.995521s (0.008385s ago):\n mempool_kfree+0x10/0x20\n mempool_free+0x44/0x64\n nvmet_pci_epf_free_iod+0x88/0x98 [nvmet_pci_epf]\n nvmet_pci_epf_cq_work+0xfc/0x280 [nvmet_pci_epf]\n process_one_work+0x15c/0x4f0\n worker_thread+0x18c/0x30c\n kthread+0x130/0x140\n ret_from_fork+0x10/0x20\n\nFix this by referring to iod-\u003edata_len and iod-\u003edma_dir before calling\nreq-\u003eexecute(). The remaining iod accesses such as iod-\u003estatus are only\nreached on the device-to-host read path. In this case,\nnvmet_pci_epf_queue_response() signals iod-\u003edone instead of freeing the\niod, so the iod stays valid.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80787",
"url": "https://www.suse.com/security/cve/CVE-2026-80787"
},
{
"category": "external",
"summary": "SUSE Bug 1279617 for CVE-2026-80787",
"url": "https://bugzilla.suse.com/1279617"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80787"
},
{
"cve": "CVE-2026-80788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80788"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations\n\nWhen fuzzing the nvme target code, I tripped a kernel warning in\nnvmet_tcp_map_data() because the length passed into the allocator is\ncontrolled by the remote initiator.\n\nA remote initiator that sends a command with an SGL claiming a huge\nnumber, can create a scatterlist and iovec allocation of over 1 million\nentries, which causes the backing kmalloc call to exceed MAX_PAGE_ORDER\nand then the page allocator will trip on a WARN_ON_ONCE_GFP() message:\n\n WARNING: mm/page_alloc.c:5280 __alloc_frozen_pages_noprof\n Workqueue: nvmet_tcp_wq nvmet_tcp_io_work\n ...\n sgl_alloc_order\n nvmet_tcp_map_data\n nvmet_tcp_try_recv_pdu\n\nAs it\u0027s never good to trip a kernel warning remotely due to many systems\nhaving panic-on-warn enabled, let\u0027s silence it by just add GFP_NOWARN to\nthe allocation flags.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80788",
"url": "https://www.suse.com/security/cve/CVE-2026-80788"
},
{
"category": "external",
"summary": "SUSE Bug 1279623 for CVE-2026-80788",
"url": "https://bugzilla.suse.com/1279623"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80788"
},
{
"cve": "CVE-2026-80789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80789"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: bound SGL data length before allocating command buffers\n\nnvmet_tcp_map_data() reads the host-controlled 32-bit sgl-\u003elength\nand, for the in-capsule offset descriptor (type 0x01), checks it\nagainst port-\u003einline_data_size before use. Any other SGL descriptor\ntype -- including the non-inline transport SGL data-block descriptor\n(type (NVME_TRANSPORT_SGL_DATA_DESC \u003c\u003c 4) | NVME_SGL_FMT_TRANSPORT_A,\nthe type a real host uses for out-of-capsule writes) skips that check\nentirely and falls straight through to:\n\n\tcmd-\u003ereq.sg = sgl_alloc(len, GFP_KERNEL, \u0026cmd-\u003ereq.sg_cnt);\n\nwith len taken directly from the wire, unbounded up to 4 GiB.\n\nnvmet_req_init() only parses the command and never inspects\nsgl-\u003elength, and nvmet_check_transfer_len() -- the only other place\ntransfer_len is validated -- runs later, from req-\u003eexecute(), after\nthe allocation has already happened. For a write command the target\nresponds with an R2T and parks the command waiting for the host to\nsend the data; if the host (or an unauthenticated peer that simply\nnever follows up) never does, the sgl_alloc() buffer stays resident\nfor the life of the command. NVMe/TCP has no mandatory authentication\nin the default configuration, so any peer able to reach the target\nportal and complete a Fabrics connect can drive this with a single\ncrafted command, repeatable across queues and connections for\namplification. This is unbounded kernel memory allocation\ntriggered by a remote, effectively unauthenticated peer.\n\nValidate len against the same NVMET_TCP_MAXH2CDATA ceiling this file\nalready uses to bound per-PDU H2C data, for every SGL descriptor type,\nbefore doing any allocation. This closes the gap for the non-inline\ndescriptor while leaving the existing, tighter inline_data_size check\nin place for the in-capsule case.\n\nRuntime-verified on a v6.19 KASAN stand: with this bound in place, a\ncrafted write command carrying an oversized non-inline SGL length is\nrejected before sgl_alloc() runs, where the same request previously\ndrove an unbounded ~256 MiB kernel allocation (up to 4 GiB) that\nstayed resident pending an R2T the host never satisfies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80789",
"url": "https://www.suse.com/security/cve/CVE-2026-80789"
},
{
"category": "external",
"summary": "SUSE Bug 1279621 for CVE-2026-80789",
"url": "https://bugzilla.suse.com/1279621"
},
{
"category": "external",
"summary": "SUSE Bug 1279622 for CVE-2026-80789",
"url": "https://bugzilla.suse.com/1279622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80789"
},
{
"cve": "CVE-2026-80790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80790"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-fc: fix invalid free in LS IOD error path\n\nnvmet_fc_alloc_ls_iodlist() advances iod while initializing the LS IOD\narray. If an rqstbuf allocation or response buffer DMA mapping fails,\nthe unwind loop decrements iod past the start of the array. The final\nkfree(iod) therefore frees an address before the allocated object.\n\nThis can be reproduced with nvme-fcloop and failslab by setting\nfail-nth to 6 before creating a target port. KASAN reports:\n\n BUG: KASAN: invalid-free in nvmet_fc_register_targetport\n Free of addr ffff88816cf8ff48 by task nvmet_fail_nth/9552\n\nFree the original allocation base stored in tgtport-\u003eiod instead. With\nthis fix applied, the same sysfs write with fail-nth=6 returns -ENOMEM\nwithout any KASAN report.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80790",
"url": "https://www.suse.com/security/cve/CVE-2026-80790"
},
{
"category": "external",
"summary": "SUSE Bug 1279709 for CVE-2026-80790",
"url": "https://bugzilla.suse.com/1279709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80790"
},
{
"cve": "CVE-2026-80791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: zero the AUTH_RECEIVE response buffer\n\nnvmet_execute_auth_receive() allocates the response buffer with kmalloc()\nsized by the host-supplied AUTH_RECEIVE allocation length, but the\nDH-HMAC-CHAP builders write only a fixed-size message into it. The full\nallocation length is then copied to the wire by nvmet_copy_to_sgl(), so a\nremote initiator receives the bytes past the built message -- up to nearly\na page of uninitialized slab -- during the pre-authentication handshake.\n\nAllocate the buffer with kzalloc() so the unwritten tail is zeroed before\nit is sent; conforming responses are unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80791",
"url": "https://www.suse.com/security/cve/CVE-2026-80791"
},
{
"category": "external",
"summary": "SUSE Bug 1279710 for CVE-2026-80791",
"url": "https://bugzilla.suse.com/1279710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80791"
},
{
"cve": "CVE-2026-80792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80792"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix use-after-free in ip6_finish_output2()\n\nip6_finish_output2() caches a pointer to the IPv6 destination\naddress (daddr) before invoking lwtunnel_xmit(). The LWT-BPF\ntransmit path or other encapsulation operations within\nlwtunnel_xmit() can reallocate the skb head, freeing the memory\nthat daddr points to. When lwtunnel_xmit() returns\nLWTUNNEL_XMIT_CONTINUE, the function continues to use the stale\ndaddr pointer to compute the nexthop and to look up or create the\nneighbour entry. This results in a use-after-free read, which can\nleak sensitive kernel data, pollute the neighbour table with\narbitrary values, misdirect traffic, or crash the system.\n\nFix this by re-fetching the IPv6 header and the destination\naddress pointer after lwtunnel_xmit() returns\nLWTUNNEL_XMIT_CONTINUE, ensuring that the subsequent nexthop\ncomputation and neighbour lookup operate on valid memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80792",
"url": "https://www.suse.com/security/cve/CVE-2026-80792"
},
{
"category": "external",
"summary": "SUSE Bug 1279796 for CVE-2026-80792",
"url": "https://bugzilla.suse.com/1279796"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80792"
},
{
"cve": "CVE-2026-80793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80793"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: reject undersized MTUs in ip_do_fragment()\n\nip_do_fragment() subtracts the IPv4 header length from the effective\nMTU and passes the resulting payload MTU to ip_frag_next().\n\nIf the effective MTU is smaller than hlen + 8, ip_frag_next() rounds\nthe fragment payload length down to zero. The fragmentation state then\nnever makes forward progress: state-\u003eleft, state-\u003eptr and state-\u003eoffset\nstay unchanged while ip_do_fragment() keeps allocating and transmitting\nheader-only fragments until the softlockup detector fires.\n\nThis is reproducible with a route installed using \"mtu lock 20\", but it\nis also reproducible without route MTU lock, for example by forwarding a\npacket to a device whose MTU is 20.\n\nFix it in ip_do_fragment() by rejecting mtu \u003c hlen + 8 with -EMSGSIZE,\nmatching the existing IPv6 fragmentation check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80793",
"url": "https://www.suse.com/security/cve/CVE-2026-80793"
},
{
"category": "external",
"summary": "SUSE Bug 1279799 for CVE-2026-80793",
"url": "https://bugzilla.suse.com/1279799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80793"
},
{
"cve": "CVE-2026-80794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80794"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: fix uninit-value in the RF discover/activated NTF handlers\n\nnci_rf_discover_ntf_packet() and nci_rf_intf_activated_ntf_packet() each\nparse a notification into an on-stack struct (nci_rf_discover_ntf /\nnci_rf_intf_activated_ntf) that is not initialised. The RF\ntechnology-specific parameters are only extracted when\nrf_tech_specific_params_len is non-zero, so a notification that reports a\nzero length leaves the rf_tech_specific_params union uninitialised - and\nboth handlers then pass it to nci_add_new_protocol(), which reads it:\n\n - discover: nci_add_new_target() -\u003e nci_add_new_protocol();\n - activated: nci_target_auto_activated() -\u003e nci_add_new_protocol().\n\nnci_add_new_protocol() uses nfca_poll-\u003enfcid1_len as both a branch\ncondition and a memcpy() length and copies nfcid1/sens_res/sel_res into\nndev-\u003etargets, which is later exposed to user space via NFC_CMD_GET_TARGET.\n\n BUG: KMSAN: uninit-value in nci_add_new_protocol+0x624/0x6c0\n nci_add_new_protocol+0x624/0x6c0\n nci_ntf_packet+0x25b2/0x3c30\n nci_rx_work+0x318/0x5d0\n process_scheduled_works+0x84b/0x17a0\n worker_thread+0xc10/0x11b0\n kthread+0x376/0x500\n Local variable ntf.i created at:\n nci_ntf_packet+0xbc2/0x3c30\n\nZero-initialise both on-stack notifications so the union reads back as\nzero when no technology-specific parameters are present.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80794",
"url": "https://www.suse.com/security/cve/CVE-2026-80794"
},
{
"category": "external",
"summary": "SUSE Bug 1279802 for CVE-2026-80794",
"url": "https://bugzilla.suse.com/1279802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80794"
},
{
"cve": "CVE-2026-80795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: fix out-of-bounds write in nci_target_auto_activated()\n\nnci_target_auto_activated() appends a target to the fixed-size array\nndev-\u003etargets[NCI_MAX_DISCOVERED_TARGETS] and increments ndev-\u003en_targets\nwithout first checking the array is full; unlike its sibling\nnci_add_new_target(), which bails out when n_targets already equals\nNCI_MAX_DISCOVERED_TARGETS.\n\nndev-\u003en_targets is only cleared by nci_clear_target_list(), so an NFCC\nthat repeatedly re-runs discovery (RF_DISCOVER_RSP, which re-enters\nNCI_DISCOVERY without clearing the target list) and reports an\nauto-activated target (RF_INTF_ACTIVATED_NTF) drives n_targets past the\nlimit. The append then writes a struct nfc_target past the end of the\narray (a slab out-of-bounds write), and nfc_targets_found() goes on to\nwalk the array with the inflated count:\n\n BUG: KASAN: slab-out-of-bounds in nci_add_new_protocol+0x94/0x2ac [nci]\n Write of size 2 at addr ffff0000c7299a18 by task kworker/u8:0/12\n Workqueue: nfc0_nci_rx_wq nci_rx_work [nci]\n Call trace:\n nci_add_new_protocol+0x94/0x2ac [nci]\n nci_ntf_packet+0xddc/0x11a0 [nci]\n nci_rx_work+0x15c/0x1e0 [nci]\n process_one_work+0x2dc/0x500\n worker_thread+0x240/0x460\n kthread+0x1c0/0x1d0\n ret_from_fork+0x10/0x20\n\n The buggy address belongs to the cache kmalloc-2k of size 2048\n The buggy address is located 1024 bytes to the right of\n allocated 1560-byte region [ffff0000c7299000, ffff0000c7299618)\n\nGuard nci_target_auto_activated() with the same check used by\nnci_add_new_target().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80795",
"url": "https://www.suse.com/security/cve/CVE-2026-80795"
},
{
"category": "external",
"summary": "SUSE Bug 1279805 for CVE-2026-80795",
"url": "https://bugzilla.suse.com/1279805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80795"
},
{
"cve": "CVE-2026-80796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80796"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: add data_len bound checks to activation parameter extractors\n\nnci_extract_activation_params_iso_dep() and\nnci_extract_activation_params_nfc_dep() read an inner length byte from\nthe NCI RF_INTF_ACTIVATED_NTF payload and use it to memcpy() into fixed\nkernel buffers, but neither function receives the caller-validated\nactivation_params_len. A crafted NCI notification with\nactivation_params_len=1 and an inner length byte of up to 20 (NFC-A) or\n50 (NFC-B) causes memcpy() to read that many bytes past the one valid\nbyte in the activation params region -- a slab out-of-bounds read of\nkernel memory adjacent to the NCI skb.\n\nThe sibling nci_extract_rf_params_*() family was given equivalent\nprotection by commit 571dcbeb8e63 (\"net: nfc: nci: Fix parameter\nvalidation for packet data\"), but the two activation parameter\nextractors were not updated at that time.\n\nAdd a data_len parameter to both functions, guard against an empty\nregion before consuming the inner length byte, decrement the remaining\ncount after consuming it, and clamp the copy length to what is actually\navailable. Update both call sites to pass ntf.activation_params_len,\nwhich is already validated against the skb at ntf.c:801.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80796",
"url": "https://www.suse.com/security/cve/CVE-2026-80796"
},
{
"category": "external",
"summary": "SUSE Bug 1279807 for CVE-2026-80796",
"url": "https://bugzilla.suse.com/1279807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80796"
},
{
"cve": "CVE-2026-80797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80797"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: pn533: purge fragmented skbs during cleanup\n\npn53x_common_clean() purges resp_q before freeing the common PN533 state,\nbut it leaves fragment_skb untouched. The fragmentation helpers queue\ntransmit fragments there while sending large initiator or target-mode\nframes, and those skbs remain owned by the driver until they are sent or\ndiscarded.\n\nIf the device is removed while fragments are still queued, the common\ncleanup path frees the PN533 state without releasing the queued fragment\nskbs, leaking them.\n\nPurge fragment_skb during cleanup alongside resp_q.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80797",
"url": "https://www.suse.com/security/cve/CVE-2026-80797"
},
{
"category": "external",
"summary": "SUSE Bug 1279808 for CVE-2026-80797",
"url": "https://bugzilla.suse.com/1279808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80797"
},
{
"cve": "CVE-2026-80798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80798"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: reject PDUs shorter than the LLCP header\n\nEvery LLCP PDU begins with a two-byte header (DSAP/SSAP + PTYPE), but the\nreceive path never checked that a frame is at least LLCP_HEADER_SIZE bytes\nbefore parsing it.\n\nnfc_llcp_rx_skb() reads the header via nfc_llcp_ptype()/nfc_llcp_dsap()/\nnfc_llcp_ssap(), which dereference pdu-\u003edata[0] and pdu-\u003edata[1], and a\nCONNECT or CC PDU then computes\n\n\ttlv_array_len = skb-\u003elen - LLCP_HEADER_SIZE;\n\nas a size_t and hands it to the TLV walk. When the frame is shorter than\nthe header the subtraction wraps to a huge value and the walk runs far\npast the buffer, an out-of-bounds read.\n\nA nearby NFC device can reach this without authentication; LLCP link\nactivation happens automatically after NFC-DEP.\n\nGuard the common receive choke point __nfc_llcp_recv(), shared by both the\ntarget (nfc_llcp_data_received()) and initiator (nfc_llcp_recv()) paths, so\na short skb is dropped before the rx_work worker parses it. Use\npskb_may_pull() rather than a skb-\u003elen test so the two header bytes are\nguaranteed to sit in the skb linear area even for a non-linear skb,\nmatching how the sibling NCI and HCI receive paths validate their headers.\n\nReproduced with a KFENCE out-of-bounds read via /dev/virtual_nci on\nlinux-next.\n\nFound by 0sec automated security-research tooling (https://0sec.ai).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80798",
"url": "https://www.suse.com/security/cve/CVE-2026-80798"
},
{
"category": "external",
"summary": "SUSE Bug 1279809 for CVE-2026-80798",
"url": "https://bugzilla.suse.com/1279809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80798"
},
{
"cve": "CVE-2026-80799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80799"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: fix OOB read and u8 offset wrap in TLV parsers\n\nnfc_llcp_parse_gb_tlv() and nfc_llcp_parse_connection_tlv() contain\nthree related bugs in their TLV parsing loops:\n\n1. \u0027offset\u0027 is declared u8 but tlv_array_len is u16. When TLV data\n advances offset past 255 it silently wraps to zero, causing\n infinite loops or double-processing of buffer data.\n\n2. Before reading tlv[0] (type) and tlv[1] (length) there is no\n check that offset+2 \u003c= tlv_array_len. A truncated TLV causes\n an OOB read of one byte past the buffer end.\n\n3. After reading the length field, the value bytes are accessed\n without checking offset+2+length \u003c= tlv_array_len. A crafted\n length=0xFF on a short buffer causes up to 255 bytes of OOB\n read past the buffer end.\n\nBoth functions are reachable without authentication via\nnfc_llcp_set_remote_gb() which feeds remote LLCP general bytes\ndirectly into nfc_llcp_parse_gb_tlv() with no additional\nvalidation.\n\nFix all three issues by widening offset from u8 to u16 and adding\nbounds checks for both the TLV header and value field before each\naccess.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80799",
"url": "https://www.suse.com/security/cve/CVE-2026-80799"
},
{
"category": "external",
"summary": "SUSE Bug 1279811 for CVE-2026-80799",
"url": "https://bugzilla.suse.com/1279811"
},
{
"category": "external",
"summary": "SUSE Bug 1279861 for CVE-2026-80799",
"url": "https://bugzilla.suse.com/1279861"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80799"
},
{
"cve": "CVE-2026-80800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80800"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: bound the connect_sn TLV walk to the skb\n\nCommit 27256cdb290e (\"nfc: llcp: bound SNL TLV parsing to the skb and\nadd length checks\") fixed the unbounded TLV walk in nfc_llcp_recv_snl(),\nand commit d8bd2dedbde5 (\"nfc: llcp: fix OOB read and u8 offset wrap in\nTLV parsers\") subsequently bounded nfc_llcp_parse_gb_tlv() and\nnfc_llcp_parse_connection_tlv(). One sibling parser sharing the same\npattern remains unbounded: nfc_llcp_connect_sn().\n\nnfc_llcp_connect_sn() walks a TLV list, reading a two-byte header\n(type, length) followed by length bytes of value, without checking that\nthe two header bytes or the declared length stay within the buffer. It\nreturns a pointer to a service name of up to 255 bytes that may point\npast the end of the skb; it is subsequently consumed by memcmp() in\nnfc_llcp_sock_from_sn(). In addition tlv_array_len was computed as\n\"skb-\u003elen - LLCP_HEADER_SIZE\" in size_t, so a CONNECT/CC frame shorter\nthan the LLCP header underflows to a huge length and the walk runs far\npast the buffer.\n\nnfc_llcp_connect_sn() is reachable from nfc_llcp_recv_connect() and\nnfc_llcp_recv_cc(), i.e. from received CONNECT and CC PDUs. A nearby\nNFC device can reach this without authentication; LLCP link activation\nhappens automatically after NFC-DEP, and the nfc_llcp_rx_skb()\ndispatcher applies no minimum-length guard.\n\nWalk the TLV list by pointer, bounded by skb_tail_pointer(skb), and\nvalidate each declared length before use, matching the approach already\nused for nfc_llcp_recv_snl(). Starting the walk at\n\u0026skb-\u003edata[LLCP_HEADER_SIZE] against the tail pointer also removes the\nsize_t underflow for short frames.\n\nFound by 0sec automated security-research tooling (https://0sec.ai).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80800",
"url": "https://www.suse.com/security/cve/CVE-2026-80800"
},
{
"category": "external",
"summary": "SUSE Bug 1279812 for CVE-2026-80800",
"url": "https://bugzilla.suse.com/1279812"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80800"
},
{
"cve": "CVE-2026-80801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: microread: validate target discovery payload lengths\n\nmicroread_target_discovered() parses target discovery payloads from\nskb-\u003edata according to the HCI gate. The fixed field offsets and UID\ncopies were checked only against the destination nfc_target buffers, not\nagainst the actual skb length.\n\nValidate that each gate-specific payload contains the fixed fields and\nUID bytes before reading or copying them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80801",
"url": "https://www.suse.com/security/cve/CVE-2026-80801"
},
{
"category": "external",
"summary": "SUSE Bug 1279815 for CVE-2026-80801",
"url": "https://bugzilla.suse.com/1279815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80801"
},
{
"cve": "CVE-2026-80802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: fdp: bound the device-reported read length and fix an skb leak\n\nfdp_nci_i2c_read() takes the next packet length from two device-supplied\nbytes and never validates it. The value is a u16 used as the\ni2c_master_recv() count into a 261-byte on-stack buffer: a malicious,\ncounterfeit or malfunctioning controller (or an i2c bus interposer) can\ndrive it far past the buffer for a stack out-of-bounds write that\nclobbers the canary and return address, or below the minimum frame size\n(directly, or by truncating the computed sum) so the header/LRC strip\nand the next length read run past a short receive. Reject a length\noutside [FDP_NCI_I2C_MIN_PAYLOAD, FDP_NCI_I2C_MAX_PAYLOAD], as a\ncorrupted packet already is, and force resynchronization.\n\nThe same loop allocates one data skb per iteration and assumes a length\npacket followed by a data packet; a device that sends two data packets\nin one call leaks the first skb when the second allocation overwrites\nit. Free a previously allocated skb before allocating the next.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80802",
"url": "https://www.suse.com/security/cve/CVE-2026-80802"
},
{
"category": "external",
"summary": "SUSE Bug 1279814 for CVE-2026-80802",
"url": "https://bugzilla.suse.com/1279814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80802"
},
{
"cve": "CVE-2026-80803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80803"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: digital: clamp SENSF_RES length to the destination buffer\n\ndigital_in_recv_sensf_res() memcpy()s resp-\u003elen bytes from a remote\nNFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res\nfield without an upper-bound check. A nearby malicious NFC-F device can\nsend an oversized SENSF_RES response to overflow the stack-local struct\nnfc_target.\n\nClamp resp-\u003elen to NFC_SENSF_RES_MAXSIZE before the copy.\n\nFound by 0sec automated security-research tooling (https://0sec.ai).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80803",
"url": "https://www.suse.com/security/cve/CVE-2026-80803"
},
{
"category": "external",
"summary": "SUSE Bug 1279798 for CVE-2026-80803",
"url": "https://bugzilla.suse.com/1279798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80803"
},
{
"cve": "CVE-2026-80804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80804"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: restore nofs context unconditionally in xfs_trans_roll\n\nWhen __xfs_trans_commit() fails in xfs_trans_roll(), the NOFS context\nis cleared but only restored in the success path. This leaves the\nerror path without nofs protection, causing a circular lock dependency\nbetween xfs_nondir_ilock_class and fs_reclaim:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026xfs_nondir_ilock_class);\n lock(fs_reclaim);\n lock(\u0026xfs_nondir_ilock_class);\n lock(fs_reclaim);\n\nFix this by moving xfs_trans_set_context() before the error check so\nthat nofs context is always restored on the new transaction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80804",
"url": "https://www.suse.com/security/cve/CVE-2026-80804"
},
{
"category": "external",
"summary": "SUSE Bug 1279579 for CVE-2026-80804",
"url": "https://bugzilla.suse.com/1279579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80804"
},
{
"cve": "CVE-2026-80805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80805"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: validate attr entry pointer before field access\n\nxfs_attr3_leaf_verify_entry() accesses lentry/rentry fields (namelen,\nvaluelen) before checking if the entry pointer itself is within bounds.\nIf nameidx is crafted to point near the end of the buffer, these field\naccesses can read out-of-bounds before the bounds check at\nname_end \u003e buf_end is performed.\n\nAdd explicit bounds checks for entry pointers before accessing their\nfields. Use offsetof() to check that the start of the flexible array\nmember (nameval/name) is within bounds, which ensures all preceding\nfields are safe to access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80805",
"url": "https://www.suse.com/security/cve/CVE-2026-80805"
},
{
"category": "external",
"summary": "SUSE Bug 1279580 for CVE-2026-80805",
"url": "https://bugzilla.suse.com/1279580"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80805"
},
{
"cve": "CVE-2026-80806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80806"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: don\u0027t enable DAX on new encrypted files\n\nCurrently, when a new encrypted regular file is created, the call to\next4_set_inode_flags(inode, init=true) in __ext4_new_inode() is made\nbefore EXT4_INODE_ENCRYPT is set. As a result, it can set S_DAX if the\nfilesystem is mounted with \"-o dax=always\".\n\nEXT4_INODE_ENCRYPT then actually gets set a bit later in\n__ext4_new_inode(), when it calls fscrypt_set_context() which calls\next4_set_context(). ext4_set_context() sets EXT4_INODE_ENCRYPT and\ncalls ext4_set_inode_flags(inode, init=false) to set S_ENCRYPTED too.\n\nThis was intended to clear S_DAX as well. However, this was broken by\ncommit 043546e46dc7 (\"fs/ext4: Only change S_DAX on inode load\"). This\ncauses data written to the file to bypass encryption, also causing\nxfstests failures such as generic/548 (when \"-o dax=always\" is used).\n\nFix this by simplifying the flow by making __ext4_new_inode() set\nEXT4_INODE_ENCRYPT earlier. This makes it take effect in\next4_set_inode_flags(inode, init=true), making S_DAX never be set.\n\nSimilarly, make EXT4_STATE_MAY_INLINE_DATA never be set in the first\nplace on new encrypted inodes. Then it doesn\u0027t need to be cleared.\n\nAs a result of these simplifications, ext4_set_context() no longer needs\nto change inode flags or state when \u0027handle != NULL\u0027. Remove that too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80806",
"url": "https://www.suse.com/security/cve/CVE-2026-80806"
},
{
"category": "external",
"summary": "SUSE Bug 1279589 for CVE-2026-80806",
"url": "https://bugzilla.suse.com/1279589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80806"
},
{
"cve": "CVE-2026-80807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80807"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: reject invalid block index in GC ioctl\n\nSyzbot reported list corruption caused by a double list_add_tail() call on\nbh-\u003eb_assoc_buffers within nilfs_lookup_dirty_data_buffers().\n\nAnalysis revealed that the root cause was the insertion of a page/folio\nwith a page index of ULONG_MAX into the page cache via the GC ioctl.\nfilemap_get_folios_tag(), called by nilfs_lookup_dirty_data_buffers(),\nrepeatedly detects a dirty folio with a page index of ULONG_MAX due to\nindex wrap-around, leading to duplicate processing of dirty buffers.\n\nAs a preparatory step, the GC ioctl loads the page/folio of the block to\nbe moved during GC and inserts it into the page cache based on information\nin the nilfs_vdesc structure passed as an argument. Normally, this does\nnot cause issues because the user-space GC library configures the\nnilfs_vdesc structure properly. However, since there is no range check on\nthe parameters determining the page index, a request with artificially\ncrafted parameters -- such as those generated by Syzbot -- can result in a\npage/folio being inserted with a page index of ULONG_MAX, triggering the\nabove problem.\n\nThis resolves the issue by checking the ranges of \u0027vd_offset\u0027 and\n\u0027vd_vblocknr\u0027 in the nilfs_vdesc structure that determine the page index,\nthereby preventing the invalid page/folio insertions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80807",
"url": "https://www.suse.com/security/cve/CVE-2026-80807"
},
{
"category": "external",
"summary": "SUSE Bug 1279591 for CVE-2026-80807",
"url": "https://bugzilla.suse.com/1279591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80807"
},
{
"cve": "CVE-2026-80808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80808"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: stop retrying saturated xattr cache entries\n\next4_xattr_block_set() retries when a cache entry selected for reuse\nhas a saturated reference count after taking the buffer lock. The retry\nreturns to the mbcache lookup without making that entry ineligible, so\nit can select the same unusable entry indefinitely. A task spinning\nthere can hold the parent directory\u0027s i_rwsem and leave concurrent\nrmdir callers blocked.\n\nNormally a reusable entry has a reference count below\nEXT4_XATTR_REFCOUNT_MAX because the count and MBE_REUSABLE_B are\nupdated under the same buffer lock. A corrupted filesystem can violate\nthat invariant. The syzbot reproducer reports allocator and xattr\ncorruption before triggering this retry loop.\n\nCheck the untrusted on-disk count before incrementing it, avoiding\noverflow, and clear MBE_REUSABLE_B when it is already saturated. The\nnext lookup then skips the entry that was just proven unusable. This\nmirrors the normal transition at EXT4_XATTR_REFCOUNT_MAX; the release\npath marks the entry reusable again on the exact 1024-to-1023\ntransition.\n\nUsing the same QEMU harness and guest parameters, current unpatched\nLinux hung in 6 of 8 420-second trials with the do_rmdir signature;\nrepresentative NMI backtraces caught the owner spinning in\next4_xattr_block_set(). The patched kernel completed 28 of 28 trials\nwithout a hung-task report; the final twelve trials exercised the\nreviewed overflow-safe form of the change. syzbot\u0027s patch testing also\ncompleted without reproducing the hang.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80808",
"url": "https://www.suse.com/security/cve/CVE-2026-80808"
},
{
"category": "external",
"summary": "SUSE Bug 1279795 for CVE-2026-80808",
"url": "https://bugzilla.suse.com/1279795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80808"
},
{
"cve": "CVE-2026-80809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix missing metadata reservation for large xattrs\n\n[BUG]\nlsetxattr() panics the kernel when setting a large xattr value on a\nfragmented filesystem where the file already has an external xattr\nblock.\n\n[CAUSE]\nocfs2_calc_xattr_set_need() never reserves metadata blocks for a new\nxattr value\u0027s extent tree when the file already has an external xattr\nblock. The not_found path leaves meta_add at zero, so meta_ac is NULL\nwhen ocfs2_xattr_extend_allocation() runs.\n\nA new value root has room for a single extent record. On a fragmented\nfilesystem, the allocator cannot satisfy the xattr value in one\ncontiguous run, so each non-contiguous run requires its own extent\nrecord. When the value root\u0027s extent list is full and meta_ac is NULL,\nocfs2_add_clusters_in_btree() returns RESTART_META, and\nocfs2_xattr_extend_allocation() hits BUG_ON(why == RESTART_META).\n\n[FIX]\nThe case where no xattr block exists yet already calls\nocfs2_extend_meta_needed(\u0026def_xv.xv.xr_list) to reserve value tree\nmetadata. Add the same reservation to the case where an xattr block\nalready exists, making the two cases consistent.\n\nReplace the BUG_ON with a -ENOSPC return so that if RESTART_META is\nreturned despite the reservation, the error propagates to userspace\ninstead of panicking the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80809",
"url": "https://www.suse.com/security/cve/CVE-2026-80809"
},
{
"category": "external",
"summary": "SUSE Bug 1279606 for CVE-2026-80809",
"url": "https://bugzilla.suse.com/1279606"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80809"
},
{
"cve": "CVE-2026-80810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80810"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()\n\nio_vec_fill_bvec() computes the folio size with a plain int 1:\n\n\tunsigned long folio_size = 1 \u003c\u003c imu-\u003efolio_shift;\n\nimu-\u003efolio_shift is unsigned int and comes from folio_shift() of the\nfolio backing the registered buffer, so it can be 32 or more on a 64 bit\nkernel. Shifting int 1 that far is undefined, and on x86 and arm64 the\ncount is taken modulo 32, so a shift of 34 yields 4 rather than 16G.\nEvery other folio_shift shift in this file already uses 1UL.\n\nThe result is that the segment estimate and the fill loop disagree.\nio_estimate_bvec_size() sizes the bvec array with the real shift:\n\n\tmax_segs += (iov[i].iov_len \u003e\u003e shift) + 2;\n\nso a 1M iovec on a 16G folio is charged 2 segments, while\nio_vec_fill_bvec() then walks the same iovec in folio_size chunks of 4\nbytes and writes res_bvec[bvec_idx] a quarter of a million times, past\nthe end of the array it was given. src_bvec is advanced once per\niteration as well, so imu-\u003ebvec is read past its end at the same time.\nvalidate_fixed_range() only checks that the range is inside the\nregistered buffer and does not bound the segment count.\n\nReaching it needs a folio with a shift of at least 32, which means a\ngigantic hugetlb page: 16G on arm64 with 64K pages, where\nCONT_PMD_SHIFT is 34 and hugetlb_add_hstate(CONT_PMD_SHIFT - PAGE_SHIFT)\nregisters that size, and likewise on powerpc. x86_64 tops out at 1G, so\na shift of 30, which still fits in int and is unaffected.\n\nUse 1UL, as the rest of the file does.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80810",
"url": "https://www.suse.com/security/cve/CVE-2026-80810"
},
{
"category": "external",
"summary": "SUSE Bug 1279789 for CVE-2026-80810",
"url": "https://bugzilla.suse.com/1279789"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80810"
},
{
"cve": "CVE-2026-80811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80811"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/cmd: fix iovec leak when the async cmd is not recycled\n\nAn io_async_cmd carries an iovec array in -\u003evec.iovec, allocated when the\nvec has to grow and kept across recycling through ctx-\u003ecmd_cache. On two\npaths nothing frees it and io_clean_op()\u0027s kfree(req-\u003easync_data) drops\nthe io_async_cmd without it.\n\nio_req_uring_cleanup() clears the async data flags only when\nio_alloc_cache_put() succeeds, and the cache holds IO_ALLOC_CACHE_MAX ==\n128 entries, so once it is full the put fails and the vec is left behind.\nAn NVMe passthrough workload gets there without doing anything unusual:\nnvme_uring_cmd_io() returns -EIOCBQUEUED, so the io_async_cmd stays\nattached for the lifetime of the command and the live object count tracks\nthe queue depth. Above 128 the puts start failing.\n\n-\u003ecleanup is the last chance to free an inherited vec, since\nio_req_uring_cleanup() returns early for an io-wq issued command and is\nnot called at all for one completed without ever being issued. But\nio_clean_op() calls -\u003ecleanup only if REQ_F_NEED_CLEANUP is set, and for\nuring_cmd that happens only where the vec has to grow, so a command\nreusing a large enough cached vec never sets it. io_rw_alloc_async() and\nio_msg_alloc_async() flag an inherited vec for exactly this reason;\nio_uring_cmd_prep() does not.\n\nFlag an inherited vec in io_uring_cmd_prep(), and free the vec when the\ncache put fails, as io_req_rw_cleanup() does.\n\nThe leak is invisible under KASAN, where io_alloc_cache_vec_kasan() frees\nthe vec unconditionally.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80811",
"url": "https://www.suse.com/security/cve/CVE-2026-80811"
},
{
"category": "external",
"summary": "SUSE Bug 1279712 for CVE-2026-80811",
"url": "https://bugzilla.suse.com/1279712"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80811"
},
{
"cve": "CVE-2026-80812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80812"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: dummy: Check card index validity at probe\n\nsnd_dummy_probe() blindly trusts that the given devptr-\u003eid value is\nwithin the proper card index range. It\u0027s OK for the devices the\ndriver itself creates at the module probe time, but if the device is\nbound manually via sysfs interface, this could be -1 as \"none\", and\nthis leads to OOB access for index[] and other parameters.\n\nAdd a sanity check for the card index and warn/correct it if it\u0027s a\nvalue out of the range.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80812",
"url": "https://www.suse.com/security/cve/CVE-2026-80812"
},
{
"category": "external",
"summary": "SUSE Bug 1279777 for CVE-2026-80812",
"url": "https://bugzilla.suse.com/1279777"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80812"
},
{
"cve": "CVE-2026-80813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80813"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()\n\nWhen a host issues an Identify command with CNS 07h (Active Namespace ID\nList for a specific I/O Command Set), nvmet_execute_identify_nslist() is\ncalled with match_css set. The command-set filter dereferences req-\u003ens,\nbut this handler never calls nvmet_req_find_ns(), so req-\u003ens is always\nNULL (nvmet_req_init() resets it to NULL). As soon as an enabled\nnamespace with an NSID greater than the requested value exists,\nreq-\u003ens-\u003ecsi dereferences a NULL pointer and oopses.\n\nBesides the crash, the comparison is logically wrong: to filter the list\nby command set it must test the command set of the namespace being\niterated, not a single fixed value. Use the loop variable ns-\u003ecsi.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80813",
"url": "https://www.suse.com/security/cve/CVE-2026-80813"
},
{
"category": "external",
"summary": "SUSE Bug 1279537 for CVE-2026-80813",
"url": "https://bugzilla.suse.com/1279537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80813"
},
{
"cve": "CVE-2026-80814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80814"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrndis_host: add overflow check in rndis_rx_fixup()\n\nAdd an overflow check to ensure that data_offset + data_len + 8 does not\nwrap, which would enable an OOB read of the USB data buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80814",
"url": "https://www.suse.com/security/cve/CVE-2026-80814"
},
{
"category": "external",
"summary": "SUSE Bug 1279705 for CVE-2026-80814",
"url": "https://bugzilla.suse.com/1279705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80814"
},
{
"cve": "CVE-2026-80815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80815"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: scarlett2: Use a private URB for the notification endpoint\n\nscarlett2_init_notify() used mixer-\u003eurb, which\nsnd_usb_mixer_status_create() allocates for the UAC2 status interrupt\nendpoint and mixer.c manages. On a device with that endpoint, the\n\"already in use\" check fires on the status URB and returns 0 for\nsuccess without doing anything. No notification URB is submitted, and\ncmd_done is left zeroed because it is initialised past that check and\nnowhere else. scarlett2_usb_init() then issues SCARLETT2_USB_INIT_1\nand wait_for_completion_timeout() would crash adding to the zeroed\nwait.head.\n\nUse a separate URB in scarlett2_data, as done for FCP, and initialise\ncmd_done in scarlett2_init_private(). mixer.c was also freeing the URB\nin snd_usb_mixer_free() and resubmitting it in\nsnd_usb_mixer_activate(), so scarlett2 must now do both: add\nscarlett2_cleanup_urb(), called from private_free and private_suspend,\nand a private_resume callback to re-establish the URB after resume.\nscarlett2_init_notify() is reached from there, and the URB kill path\nin scarlett2_notify() completes cmd_done, leaving a stale count that\nwould satisfy the next command\u0027s wait before the device ACKs. Use\nreinit_completion() to clear it.\n\nAlso free the URB if the transfer buffer allocation fails, and both if\nusb_submit_urb() fails. Move scarlett2_init_notify() up next to\nscarlett2_cleanup_urb() so scarlett2_init_private() can reference it\nwithout a forward declaration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80815",
"url": "https://www.suse.com/security/cve/CVE-2026-80815"
},
{
"category": "external",
"summary": "SUSE Bug 1279700 for CVE-2026-80815",
"url": "https://bugzilla.suse.com/1279700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80815"
},
{
"cve": "CVE-2026-80816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80816"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: FCP: Use a private URB for the notification endpoint\n\nfcp_init_notify() used mixer-\u003eurb, which snd_usb_mixer_status_create()\nallocates for the optional UAC2 status interrupt endpoint and mixer.c\nkills, resubmits and frees. On a device with that endpoint,\nfcp_init_notify()\u0027s \"already set up\" early return fires on the status\nURB and returns success without doing anything. No FCP notification\nURB is submitted, and cmd_done is left zeroed because it is\ninitialised past that early return and nowhere else. fcp_init() then\nissues init1_opcode and wait_for_completion_timeout() would crash\nadding to the zeroed wait.head. fcp_cleanup_urb() would also kill and\nfree mixer.c\u0027s status URB.\n\nUse a separate URB in fcp_data, and initialise cmd_done in\nfcp_init_private() where fcp_data is allocated. fcp_init_notify() is\nreached again after suspend via fcp_reinit(), and the URB kill path in\nfcp_notify() completes cmd_done, leaving a stale count that would\nsatisfy the next command\u0027s wait before the device ACKs. Use\nreinit_completion() to clear it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80816",
"url": "https://www.suse.com/security/cve/CVE-2026-80816"
},
{
"category": "external",
"summary": "SUSE Bug 1279703 for CVE-2026-80816",
"url": "https://bugzilla.suse.com/1279703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80816"
},
{
"cve": "CVE-2026-80817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80817"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages\n\niommufd_ioas_change_process() iterates every IOAS area while only\nholding every IOAS iova_rwsem, so it assumes every area has a non-NULL\npages pointer. That assumption can be false when it runs concurrently\nwith iopt_map_file_pages().\n\niopt_map_pages() executes in two phases. It first creates the area and\ninserts it into the interval tree under iova_rwsem, with area-\u003epages\nstill NULL. It then drops iova_rwsem and later fills area-\u003epages\nunder domains_rwsem. This leaves a window between area creation and\narea-\u003epages fill where a concurrent iommufd_ioas_change_process()\ncan observe the area and dereference a NULL area-\u003epages pointer,\nleading to a NULL pointer dereference:\n\nBUG: kernel NULL pointer dereference, address: 00000000000000c0\n#PF: supervisor read access in kernel mode\n#PF: error_code(0x0000) - not-present page\nPGD 4b655067 P4D 4b655067 PUD 0\nOops: Oops: 0000 [#1] SMP NOPTI\nCPU: 0 UID: 0 PID: 11841 Comm: syz.1.628 Not tainted 7.1.0 #3 PREEMPT(full)\nHardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nRIP: 0010:iommufd_ioas_change_process+0x419/0xd50 drivers/iommu/iommufd/ioas.c:538\nCode: 48 89 c3 48 85 c0 0f 84 cc 00 00 00 e8 10 f5 cb fd 48 8d 7b 68 e8 a7 b5 eb fd 48 8b 6b 68 48 8d bd c0 00 00 00 e8 17 b2 eb fd \u003c8b\u003e ad c0 00 00 00 bf 01 00 00 00 89 ee e8 85 ef cb fd 83 fd 01 74\nRSP: 0018:ffffc90015c17d28 EFLAGS: 00010246\nRAX: ffff8880186d5328 RBX: ffff88801d25e240 RCX: 0000000080000000\nRDX: 00000000000002d7 RSI: ffffffff83ba9e10 RDI: 00000000000000c0\nRBP: 0000000000000000 R08: ffffffff8e781eb8 R09: 0000000000000000\nR10: 00000000000000c0 R11: ffffffff83ba9e29 R12: ffff88802e216008\nR13: ffff88802e216000 R14: 0000000000000001 R15: 0000000000000000\nFS: 00007f4aea3f66c0(0000) GS:ffff8880b1fa1000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000000000c0 CR3: 000000004b75c000 CR4: 0000000000350ef0\nCall Trace:\n \u003cTASK\u003e\n iommufd_fops_ioctl+0x287/0x400 drivers/iommu/iommufd/main.c:533\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x120/0x170 fs/ioctl.c:583\n x64_sys_call+0x1092/0x1fb0 arch/x86/include/generated/asm/syscalls_64.h:17\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x10a/0x680 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f4aec1a82bd\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f4aea3f6018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f4aec436090 RCX: 00007f4aec1a82bd\nRDX: 0000200000000180 RSI: 0000000000003b92 RDI: 0000000000000003\nRBP: 00007f4aec250295 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007f4aec436128 R14: 00007f4aec436090 R15: 00007ffd04ef23e0\n \u003c/TASK\u003e\nModules linked in:\nCR2: 00000000000000c0\n---[ end trace 0000000000000000 ]---\nRIP: 0010:iommufd_ioas_change_process+0x419/0xd50 drivers/iommu/iommufd/ioas.c:538\nCode: 48 89 c3 48 85 c0 0f 84 cc 00 00 00 e8 10 f5 cb fd 48 8d 7b 68 e8 a7 b5 eb fd 48 8b 6b 68 48 8d bd c0 00 00 00 e8 17 b2 eb fd \u003c8b\u003e ad c0 00 00 00 bf 01 00 00 00 89 ee e8 85 ef cb fd 83 fd 01 74\nRSP: 0018:ffffc90015c17d28 EFLAGS: 00010246\nRAX: ffff8880186d5328 RBX: ffff88801d25e240 RCX: 0000000080000000\nRDX: 00000000000002d7 RSI: ffffffff83ba9e10 RDI: 00000000000000c0\nRBP: 0000000000000000 R08: ffffffff8e781eb8 R09: 0000000000000000\nR10: 00000000000000c0 R11: ffffffff83ba9e29 R12: ffff88802e216008\nR13: ffff88802e216000 R14: 0000000000000001 R15: 0000000000000000\nFS: 00007f4aea3f66c0(000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80817",
"url": "https://www.suse.com/security/cve/CVE-2026-80817"
},
{
"category": "external",
"summary": "SUSE Bug 1279465 for CVE-2026-80817",
"url": "https://bugzilla.suse.com/1279465"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80817"
},
{
"cve": "CVE-2026-80818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80818"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown\n\narm_smmu_impl_remove() is registered as a devres action in\narm_smmu_impl_probe(), before arm_smmu_init_queues() allocates\nsmmu-\u003ecmdq.q.base. On a devres unwind, whether a failed probe or an\nunbind, the queue is freed first and arm_smmu_impl_remove() then runs\ntegra241_cmdqv_remove_vintf(), whose VINTF deinit issues a CMD_SYNC on\nthe freed memory.\n\nObserved during testing with a QEMU hack that makes the VCMDQ fail to\nenable, so the impl reset fails and probe aborts into the devres unwind:\n\n platform NVDA200C:00: tegra241_cmdqv: VINTF0: VCMDQ0/LVCMDQ0: failed to enable, STATUS=0x00000000\n platform NVDA200C:00: tegra241_cmdqv: VINTF0: VCMDQ0/LVCMDQ0: GERRORN=0x0, GERROR=0x4, CONS=0x0\n platform NVDA200C:00: tegra241_cmdqv: VINTF0: VCMDQ0/LVCMDQ0: uncleared error detected, resetting\n arm-smmu-v3 arm-smmu-v3.0.auto: failed to reset impl\n arm-smmu-v3 arm-smmu-v3.0.auto: probe with driver arm-smmu-v3 failed with error -110\n Unable to handle kernel paging request at virtual address ffff8000891e0098\n ...\n Internal error: Oops: 0000000096000047 [#1] SMP\n ...\n Call trace:\n arm_smmu_cmdq_issue_cmdlist+0x320/0x6fc (P)\n tegra241_vcmdq_hw_deinit+0x98/0x168\n tegra241_vintf_hw_deinit+0x5c/0x1b0\n tegra241_cmdqv_remove_vintf+0x34/0xec\n tegra241_cmdqv_remove+0x40/0x9c\n arm_smmu_impl_remove+0x20/0x30\n devm_action_release+0x14/0x20\n devres_release_all+0xa8/0x110\n device_unbind_cleanup+0x18/0x84\n really_probe+0x1f0/0x29c\n\nDrop the VINTF deinit from tegra241_cmdqv_remove_vintf() so the unwind no\nlonger touches the freed queue. Quiesce the VINTFs earlier instead. Add a\ndevice_disable() impl op and run it from arm_smmu_disable_action() while\nthe CMDQ is still up. That handles a live unbind. A failed reset is already\nhandled because tegra241_vintf_hw_init() deinits the VINTF on its own error\npath. tegra241_cmdqv_remove_vintf() is also used by the iommufd viommu\ndestroy path, so quiesce there too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80818",
"url": "https://www.suse.com/security/cve/CVE-2026-80818"
},
{
"category": "external",
"summary": "SUSE Bug 1279695 for CVE-2026-80818",
"url": "https://bugzilla.suse.com/1279695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80818"
},
{
"cve": "CVE-2026-80819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80819"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept\n\nrfcomm_sock_recvmsg() completes a deferred setup by calling\nrfcomm_dlc_accept() without holding any RFCOMM lock:\n\n\tif (test_and_clear_bit(RFCOMM_DEFER_SETUP, \u0026d-\u003eflags)) {\n\t\trfcomm_dlc_accept(d);\n\t\treturn 0;\n\t}\n\nand rfcomm_dlc_accept() dereferences the session on its first line:\n\n\tstruct sock *sk = d-\u003esession-\u003esock-\u003esk;\n\nEvery other path that touches d-\u003esession runs under rfcomm_mutex:\nrfcomm_dlc_open(), rfcomm_dlc_close(), rfcomm_dlc_exists(),\nrfcomm_dlc_send_rpn(), and the RFCOMM thread through\nrfcomm_process_sessions(). rfcomm_connect_ind() is even documented as\n\"called under rfcomm_lock()\". This call site is the only one that skips\nit.\n\nThe RFCOMM_DEFER_SETUP bit looks like it serialises the accept against\nteardown, since __rfcomm_dlc_close() returns early when it wins the\ntest_and_clear. But rfcomm_recv_disc() forces the state first:\n\n\td-\u003estate = BT_CLOSED;\n\t__rfcomm_dlc_close(d, err);\n\nand the early return only covers BT_CONNECT, BT_CONFIG, BT_OPEN and\nBT_CONNECT2. With the state already BT_CLOSED that switch does not\nmatch, the bit is never consulted, and __rfcomm_dlc_close() falls\nthrough to rfcomm_dlc_unlink(), which sets d-\u003esession = NULL.\n\nSo a remote DISC on a deferred dlc clears the session while leaving\nRFCOMM_DEFER_SETUP set. The next recvmsg() then passes the\ntest_and_clear and dereferences a NULL session. No timing window is\nneeded: once the DISC has been processed, the dereference is\nunconditional.\n\nGive rfcomm_dlc_accept() the same shape as rfcomm_dlc_open() and\nrfcomm_dlc_close(): an exported wrapper that takes rfcomm_mutex and\nre-checks the session, around a __rfcomm_dlc_accept() that the two\nin-core callers, which already hold the mutex, keep using.\n\nReproduced on a KASAN + PROVE_LOCKING kernel with a BR/EDR peer emulated\nover /dev/vhci: the peer brings up an ACL link, opens L2CAP on the\nRFCOMM PSM, starts a session, opens a dlc on a channel bound with\nBT_DEFER_SETUP, and sends DISC after the socket is accepted. recv() on\nthe accepted socket then hits:\n\n Oops: general protection fault\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n RIP: 0010:rfcomm_dlc_accept+0x54/0x350\n Call Trace:\n rfcomm_sock_recvmsg+0x1cd/0x230\n sock_recvmsg+0x166/0x1c0\n __sys_recvfrom+0x20d/0x300\n\n0x10 is the offset of sock in struct rfcomm_session. With this patch the\nsame run completes with recv() returning 0 and no report, and lockdep\nstays quiet, confirming rfcomm_mutex is still taken before lock_sock on\nthis path as it is on the thread side.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80819",
"url": "https://www.suse.com/security/cve/CVE-2026-80819"
},
{
"category": "external",
"summary": "SUSE Bug 1279607 for CVE-2026-80819",
"url": "https://bugzilla.suse.com/1279607"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80819"
},
{
"cve": "CVE-2026-80821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80821"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: pci-epf: put CQ ref on create_cq mapping failure\n\nnvmet_pci_epf_create_cq() calls nvmet_cq_create(), which takes a\nreference on the controller and installs the completion queue. If the\nsubsequent PCI address-space mapping fails or returns a too-small partial\nmapping, the function jumps to err_internal / err_unmap_queue without\ncalling nvmet_cq_put(). The matching put in nvmet_pci_epf_delete_cq() is\ngated on NVMET_PCI_EPF_Q_LIVE, which is only set after the mapping\nsucceeds, so teardown never releases these references. A remote PCI host\nthat drives Create IO CQ commands with a failing PRP1/pci_addr therefore\nleaks the CQ and a controller reference on each attempt.\n\nDrop the CQ reference on the mapping-failure paths. The err_internal and\nerr_unmap_queue labels are only reachable after nvmet_cq_create() has\nsucceeded, so this pairs the create/put correctly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80821",
"url": "https://www.suse.com/security/cve/CVE-2026-80821"
},
{
"category": "external",
"summary": "SUSE Bug 1279635 for CVE-2026-80821",
"url": "https://bugzilla.suse.com/1279635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80821"
},
{
"cve": "CVE-2026-80822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80822"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()\n\nAdd a check to see if devm_kasprintf() is not NULL in\nmchp_ipc_get_cluster_aggr_irq(), returning -ENOMEM if the function\nfailed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80822",
"url": "https://www.suse.com/security/cve/CVE-2026-80822"
},
{
"category": "external",
"summary": "SUSE Bug 1279544 for CVE-2026-80822",
"url": "https://bugzilla.suse.com/1279544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80822"
},
{
"cve": "CVE-2026-80823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80823"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: st21nfca: validate ATR_REQ length against the received frame\n\nst21nfca_tm_recv_atr_req() checks that the received ATR_REQ frame is at\nleast ST21NFCA_ATR_REQ_MIN_SIZE and that the self-declared atr_req-\u003elength\nis at least sizeof(struct st21nfca_atr_req), but never checks that\natr_req-\u003elength does not exceed the actual received length (skb-\u003elen).\n\nst21nfca_tm_send_atr_res() then trusts the declared length:\n\n\tgb_len = atr_req-\u003elength - sizeof(struct st21nfca_atr_req);\n\t...\n\tmemcpy(atr_res-\u003egbi, atr_req-\u003egbi, gb_len);\n\nso an RF peer that sends a short frame but sets atr_req-\u003elength larger\nthan the frame makes gb_len exceed the general bytes actually present,\nand the memcpy reads out of bounds past the received skb. Those bytes are\nplaced in the ATR_RES and sent back to the peer (kernel-memory disclosure\nto a proximity attacker); a larger declared length is an out-of-bounds\nread (DoS).\n\nReject frames whose declared length exceeds the received length. The\nadjacent nfc_tm_activated() path in the same function already derives its\ngeneral-bytes length from skb-\u003elen rather than the declared field.\n\nFound by 0sec (https://0sec.ai) using automated source analysis; the\nmissing bound is evident from source. Compile-tested.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80823",
"url": "https://www.suse.com/security/cve/CVE-2026-80823"
},
{
"category": "external",
"summary": "SUSE Bug 1279608 for CVE-2026-80823",
"url": "https://bugzilla.suse.com/1279608"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80823"
},
{
"cve": "CVE-2026-80824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80824"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: usbfs: fix use-after-free of usb_device in usbdev_release()\n\nusbdev_release() drops its reference to the struct usb_device before\ndraining the list of completed async URBs, but that drain path reads back\nthrough the same object: free_async() calls dec_usb_memory_use_count()\nfor any URB whose buffer came from the usbfs mmap() region, and its first\nstatement is bus_to_hcd(ps-\u003edev-\u003ebus).\n\nAfter a disconnect the usbfs reference can be the last one, in which case\nusb_put_dev() frees the device and the subsequent loop reads offset 80 of\nfreed memory and uses the result as a struct usb_hcd *, which\nhcd_buffer_free_pages() then dereferences.\n\nThis is reachable by an unprivileged process that has read/write access to\na /dev/bus/usb node: mmap() the fd, submit one URB with a buffer inside the\nmapping, wait for the device to be unplugged, then munmap() and close().\nIt reproduces on every attempt rather than being a race, because a live\nMAP_SHARED vma holds a reference on the struct file, so usbdev_release()\ncannot run until the last vma is gone and the freeing branch of\ndec_usb_memory_use_count() is always taken.\n\n BUG: KASAN: slab-use-after-free in dec_usb_memory_use_count+0x3ae/0x410\n Read of size 8 at addr ffff8880122ee050 by task poc/769\n CPU: 1 UID: 1000 PID: 769 Comm: poc Tainted: G B 6.12.94 #3\n\n Call Trace:\n dec_usb_memory_use_count+0x3ae/0x410\n free_async+0x2aa/0x4f0\n usbdev_release+0x375/0x460\n __fput+0x3ea/0xb50\n __x64_sys_close+0x86/0x100\n\n Allocated by task 11:\n usb_alloc_dev+0x55/0xd90\n hub_event+0x2524/0x43d0\n\n Freed by task 769:\n kfree+0x121/0x360\n device_release+0xd2/0x280\n usb_put_dev+0x23/0x30\n usbdev_release+0x2d8/0x460\n\nRelease the device reference after the drain loop instead. Nothing between\nthe two points requires it to have been dropped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80824",
"url": "https://www.suse.com/security/cve/CVE-2026-80824"
},
{
"category": "external",
"summary": "SUSE Bug 1279625 for CVE-2026-80824",
"url": "https://bugzilla.suse.com/1279625"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80824"
},
{
"cve": "CVE-2026-80825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80825"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb\n\nmt7925_usb_sdio_tx_prepare_skb() pushes a TX descriptor and a USB\nheader onto every skb and assumes the headroom for them is already\nthere. That holds for locally generated traffic, where mac80211\nreserves hw-\u003eextra_tx_headroom, but forwarded frames are sent through\nieee80211_8023_xmit(), which does not reserve it. Bridge a wired\ninterface to an mt7925u AP and the first forwarded frame that arrives\nshort panics the kernel:\n\n skbuff: skb_under_panic: len:415 put:4 tail:0x19b end:0x640 dev:wlan1\n kernel BUG at net/core/skbuff.c:212!\n Call trace:\n skb_panic+0x58/0x60 (P)\n skb_push+0x58/0x60\n mt7925_usb_sdio_tx_prepare_skb+0xf8/0x1b8 [mt7925_common]\n mt76u_tx_queue_skb+0xa0/0x1f8 [mt76_usb]\n __mt76_tx_queue_skb+0x54/0xe8 [mt76]\n mt76_txq_schedule.part.0+0x204/0x478 [mt76]\n mt76_txq_schedule_all+0x50/0x80 [mt76]\n mt792x_tx_worker+0x68/0x100 [mt792x_lib]\n __mt76_worker_fn+0x84/0x150 [mt76]\n\nWhether a given setup hits it depends on how much headroom the ingress\nnetdev leaves in its rx skbs. Reproduced on a Raspberry Pi 5 bridging\nonboard ethernet to a Netgear A9000; originally reported on an MT7986\nrouter running OpenWrt. Nick Morrow\u0027s testing on a Pi 4 (bcmgenet),\nwhich leaves more headroom, helped narrow the trigger to the ingress\npath.\n\nThe same bug was fixed on mt7921 by commit 98c4d0abf5c4 (\"mt76:\nmt7921: don\u0027t assume adequate headroom for SDIO headers\"), but mt7925\nwas copied from mt7921 without the fix. Add the same guard here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80825",
"url": "https://www.suse.com/security/cve/CVE-2026-80825"
},
{
"category": "external",
"summary": "SUSE Bug 1279624 for CVE-2026-80825",
"url": "https://bugzilla.suse.com/1279624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80825"
},
{
"cve": "CVE-2026-80826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80826"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: c67x00: fix use-after-free in c67x00_add_iso_urb()\n\nWhen TD creation fails for the last packet of an isochronous URB,\nc67x00_add_iso_urb() gives the URB back before updating the endpoint\nscheduling state.\n\nc67x00_giveback_urb() frees the URB private data, and the completion\ncallback may release the final URB reference. The following accesses to\nurbp-\u003eep_data, urb-\u003einterval, and urbp-\u003ecnt can therefore use freed\nmemory.\n\nUpdate next_frame and cnt before giving back the failed final packet,\nmaking the giveback the last operation that uses the URB and its private\ndata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80826",
"url": "https://www.suse.com/security/cve/CVE-2026-80826"
},
{
"category": "external",
"summary": "SUSE Bug 1279699 for CVE-2026-80826",
"url": "https://bugzilla.suse.com/1279699"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80826"
},
{
"cve": "CVE-2026-80827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80827"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: option: fix slab OOB read in interrupt URB callback\n\nThe interrupt URB buffer is allocated in setup_port_interrupt_in() based\non the endpoint\u0027s wMaxPacketSize:\n\n buffer_size = usb_endpoint_maxp(epd);\n port-\u003einterrupt_in_buffer = kmalloc(buffer_size, GFP_KERNEL);\n\nWhen a USB device declares wMaxPacketSize = 8 on its interrupt IN\nendpoint, the buffer is allocated from kmalloc-8 cache (exactly\n8 bytes).\n\nIf the device sends a short packet (actual_length \u003c wMaxPacketSize),\nthe URB completes with status == 0 and the callback proceeds to read:\n\n data[sizeof(struct usb_ctrlrequest)]\n\nwhich evaluates to data[8], accessing 1 byte beyond the allocated 8-byte\nbuffer. This results in a slab out-of-bounds read.\n\nFix this by adding the missing bounds check: first verify that the\nactual length is large enough to contain the struct usb_ctrlrequest\nheader before accessing req_pkt-\u003ebRequestType and req_pkt-\u003ebRequest,\nand then verify that there is an additional byte for the modem signal\nstate before reading data[sizeof(struct usb_ctrlrequest)] inside the\nconditional. Use sizeof(*req_pkt) instead of sizeof(struct\nusb_ctrlrequest) for consistency.\n\n[ johan: use dev_err(); split signals declaration and initialisation ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80827",
"url": "https://www.suse.com/security/cve/CVE-2026-80827"
},
{
"category": "external",
"summary": "SUSE Bug 1279698 for CVE-2026-80827",
"url": "https://bugzilla.suse.com/1279698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80827"
},
{
"cve": "CVE-2026-80828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Complete cleanup after system-resume errors\n\nA failed system resume can leave the card unusable until reboot.\nusb_audio_resume() jumps to err_out when snd_usb_pcm_resume() or\nsnd_usb_mixer_resume() fails. The error path skips the out: block, which\nrestores D0 and decrements chip-\u003enum_suspended_intf.\n\nThe card stays in SNDRV_CTL_POWER_D3hot, so later control access blocks in\nsnd_power_ref_and_wait(). USB core logs an interface resume callback error.\nIt does not retry that callback, so a later callback cannot complete the\nskipped cleanup.\n\nusb_audio_suspend() increments num_suspended_intf before returning success.\nA system-resume callback must consume the system-suspend count even if a\ncomponent resume fails. Otherwise, the stranded count skews later suspend\nand resume cycles.\n\nDo not apply this cleanup to runtime-resume errors. Runtime PM can retry\n-EAGAIN or -EBUSY without another suspend callback. The count must continue\nto describe that suspended interface. Other runtime-resume errors latch\nruntime_error in the PM core and do not cause an immediate callback retry.\n\nBoth parts of the system-resume error path are longstanding. Commit\n88a8516a2128a (\"ALSA: usbaudio: implement USB autosuspend\") introduced\nerr_out past the D0 restore. Commit 862b2509d157c (\"ALSA: usb-audio: Fix\ninconsistent card PM state after resume\") later moved\nnum_suspended_intf-- into the out: block. The error path now skips both\noperations.\n\nNo third-party code is needed to reach the error path.\nsnd_usb_mixer_resume() ends in snd_usb_mixer_activate(), which returns the\nresult of usb_submit_urb() for devices that have a mixer status URB. Its\nmixer-\u003eprivate_resume hook can also fail through scarlett2_init_notify().\nsnd_usb_pcm_resume() issues a SET_CUR request to a UAC3 power domain. It\ncan return -EPIPE or -EIO when the device stalls the request.\n\nRoute a component error through out: only when system_suspend is nonzero.\nContinue to return runtime-resume errors through err_out. Later component\nresume stages remain skipped. The original error still reaches USB core.\nA later transfer can fail if the device did not recover.\n\nI reproduced the system-resume failure on an Audient iD14 MkI with an\nout-of-tree diagnostic mixer resume hook. An injected -EIO on the unpatched\ncore left control readers in uninterruptible sleep in\nsnd_power_ref_and_wait() until a reboot. With this patch, the same failure\nrestored control access. A second system suspend and resume also succeeded\nafter I disabled fault injection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80828",
"url": "https://www.suse.com/security/cve/CVE-2026-80828"
},
{
"category": "external",
"summary": "SUSE Bug 1279614 for CVE-2026-80828",
"url": "https://bugzilla.suse.com/1279614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80828"
},
{
"cve": "CVE-2026-80829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80829"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()\n\nsnd_usbmidi_novation_output() lays out a two-byte header at\ntransfer_buffer[0..1] and passes \u0026transfer_buffer[2] together with a\nlength of ep-\u003emax_transfer - 2 to snd_rawmidi_transmit():\n\n\tcount = snd_rawmidi_transmit(ep-\u003eports[0].substream,\n\t\t\t\t \u0026transfer_buffer[2],\n\t\t\t\t ep-\u003emax_transfer - 2);\n\nep-\u003emax_transfer comes from the output endpoint\u0027s wMaxPacketSize via\nusb_maxpacket(). A malformed or malicious device can advertise a bulk\nOUT endpoint with a wMaxPacketSize of 1 - the USB core only clamps this\nvalue downwards - so ep-\u003emax_transfer becomes 1 and the count argument\nbecomes -1.\n\nsnd_rawmidi_transmit() passes the negative count on to\n__snd_rawmidi_transmit_peek(), where \"if (count1 \u003e count) count1 = count\"\nleaves count1 negative; get_aligned_size() keeps it negative for a\nbyte-stream substream, so the following memcpy(buffer, ..., count1) runs\nwith a (size_t)-1 length and writes far past the transfer buffer, which\nwas allocated with usb_alloc_coherent(ep-\u003emax_transfer).\n\nThis is the same class of bug that was fixed for snd_usbmidi_akai_output()\nin commit 0970274613fb (\"ALSA: usb-audio: fix OOB write in\nsnd_usbmidi_akai_output()\"); the novation output routine was left\nunguarded. Bail out when the endpoint cannot hold the two-byte header\nplus at least one payload byte.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80829",
"url": "https://www.suse.com/security/cve/CVE-2026-80829"
},
{
"category": "external",
"summary": "SUSE Bug 1279485 for CVE-2026-80829",
"url": "https://bugzilla.suse.com/1279485"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80829"
},
{
"cve": "CVE-2026-80830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80830"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: Add lock to usb_wakeup_notification()\n\nAdd a spin lock to usb_wakeup notification to prevent a race condition\nwith dereferencing freed memory. This could be hit by the xHCI driver as\nit calls this function from an IRQ and could race with the\nhub_disconnect() function, which properly grabs this lock to protect the\nstate of the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80830",
"url": "https://www.suse.com/security/cve/CVE-2026-80830"
},
{
"category": "external",
"summary": "SUSE Bug 1279816 for CVE-2026-80830",
"url": "https://bugzilla.suse.com/1279816"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80830"
},
{
"cve": "CVE-2026-80831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80831"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: mxs-dcp - fix source scatterlist length access\n\nmxs_dcp_aes_block_crypt() uses sg_dma_len() without mapping the source\nscatterlist with dma_map_sg() first. Therefore, sg_dma_len() is invalid\nand could return zero or a stale DMA length, causing encryption and\ndecryption to process the wrong number of bytes when\nCONFIG_NEED_SG_DMA_LENGTH=y.\n\nUse the original scatterlist length instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80831",
"url": "https://www.suse.com/security/cve/CVE-2026-80831"
},
{
"category": "external",
"summary": "SUSE Bug 1279616 for CVE-2026-80831",
"url": "https://bugzilla.suse.com/1279616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80831"
},
{
"cve": "CVE-2026-80832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80832"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qce - fix CCM AAD buffer underallocation\n\nThe AAD buffer allocated in qce_aead_ccm_prepare_buf_assoclen()\ncan be smaller than the length later programmed into the DMA\nscatterlist.\n\nThe allocation size is currently calculated as:\n\n ALIGN(assoclen, 16) + MAX_CCM_ADATA_HEADER_LEN\n\nwhile the DMA length is set to:\n\n ALIGN(assoclen + adata_header_len, 16)\n\nSince ALIGN() does not distribute over addition, the allocation\ncan be smaller than the DMA length. For example, when\nassoclen = 32 and adata_header_len = 2:\n\n allocation = ALIGN(32, 16) + 6 = 38\n DMA length = ALIGN(32 + 2, 16) = 48\n\nAs a result, the QCE hardware can read beyond the allocated\nbuffer while computing the CBC-MAC over the associated data.\nThe extra bytes are folded into the authentication tag,\nresulting in an incorrect tag and causing CCM self-test\nfailures such as:\n\n alg: aead: ccm-aes-qce encryption test failed (wrong result)\n on test vector 8\n\nFix the allocation by adding the maximum possible AAD header\nlength before alignment:\n\n ALIGN(assoclen + MAX_CCM_ADATA_HEADER_LEN, 16)\n\nThis guarantees that the allocated buffer is large enough\nfor the fully padded AAD data for all supported header sizes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80832",
"url": "https://www.suse.com/security/cve/CVE-2026-80832"
},
{
"category": "external",
"summary": "SUSE Bug 1279592 for CVE-2026-80832",
"url": "https://bugzilla.suse.com/1279592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80832"
},
{
"cve": "CVE-2026-80833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80833"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ss - Remove crypto_rng interface\n\nSince the crypto_rng interface for hardware PRNGs is unused and is\nredundant with hwrng and the actual Linux RNG, it\u0027s being phased out.\nMost drivers for it were already removed. Go ahead and remove the\nsun8i-ss support which is one of the only remaining ones.\n\nAs usual for crypto_rng, this driver was also buggy: its -\u003egenerate()\nfunction had a use-after-free vulnerability due to using\nwait_for_completion_interruptible_timeout() without handling shutting\ndown the DMA operation if a signal is sent. Also, it had a buffer\noverread bug in the line \u0027memcpy(ctx-\u003eseed, d + dlen, ctx-\u003eslen);\u0027.\nThere\u0027s no point in fixing these bugs separately only to remove the code\nanyway, so this commit is marked with Fixes and Cc stable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80833",
"url": "https://www.suse.com/security/cve/CVE-2026-80833"
},
{
"category": "external",
"summary": "SUSE Bug 1279599 for CVE-2026-80833",
"url": "https://bugzilla.suse.com/1279599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80833"
},
{
"cve": "CVE-2026-80834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80834"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ce - Remove crypto_rng interface\n\nSince the crypto_rng interface for hardware PRNGs is unused and is\nredundant with hwrng and the actual Linux RNG, it\u0027s being phased out.\nMost drivers for it were already removed. Go ahead and remove the\nsun8i-ce support which is one of the only remaining ones.\n\nNote that the sun8i-ce support for hwrng remains in place. That is the\ninterface that actually matters.\n\nAs usual for crypto_rng, this driver was also buggy: its -\u003egenerate()\nfunction had a use-after-free vulnerability due to using\nwait_for_completion_interruptible_timeout() without handling shutting\ndown the DMA operation if a signal is sent. There\u0027s no point in fixing\nthis separately only to remove the code anyway, so this commit is marked\nwith Fixes and Cc stable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80834",
"url": "https://www.suse.com/security/cve/CVE-2026-80834"
},
{
"category": "external",
"summary": "SUSE Bug 1279596 for CVE-2026-80834",
"url": "https://bugzilla.suse.com/1279596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80834"
},
{
"cve": "CVE-2026-80835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80835"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - Remove crypto_rng interface\n\nqcom-rng.c exposes the same hardware through two completely separate\ninterfaces, crypto_rng and hwrng. However, the implementation of this\nis buggy because it permits generation operations from these interfaces\nto run concurrently with each other, accessing the same registers. That\nis, qcom_rng_generate() synchronizes with itself but not with\nqcom_hwrng_read(). This results in potential repetition of output from\nthe RNG, output of non-random values, etc.\n\nFortunately, there\u0027s actually no point in hardware RNG drivers\nimplementing the crypto_rng interface. It\u0027s not actually used by\nanything besides the \"rng\" algorithm type of AF_ALG, which in turn is\nnot actually used in practice. Other crypto_rng hardware drivers are\nlikewise being phased out, leaving just the hwrng support.\n\nThus, remove it to simplify the code and avoid conflict (and confusion)\nwith the hwrng interface which is the one that actually matters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80835",
"url": "https://www.suse.com/security/cve/CVE-2026-80835"
},
{
"category": "external",
"summary": "SUSE Bug 1279817 for CVE-2026-80835",
"url": "https://bugzilla.suse.com/1279817"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80835"
},
{
"cve": "CVE-2026-80836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80836"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: virtio - bound the akcipher result length\n\nvirtio_crypto_dataq_akcipher_callback() sets the result length from the\ndevice-reported response length without bounding it to the destination\nbuffer, which was allocated for the original request length.\nsg_copy_from_buffer() then reads that many bytes from the destination\nbuffer; a backend reporting a larger length over-reads adjacent kernel\nheap into the caller\u0027s scatterlist (an out-of-bounds read).\n\nClamp the reported length to the originally requested destination length.\nA conforming device reports no more than that, so valid results are\nunaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80836",
"url": "https://www.suse.com/security/cve/CVE-2026-80836"
},
{
"category": "external",
"summary": "SUSE Bug 1279819 for CVE-2026-80836",
"url": "https://bugzilla.suse.com/1279819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80836"
},
{
"cve": "CVE-2026-80837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80837"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: don\u0027t queue packet path object notifications\n\nAll file:line references below are against v7.2-rc4 (ac5b0e5651b1). The\ntrace was captured on 7.2.0-rc6-kasan72rc6 (075b74841bd0), where the same\nlines apply.\n\nnft_obj_notify() is exported and reached from the packet path. Its only\nin-tree caller is nft_quota_obj_eval() (net/netfilter/nft_quota.c:68),\nwhich notifies with GFP_ATOMIC while evaluating a rule for a transiting\npacket, holding no mutex.\n\nSince commit 67cc570edaa0 (\"netfilter: nf_tables: coalesce multiple\nnotifications into one skbuff\") that notification is no longer sent\nimmediately. __nft_obj_notify() queues it onto nft_net-\u003enotify_list via\nnft_notify_enqueue() (net/netfilter/nf_tables_api.c:1211), which is a bare\nlist_add_tail(). notify_list has no lock of its own\n(include/net/netfilter/nf_tables.h:1951), it is serialised by commit_mutex:\nthe six other enqueue sites all run inside a netlink transaction, and the\ndrain in nft_commit_notify() (net/netfilter/nf_tables_api.c:10746) does\nlist_del() + kfree_skb() from nf_tables_commit() with commit_mutex held.\n\nSending packets through a chain that references a depleted quota object\ntherefore races an unlocked list_add_tail() against list_del() +\nkfree_skb() on another CPU. The WRITE_ONCE(prev-\u003enext, new) in __list_add()\nthen stores through an sk_buff that has already been freed:\n\n BUG: KASAN: slab-use-after-free in __nft_obj_notify+0x2c5/0x2d0\n Write of size 8 at addr ff110001047183c0 by task poc/76\n CPU: 0 UID: 1000 PID: 76 Comm: poc Tainted: G W 7.2.0-rc6-kasan72rc6 #4\n Call Trace:\n \u003cIRQ\u003e\n __nft_obj_notify (include/linux/list.h:164 include/linux/list.h:191\n net/netfilter/nf_tables_api.c:1211\n net/netfilter/nf_tables_api.c:8743)\n nft_quota_obj_eval (net/netfilter/nft_quota.c:68)\n nft_do_chain_inet\n nf_hook_slow\n __ip_local_out\n ip_push_pending_frames\n udp_send_skb\n udp_sendmsg\n __x64_sys_sendto\n\n Allocated by task 77:\n __alloc_skb (net/core/skbuff.c:704)\n __nft_obj_notify (include/net/netlink.h:1055\n net/netfilter/nf_tables_api.c:8731)\n nft_quota_obj_eval (net/netfilter/nft_quota.c:68)\n nft_do_chain\n\n Freed by task 79:\n nf_tables_commit (include/linux/skbuff.h:1332\n net/netfilter/nf_tables_api.c:10759\n net/netfilter/nf_tables_api.c:11185)\n nfnetlink_rcv_batch (net/netfilter/nfnetlink.c:574)\n netlink_unicast\n netlink_sendmsg\n\n The buggy address belongs to the cache skbuff_head_cache of size 232\n\nQueueing from the packet path is wrong even leaving the race aside:\nnotify_list is only drained by nft_commit_notify() from nf_tables_commit()\n(:11185), so a notification enqueued outside a transaction is not sent\nuntil some later netlink batch commits, if one ever does.\n\nThe gfp argument that nft_obj_notify() still takes is a leftover of the\npre-67cc570edaa0 behaviour, where this path called nfnetlink_send()\ndirectly. Restore that: split the message construction out into\nnft_obj_notify_alloc() and let each caller decide what to do with the skb.\nnft_obj_notify(), the exported one reached from the packet path, sends it\nstraight away; nf_tables_obj_notify(), which runs under commit_mutex, keeps\nqueueing it, so transaction notifications are still coalesced.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80837",
"url": "https://www.suse.com/security/cve/CVE-2026-80837"
},
{
"category": "external",
"summary": "SUSE Bug 1279820 for CVE-2026-80837",
"url": "https://bugzilla.suse.com/1279820"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80837"
},
{
"cve": "CVE-2026-80838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: keep the last remote linked during FDB flush\n\nA non-nexthop FDB entry is expected to have at least one remote while it\nremains reachable through the FDB hash table. A filtered bulk flush\nviolates this invariant when every remote matches: It unlinks the last\nremote in vxlan_fdb_dst_destroy() and only afterwards tells vxlan_flush()\nto destroy the parent FDB entry.\n\nAn RCU reader can find the parent during this interval.\nfirst_remote_rcu() then applies list_entry_rcu() to the empty list head,\nproducing an invalid remote pointer that the receive learning path can\nread from and write to.\n\nWhen a matching remote is the sole remaining remote, leave it linked and\nask the caller to destroy the entire FDB entry. vxlan_fdb_destroy() keeps\nthe remote attached while sending the deletion notification and removing\nthe parent from the lookup structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80838",
"url": "https://www.suse.com/security/cve/CVE-2026-80838"
},
{
"category": "external",
"summary": "SUSE Bug 1279842 for CVE-2026-80838",
"url": "https://bugzilla.suse.com/1279842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80838"
},
{
"cve": "CVE-2026-80839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80839"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: reject unrepresentable multicast TVLV offsets\n\nThe network and transport header fields in struct sk_buff are 16-bit\noffsets from skb-\u003ehead, and U16_MAX is reserved as the unset transport\nheader value. batadv_tvlv_call_handler() sets both fields from a received\nmulticast TVLV without checking whether the TVLV end is representable.\n\nIf the end offset exceeds the field\u0027s range, skb_set_transport_header()\ntruncates it so that the transport header precedes the network header.\nThe negative difference is then returned by skb_network_header_len() as\na large u32. batadv_mcast_forw_packet() consequently accepts an oversized\nmulticast tracker and accesses memory beyond the skb data.\n\nAdd skb_set_transport_header_careful(), an offset-aware counterpart to\nskb_reset_transport_header_careful(), which validates the final\nhead-relative offset before assigning it. Use the new helper in\nbatadv_tvlv_call_handler() and reject unrepresentable TVLVs before\nsetting the network header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80839",
"url": "https://www.suse.com/security/cve/CVE-2026-80839"
},
{
"category": "external",
"summary": "SUSE Bug 1279874 for CVE-2026-80839",
"url": "https://bugzilla.suse.com/1279874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80839"
},
{
"cve": "CVE-2026-80840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80840"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: seg6: clear IPv4 control block on IPIP decapsulation\n\nEnd.DX4 and End.DT4 decapsulate an IPv4 packet through\ndecap_and_validate() and send it directly to IPv4 routing. The inner\npacket therefore bypasses ip_rcv_core(), which normally clears IPCB\nbefore IPv4 interprets skb-\u003ecb.\n\nThe skb instead retains IP6CB data from the outer packet. IP6CB and\nIPCB use the same skb-\u003ecb storage, so IP6CB(skb)-\u003elastopt overlaps\nIPCB(skb)-\u003eopt.optlen and srr, while IP6CB(skb)-\u003enhoff overlaps rr and\nts.\n\nThe sender can make the stale optlen byte nonzero with a valid outer\nextension-header chain. The reproducers put an eight-byte Destination\nOptions header immediately after the 40-byte IPv6 header and before the\nSegment Routing Header. ipv6_destopt_rcv() records the sender-controlled\nDestination Options offset in both lastopt and nhoff, setting them to\n40. On the reproduced little-endian x86-64 kernel, IPv4 therefore sees\noptlen = 40 and rr = 40.\n\nBoth tcp_v4_save_options() and __ip_options_echo() skip option copying\nwhen optlen is zero. Here optlen is 40, so the TCP SYN path allocates\nroom for 40 bytes of option data and calls __ip_options_echo(). The\nstale rr value makes that function read inner packet byte 41 as the\nRecord Route option length. The reproducers set that sender-controlled\nbyte to 255, so __ip_options_echo() copies 255 bytes into the 40-byte\noption-data area.\n\nSeparate End.DX4 and End.DT4 reproducers on the unpatched v7.2-rc5\nkernel both produced:\n\n BUG: KASAN: slab-out-of-bounds in __ip_options_echo()\n Write of size 255\n\nThe relevant End.DX4 call path is:\n\n __ip_options_echo\n tcp_v4_route_req\n tcp_conn_request\n tcp_v4_conn_request\n tcp_rcv_state_process\n tcp_v4_do_rcv\n tcp_v4_rcv\n ip_protocol_deliver_rcu\n ip_local_deliver_finish\n ip_local_deliver\n input_action_end_dx4_finish\n input_action_end_dx4\n\nThe relevant End.DT4 call path is:\n\n __ip_options_echo\n tcp_v4_route_req\n tcp_conn_request\n tcp_v4_conn_request\n tcp_rcv_state_process\n tcp_v4_do_rcv\n tcp_v4_rcv\n ip_protocol_deliver_rcu\n ip_local_deliver_finish\n ip_local_deliver\n input_action_end_dt4\n\ntcp_v4_save_options() is inlined into the tcp_v4_route_req() path, so\nit does not appear as a separate frame.\n\nWhen decap_and_validate() handles IPPROTO_IPIP, save the ingress\ninterface from IP6CB, clear IPCB, and restore the saved value. Doing\nthis in the common decapsulation path covers End.DX4, End.DT4, and\nEnd.DT46\u0027s IPv4 arm.\n\nUse IP6CB(skb)-\u003eiif rather than skb-\u003eskb_iif. These actions run after\nl3mdev processing, which can replace skb_iif with the L3 master;\nIP6CB iif still records the receiving interface set at IPv6 ingress.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80840",
"url": "https://www.suse.com/security/cve/CVE-2026-80840"
},
{
"category": "external",
"summary": "SUSE Bug 1279875 for CVE-2026-80840",
"url": "https://bugzilla.suse.com/1279875"
},
{
"category": "external",
"summary": "SUSE Bug 1279876 for CVE-2026-80840",
"url": "https://bugzilla.suse.com/1279876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80840"
},
{
"cve": "CVE-2026-80841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80841"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/packet: defer vmalloc TX_RING free until skbs finish\n\nAF_PACKET TX_RING skbs keep a raw pointer to their ring frame. The skb\npage references preserve page-backed ring blocks after pg_vec is freed,\nbut they do not preserve a vmalloc mapping.\n\ntpacket_destruct_skb() currently drops the pending reference before\nwriting the timestamp and TP_STATUS_AVAILABLE to the frame. Move the\ndecrement after those stores. The smp_wmb() in __packet_set_status()\norders the frame stores before the decrement.\n\nAlso recheck pending TX frames under pg_vec_lock before non-closing\nring replacement, so a racing send cannot add a pending skb between\nthe initial check and the ring swap.\n\nRing allocation can produce a mixture of page-backed and vmalloc-backed\nblocks. Allocate deferred-work storage during TX ring setup when the\nfirst vmalloc-backed block is encountered, and keep its pointer in the\npg_vec allocation header. If allocation fails, return -ENOMEM from ring\nsetup. On socket close, a non-NULL pointer identifies a vmalloc-backed\nvector without a scan. If TX skbs remain, defer the whole vector to\nsystem_long_wq.\n\nAfter pg_vec is detached, a late destructor can skip the pending\ndecrement. Use socket write-memory accounting as the deferred lifetime\ngate instead: an skb remains charged through its final sock_wfree(),\nafter all ring-frame accesses. The delayed work retains a socket\nreference and reschedules itself until no TX skbs remain.\n\nMove pending_refcnt release to packet_sock_destruct() so late skb\ndestructors and deferred cleanup can safely use it after\npacket_release(). Page-backed teardown remains synchronous, and no lock\nis added to the TX completion hot path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80841",
"url": "https://www.suse.com/security/cve/CVE-2026-80841"
},
{
"category": "external",
"summary": "SUSE Bug 1279835 for CVE-2026-80841",
"url": "https://bugzilla.suse.com/1279835"
},
{
"category": "external",
"summary": "SUSE Bug 1279836 for CVE-2026-80841",
"url": "https://bugzilla.suse.com/1279836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80841"
},
{
"cve": "CVE-2026-80842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80842"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: fix use-after-free of a master VLAN\u0027s multicast context\n\nbr_multicast_toggle_one_vlan() clears BR_VLFLAG_MCAST_ENABLED under\nbr-\u003emulticast_lock before stopping a VLAN\u0027s multicast context. That is\nthe teardown handshake: lockless readers gate on the flag through\nbr_multicast_ctx_should_use() -\u003e br_multicast_ctx_vlan_disabled(), so\nonce it is cleared under the lock no reader can arm the context again.\n\nFor a master VLAN the handshake never runs. __vlan_del() clears\nBRIDGE_VLAN_INFO_BRENTRY before calling br_vlan_put_master(), so\nbr_multicast_toggle_one_vlan(masterv, false) returns early on\n!br_vlan_is_brentry(vlan): the flag stays set and br-\u003emulticast_lock is\nnever taken. br_vlan_put_master() then drains the context in\nbr_multicast_ctx_deinit() and frees the VLAN through call_rcu(), while a\nreader still inside rcu_read_lock() sees the context as enabled and\nre-arms it. The port and port-VLAN branch of the function has no\nbr_vlan_is_brentry() test and flips the flag under br-\u003emulticast_lock,\nso it is not affected.\n\nThe reader is the bridge transmit path. For a master VLAN\nbr_multicast_rcv() selects brmctx = \u0026vlan-\u003ebr_mcast_ctx with\npmctx = NULL, so IGMP sent to the bridge device re-arms the context\u0027s\ntimers after br_multicast_ctx_deinit() has already stopped them.\n\n BUG: KASAN: slab-use-after-free in detach_if_pending+0x412/0x4a0\n Write of size 8 at addr ffff88810ac39918 by task brmc/601\n __mod_timer+0x51a/0xc50\n br_multicast_host_join+0x25b/0x390\n __br_multicast_add_group+0x468/0x530\n br_ip4_multicast_add_group+0x1a0/0x260\n br_multicast_rcv+0x2cda/0x61e0\n br_dev_xmit+0x6c4/0x1540\n Allocated by task 610:\n br_vlan_add+0x111/0xb40\n br_vlan_info+0x370/0x3e0\n Freed by task 0:\n kfree+0x1a7/0x4f0\n rcu_core+0x7dc/0x10a0\n\nOnly test br_vlan_is_brentry() when enabling, like the\nbr_multicast_ctx_vlan_global_disabled() test next to it. Disabling then\nalways clears BR_VLFLAG_MCAST_ENABLED under br-\u003emulticast_lock before\nbr_multicast_ctx_deinit() drains the context.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80842",
"url": "https://www.suse.com/security/cve/CVE-2026-80842"
},
{
"category": "external",
"summary": "SUSE Bug 1279888 for CVE-2026-80842",
"url": "https://bugzilla.suse.com/1279888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80842"
},
{
"cve": "CVE-2026-80843",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80843"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: fix xfrm_state_construct() auth-trunc leak\n\nattach_auth_trunc() can allocate x-\u003eaalg while leaving\nx-\u003eprops.aalgo at zero when the selected auth algorithm has no\nsadb_alg_id. One real case is cmac(aes).\n\nxfrm_state_construct() then treats !x-\u003eprops.aalgo as \"no auth\nalgorithm attached yet\" and calls attach_auth(). That overwrites\nx-\u003eaalg and loses the first allocation. Any later failure or teardown\nonly frees the replacement pointer.\n\nCheck whether x-\u003eaalg is already attached instead of inferring that\nstate from x-\u003eprops.aalgo.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80843",
"url": "https://www.suse.com/security/cve/CVE-2026-80843"
},
{
"category": "external",
"summary": "SUSE Bug 1279775 for CVE-2026-80843",
"url": "https://bugzilla.suse.com/1279775"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80843"
},
{
"cve": "CVE-2026-80844",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80844"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: ah6: validate routing header segments_left\n\nAH6 rearranges routing-header addresses before computing or verifying the\nICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than\nthe number of addresses described by the routing header\u0027s hdrlen field.\n\nThat assumption does not hold for raw IPv6 HDRINCL packets. A packet with\nhdrlen equal to 2 describes one address, but can carry an arbitrary\nsegments_left value. With segments_left equal to 255, the function moves\nits address pointer 4,064 bytes backwards and passes a 4,064-byte length to\nmemmove(), resulting in an out-of-bounds access.\n\nValidate the invariant locally before modifying the routing header or\nperforming any address-pointer arithmetic, and propagate malformed-header\nerrors to the existing AH6 input and output error paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80844",
"url": "https://www.suse.com/security/cve/CVE-2026-80844"
},
{
"category": "external",
"summary": "SUSE Bug 1279786 for CVE-2026-80844",
"url": "https://bugzilla.suse.com/1279786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80844"
},
{
"cve": "CVE-2026-80845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80845"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: avoid lock inversion in nat keepalive work\n\nnat_keepalive_work() walks the state table while xfrm_state_walk()\nholds net-\u003exfrm.xfrm_state_lock. Its callback then acquires x-\u003elock,\nwhich conflicts with the delete path taking the same locks in reverse\norder via xfrm_state_delete() and __xfrm_state_delete(). This creates\nan AB-BA deadlock that is reported by lockdep when a NAT keepalive\nworker races with SA deletion.\n\nFix this by splitting the keepalive walk into two phases. First,\ncollect the candidate states while the walk holds xfrm_state_lock and\ntake a reference on each state. Then, after the walk completes, process\neach collected state and acquire x-\u003elock without nesting it under\nxfrm_state_lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80845",
"url": "https://www.suse.com/security/cve/CVE-2026-80845"
},
{
"category": "external",
"summary": "SUSE Bug 1279787 for CVE-2026-80845",
"url": "https://bugzilla.suse.com/1279787"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80845"
},
{
"cve": "CVE-2026-80846",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80846"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: drop ESP-in-TCP packets with no ingress device\n\nESP-in-TCP receives records through the TCP strparser. handle_esp()\nrestores skb-\u003edev from the saved skb_iif before passing the packet into\nthe XFRM input path.\n\nQueued TCP data can be processed after the original ingress device has\nbeen removed, for example during veth or net namespace teardown. In that\ncase dev_get_by_index_rcu() returns NULL. The XFRM IPv4 and IPv6 input\npaths both expect skb-\u003edev to be valid while building the route lookup,\nso queued ESP-in-TCP data can dereference a NULL device.\n\nDrop the packet if the saved ingress device can no longer be resolved.\nSuch a packet can no longer be routed through the normal XFRM receive\npath, and this preserves the existing behaviour for packets whose ingress\ndevice still exists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80846",
"url": "https://www.suse.com/security/cve/CVE-2026-80846"
},
{
"category": "external",
"summary": "SUSE Bug 1279878 for CVE-2026-80846",
"url": "https://bugzilla.suse.com/1279878"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80846"
},
{
"cve": "CVE-2026-80847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80847"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: clamp route advmss to TCP_MIN_MSS\n\ntcp_select_initial_window() assumes that callers never pass an MSS\nsmaller than 1, but route-derived advmss values can violate that\nassumption.\n\nA too-small explicit RTAX_ADVMSS is one way to get there, but it is not\nthe only one. The same divide-by-zero can also be reached through the\n\"default advmss\" path when RTAX_ADVMSS is left at 0 and the effective\nadvmss is later driven down by route MTU and min_adv_mss.\n\nIntroduce a tcp_dst_advmss() helper that clamps route advmss to\nTCP_MIN_MSS before TCP consumes it, and use it in the TCP paths that\nderive advmss from dst metrics. This keeps the effective MSS from\ndropping to zero before tcp_select_initial_window() rounds the receive\nwindow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80847",
"url": "https://www.suse.com/security/cve/CVE-2026-80847"
},
{
"category": "external",
"summary": "SUSE Bug 1279850 for CVE-2026-80847",
"url": "https://bugzilla.suse.com/1279850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80847"
},
{
"cve": "CVE-2026-80848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80848"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: espintcp: fix UAF during close\n\nZDI reported and analyzed a race condition during close for espintcp\nsockets:\n\n espintcp_close() frees emsg-\u003eskb via kfree_skb() without holding\n any socket lock. Concurrently, the xfrm_trans_reinject work queue\n invokes esp_output_tcp_finish() -\u003e espintcp_push_skb() -\u003e\n espintcp_push_msgs() -\u003e skb_send_sock_locked(), which reads the\n same skb as a data source.\n\nFix this by adding a synchronize_rcu() call after resetting sk_prot,\nsince esp_output_tcp_finish() runs under RCU and won\u0027t use a socket\nwith sk_prot == \u0026tcp_prot. Simply taking the socket lock in\nespintcp_close() could lead to leaks, if esp_output_tcp_finish()\nre-adds an skb in the slot we just freed. After this, the existing\nbarrier() is no longer needed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80848",
"url": "https://www.suse.com/security/cve/CVE-2026-80848"
},
{
"category": "external",
"summary": "SUSE Bug 1279581 for CVE-2026-80848",
"url": "https://bugzilla.suse.com/1279581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80848"
},
{
"cve": "CVE-2026-80849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/tcp-ao: fix use-after-free of current_key on reconnect to another peer\n\ntcp_inbound_ao_hash() is called before bh_lock_sock_nested() is taken,\nwith only rcu_read_lock() held. On the fast path for established\nsockets, if the rnext_keyid sent by the peer differs from\ncurrent_key-\u003esndid, the key the peer asked for is looked up and stored\nin current_key. The lookup is inside the RCU read side, but current_key\noutlives it.\n\nWhen the socket is disconnected and connect() is called again for\nanother peer, tcp_ao_connect_init() unlinks every key that does not\nmatch the new peer and frees it with call_rcu(). If current_key points\nat such a key, it is cleared to NULL.\n\nThe fast path reads sk_state only once on entry, so a softirq that got\ninto it while the socket was still established can update current_key\nafter that loop has already run. The update is inside the RCU read side,\nso it comes before the call_rcu() callback, and once the callback frees\nthe key, current_key is left pointing at freed memory.\n\nThe next transmission picks that pointer up in tcp_get_current_key().\ntcp_ao_transmit_skb() then reads the traffic key from the freed object,\nwhich is the use-after-free.\n\nWait for one grace period before unlinking, and only if a key is going\nto be removed. By the time tcp_connect() runs the socket is already in\nTCP_SYN_SENT, and TCP_AO_ESTABLISHED does not contain TCPF_SYN_SENT, so\na softirq entering after the wait cannot reach the fast path, and the\nones already in it have finished. The existing NULL handling in the loop\nis then enough.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80849",
"url": "https://www.suse.com/security/cve/CVE-2026-80849"
},
{
"category": "external",
"summary": "SUSE Bug 1279582 for CVE-2026-80849",
"url": "https://bugzilla.suse.com/1279582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80849"
},
{
"cve": "CVE-2026-80850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: fix AO info use-after-free in tcp_ao_connect_init()\n\ntcp_v4_connect() adds a SYN-SENT socket to the ehash before calling\ntcp_connect(). If TCP-AO is configured, tcp_connect() first verifies that\na key matches the peer and the bound device\u0027s current L3 master.\ntcp_ao_connect_init() later resolves the L3 master again and removes keys\nwhich do not match it.\n\nThe socket lock does not stabilize the bound device\u0027s VRF membership.\nDetaching the device from its VRF between the initial validation and the\nL3-master calculation in tcp_ao_connect_init() can therefore make the\nvalidation succeed while initialization observes the default L3 domain and\nremoves the only key. The subsequent AO lookup then fails, so the no-key\npath clears tp-\u003eao_info and frees it directly.\n\nThe receive path can find the socket in the ehash and load tp-\u003eao_info\nunder RCU before acquiring the socket lock. A reader which loaded the old\npointer can thus continue into tcp_inbound_ao_hash() after the direct free.\n\nThe issue was found during a static audit of TCP-AO object lifetime. An\nunprivileged reproducer in self-created user and network namespaces raced\nconnect() with detaching a veth from its VRF while sending TCP-AO segments.\nIt triggered the same KASAN report on two fresh boots:\n\n BUG: KASAN: slab-use-after-free in tcp_inbound_ao_hash+0x585/0x19f0\n Write of size 8 at addr ffff88800bf88128 by task tcp_ao_vrf_race/232\n\n Call Trace:\n tcp_inbound_ao_hash+0x585/0x19f0\n tcp_inbound_hash+0x677/0xa80\n tcp_v4_rcv+0x1c3e/0x3ab0\n\n Allocated by task 235:\n tcp_ao_alloc_info+0x43/0xf0\n tcp_ao_add_cmd+0xdf7/0x13b0\n do_tcp_setsockopt+0x168c/0x2640\n\n Freed by task 235:\n kfree+0x1b8/0x550\n tcp_connect+0x252/0x4f00\n tcp_v4_connect+0x1114/0x1720\n\nThe bad address is 40 bytes inside the freed 128-byte object, matching the\ntcp_ao_info counters.key_not_found field. The two runs used 1000 attempts\neach, reached the no-key path 366 and 411 times, and produced one and two\nKASAN reports respectively. With this change, the same reproducer reached\nthe no-key path 366 times in 1000 attempts without a KASAN report or oops.\n\nUse tcp_ao_destroy_sock() for the no-key path. It unpublishes the AO info,\nupdates the socket memory and static-key accounting, and defers the free\nuntil after an RCU grace period.\n\nAlso drop the WARN_ON_ONCE() and its stale comment. The VRF detach race\nmakes the no-key state reachable during normal operation, so it is a\nhandled condition rather than an impossible assertion. On panic_on_warn\nkernels the WARN would turn this handled race into a kernel panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80850",
"url": "https://www.suse.com/security/cve/CVE-2026-80850"
},
{
"category": "external",
"summary": "SUSE Bug 1279577 for CVE-2026-80850",
"url": "https://bugzilla.suse.com/1279577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80850"
},
{
"cve": "CVE-2026-80851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80851"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: serialize PDP context updates\n\nPDP contexts can be deleted through GTP_CMD_DELPDP or while the GTP\nnetwork device is being unregistered. The latter is serialized by RTNL,\nbut the generic-netlink delete path only holds RCU.\n\nRunning both paths concurrently can therefore make both paths delete the\nsame PDP context. The issue was found through static analysis and\nreproduced on a KASAN-enabled kernel by a simple two-thread program\nracing GTP_CMD_DELPDP against RTM_DELLINK:\n\n Oops: general protection fault, probably for non-canonical address\n KASAN: maybe wild-memory-access in range\n [0xdead000000000120-0xdead000000000127]\n RIP: gtp_genl_del_pdp+0x1c1/0x420 [gtp]\n RBP: dead000000000122\n\nThe second deletion dereferenced the poisoned hlist pprev pointer.\n\nSerialize gtp_pdp_add(), gtp_genl_del_pdp(), and gtp_dellink() with a\nshared mutex. Keep the mutex held until the final use of a PDP context in\nthe NEWPDP path, and keep the RCU read-side section around the complete\nPDP context use in the DELPDP path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80851",
"url": "https://www.suse.com/security/cve/CVE-2026-80851"
},
{
"category": "external",
"summary": "SUSE Bug 1279569 for CVE-2026-80851",
"url": "https://bugzilla.suse.com/1279569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80851"
},
{
"cve": "CVE-2026-80852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80852"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: device: fix out-of-bounds write in tls_append_frag()\n\nFound with syzkaller and a local syzbot instance running on top of a\nnetdevsim TLS offload emulation; tls_device.c is otherwise only reachable\non a machine with a NIC that implements the offload.\n\ntls_push_data() only checks whether the open record still has room for\nanother frag at the bottom of its loop, and the MSG_MORE early break\nskips that check. The record survives to the next syscall with the frag\ncount it already had, and tls_append_frag() does not check either, so\nwith TLS_TX_ZEROCOPY_RO every splice(SPLICE_F_MORE) of a byte or two adds\na non-coalescing pipe page and num_frags walks off the end of\ntls_record_info.frags[MAX_SKB_FRAGS]. Once the record is pushed,\ntls_push_record() runs the same index over sg_tx_data[MAX_SKB_FRAGS] and\nthe sg_set_page() writes land on the destruct_work that follows it, which\nthe workqueue then calls.\n\nThe byte limit is fine because copy drops to 0 and the loop falls through\nto the same check; the frag count has no such feedback.\n\nPush the record rather than keep a full one open, which is what a plain\nTCP socket does - tcp_sendmsg_locked() uses tcp_mark_push() and\nnew_segment in both the copy and the MSG_SPLICE_PAGES paths, and tls_sw\nalready sets full_record when the sk_msg ring fills up, MSG_MORE or not.\n\n BUG: KASAN: slab-out-of-bounds in tls_append_frag ( net/tls/tls_device.c:269)\n Write of size 8 at addr ffff8881104d1530 by task tls_oob/450\n\n CPU: 2 UID: 0 PID: 450 Comm: tls_oob Not tainted 7.2.0-rc7+ #329 PREEMPT\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)\n print_report (mm/kasan/report.c:378 mm/kasan/report.c:482)\n kasan_report (mm/kasan/report.c:595)\n tls_append_frag (net/tls/tls_device.c:269)\n tls_push_data (net/tls/tls_device.c:518)\n tls_device_sendmsg (net/tls/tls_device.c:583)\n inet_sendmsg (net/ipv4/af_inet.c:865)\n sock_sendmsg (net/socket.c:775 net/socket.c:790 net/socket.c:813)\n splice_to_socket (fs/splice.c:884)\n do_splice (fs/splice.c:936 fs/splice.c:1349)\n __do_splice (fs/splice.c:1431)\n __x64_sys_splice (fs/splice.c:1634 fs/splice.c:1616)\n do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n \u003c/TASK\u003e\n\nand, once the record is pushed:\n\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:300:24\n index 18 is out of range for type \u0027skb_frag_t [17]\u0027\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:301:41\n index 18 is out of range for type \u0027scatterlist [17]\u0027\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:302:39\n index 18 is out of range for type \u0027scatterlist [17]\u0027\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:307:38\n index 26 is out of range for type \u0027scatterlist [17]\u0027\n\n kernel tried to execute NX-protected page - exploit attempt? (uid: 0)\n BUG: unable to handle page fault for address: ffffea000411a680\n #PF: supervisor instruction fetch in kernel mode\n #PF: error_code(0x0011) - permissions violation\n Oops: Oops: 0011 [#1] SMP KASAN PTI\n Workqueue: ktls_device_destruct 0xffffea000411a680\n RIP: 0010:0xffffea000411a680\n Call Trace:\n \u003cTASK\u003e\n worker_thread (kernel/workqueue.c:3405 kernel/workqueue.c:3486)\n kthread (kernel/kthread.c:436)\n ret_from_fork (arch/x86/kernel/process.c:158)\n ret_from_fork_asm (arch/x86/entry/entry_64.S:245)\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80852",
"url": "https://www.suse.com/security/cve/CVE-2026-80852"
},
{
"category": "external",
"summary": "SUSE Bug 1279532 for CVE-2026-80852",
"url": "https://bugzilla.suse.com/1279532"
},
{
"category": "external",
"summary": "SUSE Bug 1279534 for CVE-2026-80852",
"url": "https://bugzilla.suse.com/1279534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80852"
},
{
"cve": "CVE-2026-80853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80853"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts\n\nWhen {de,en}crypting memory of an SEV or SEV-ES guest on an SNP-enabled\nhost via a temporary buffer, allocate a full 4KiB page for the buffer to\nensure the page containing the buffer is wholly owned by KVM, i.e. won\u0027t\nbe concurrently allocated and accessed by other kernel code while KVM is\nusing the buffer to {de,en}crypt memory. On SNP-enabled platforms, when\nsending SEV/SEV-ES commands that trigger firmware writes to memory, the\nto-be-written page(s) must be (temporarily) assigned to Firmware (as\nrequired by the SNP architecture, to guard against using such commands as\ngadgets to attack SNP guests). See snp_map_cmd_buf_desc() and friends.\n\nUnfortunately, transferring ownership of a page to Firmware makes the page\ninaccessible to software, and thus writes generate RMP #PF violations. If\nKVM uses a sub-page allocation for its temporary buffer, some other actor\nin the kernel can allocate and use the other portions of the page, and thus\ntrigger unexpected (and seemingly spurious) RMP #PF violations due to\nsoftware attempting to access a Firmware-owned page.\n\n BUG: unable to handle page fault for address: ffff906ae30f0300\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x80000003) - RMP violation\n PGD 6b1b80d067 P4D 6b1b80d067 PUD 100231e2063 PMD 10055a88063 PTE 80000100630f0163\n SEV-SNP: PFN 0x100630f0 unassigned, dumping non-zero entries in 2M PFN region: [0x10063000 - 0x10063200]\n Oops: Oops: 0003 [#1] SMP\n CPU: 70 UID: 0 PID: 10658 Comm: svw_WaiterThrea Tainted: G U W O 7.1.0-smp--c22293789940-seanjc-next #1 PREEMPTLAZY\n Tainted: [U]=USER, [W]=WARN, [O]=OOT_MODULE\n Hardware name: Google, Inc. Arcadia_IT_80/Arcadia_IT_80, BIOS 34.86.0-102 01/25/2026\n RIP: 0010:memset+0xf/0x20\n Call Trace:\n \u003cTASK\u003e\n __kvmalloc_node_noprof+0x2a4/0x710\n do_getxattr+0x4e/0x130\n path_getxattrat+0x125/0x1b0\n do_syscall_64+0x10a/0x480\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n RIP: 0033:0x7f3a22cb6daa\n \u003c/TASK\u003e\n Modules linked in: kvm_amd kvm irqbypass vfat fat ccp k10temp sha3 libsha3 i2c_piix4 gq(O) cdc_acm xhci_pci xhci_hcd\n gsmi: Log Shutdown Reason 0x03\n CR2: ffff906ae30f0300\n ---[ end trace 0000000000000000 ]---\n RIP: 0010:memset+0xf/0x20\n Kernel panic - not syncing: Fatal exception\n Kernel Offset: 0x39e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)\n gsmi: Log Shutdown Reason 0x02",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80853",
"url": "https://www.suse.com/security/cve/CVE-2026-80853"
},
{
"category": "external",
"summary": "SUSE Bug 1279571 for CVE-2026-80853",
"url": "https://bugzilla.suse.com/1279571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80853"
},
{
"cve": "CVE-2026-80854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_tcm: keep port count until LUN teardown completes\n\ntcm_usbg_drop_nexus() permits session removal once tpg_port_count\nreaches zero. However, usbg_port_unlink() currently decrements that\ncount from the fabric_pre_unlink() callback, before core_dev_del_lun()\nwaits for active se_lun references to drain.\n\nIf removal of the last LUN races a nexus removal, the latter can observe\na zero port count and call target_remove_session(). This frees\nsess_cmd_map while an in-flight struct usbg_cmd, including its work item,\ncan still be accessed.\n\nOverlapping the last-LUN unlink with nexus removal reproduces this\nlifetime violation as a DEBUG_OBJECTS \"free active\" warning for\nusbg_cmd_work, followed by a target-core BUG/Oops.\n\nThe generic target-core unlink path has no callback after\ncore_dev_del_lun() completes. Add an optional fabric_post_unlink()\ncallback and use it for the f_tcm port count. The count now remains\nnonzero until core_dev_del_lun() has finished draining active LUN\nreferences, preventing nexus removal from freeing the session during\ncommand completion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80854",
"url": "https://www.suse.com/security/cve/CVE-2026-80854"
},
{
"category": "external",
"summary": "SUSE Bug 1279568 for CVE-2026-80854",
"url": "https://bugzilla.suse.com/1279568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80854"
},
{
"cve": "CVE-2026-80855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80855"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: fix invalidate lock leak on open O_TRUNC DAX failure\n\nfuse_open() takes filemap_invalidate_lock() for a DAX truncate\n(dax_truncate = true) and releases it before the out_inode_unlock\nlabel. But when fuse_dax_break_layouts() fails, the goto\nout_inode_unlock skips the unlock and leaks the rwsem, so any later\nfault or truncate on the file stalls on the stale lock.\n\nfuse_dax_break_layouts() can fail with -ERESTARTSYS when a signal\ninterrupts the wait for busy DAX pages to drain:\n\n open(\"file\", O_RDWR | O_TRUNC)\n \u2500 fuse_open()\n \u251c\u2500 filemap_invalidate_lock() # dax_truncate\n \u2500 fuse_dax_break_layouts()\n \u2500 dax_break_layout()\n \u2500 wait_page_idle() # TASK_INTERRUPTIBLE\n \u2500 fuse_wait_dax_page() # unlock, schedule, re-lock\n \u2500 signal -\u003e -ERESTARTSYS\n goto out_inode_unlock # \u003c- lock leaked\n\nFix this by moving filemap_invalidate_unlock() below the label so\nthat all error paths release the lock, and rename the label to\nout_unlock as it now covers more than just the inode lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80855",
"url": "https://www.suse.com/security/cve/CVE-2026-80855"
},
{
"category": "external",
"summary": "SUSE Bug 1279564 for CVE-2026-80855",
"url": "https://bugzilla.suse.com/1279564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80855"
},
{
"cve": "CVE-2026-80856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80856"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: fix invalidate lock leak on setattr writeback failure\n\nfuse_do_setattr() takes filemap_invalidate_lock() for a DAX truncate\n(fault_blocked = true) and releases it at the out:/error: labels. But\nwhen a writeback flush is also needed, a write_inode_now() failure\nreturns directly and leaks the lock, so any later fault or truncate on\nthe file stalls on the stale rwsem.\n\nFor example, truncate(2) on a setuid file reaches fuse_do_setattr()\nwith both ATTR_SIZE and ATTR_MODE set:\n\n truncate(2)\n \u2500 do_truncate()\n \u251c\u2500 dentry_needs_remove_privs() # S_ISUID\n \u2500 notify_change() # KILL_SUID -\u003e ATTR_MODE\n \u2500 fuse_setattr() # no killpriv:\n | # ia_valid |= ATTR_MODE\n \u2500 fuse_do_setattr()\n \u251c\u2500 filemap_invalidate_lock() # IS_DAX \u0026\u0026 is_truncate\n \u2500 write_inode_now() # is_wb \u0026\u0026 ATTR_MODE\n \u2500 if (err) # e.g. daemon -\u003e -EIO\n return err # \u003c- lock leaked\n\nFix this by adding an unlock label that releases the lock before\nreturning the error, and use it for the fuse_dax_break_layouts()\nfailure path as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80856",
"url": "https://www.suse.com/security/cve/CVE-2026-80856"
},
{
"category": "external",
"summary": "SUSE Bug 1279566 for CVE-2026-80856",
"url": "https://bugzilla.suse.com/1279566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80856"
},
{
"cve": "CVE-2026-80857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free\n\nThe abort_on_kill path in request_wait_answer() calls fuse_abort_conn()\nand returns without waiting for FR_FINISHED. If fuse_dev_do_write() is\nconcurrently processing the same request (FR_LOCKED set), the caller\nfrees req-\u003eargs while it is still being accessed, causing a\nuse-after-free.\n\nFix this by jumping to the existing wait_event(FR_FINISHED) instead of\nreturning early. The wait will not hang because fuse_abort_conn()\nensures all requests are ended.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80857",
"url": "https://www.suse.com/security/cve/CVE-2026-80857"
},
{
"category": "external",
"summary": "SUSE Bug 1279567 for CVE-2026-80857",
"url": "https://bugzilla.suse.com/1279567"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-80857"
},
{
"cve": "CVE-2026-80858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80858"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: publish io-uring queues with release semantics\n\nfuse_uring_create_queue() initializes a fuse_ring_queue and then\npublishes the pointer into ring-\u003equeues[qid] with WRITE_ONCE() under the\nfch-\u003elock. There are several readers that may concurrently be fetching\nthat pointer locklessly and then deferencing it.\n\nWRITE_ONCE() doesn\u0027t ensure ordering of the queue\u0027s field\ninitialization before the ring-\u003equeues[qid] pointer assignment. The\nqueue must be published with smp_store_release() so the field\ninitialization is guaranteed to happen before.\n\nReaders in paths where the read may happen concurrently with the store\nneed to use READ_ONCE() because any race involving a plain access is\nundefined.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80858",
"url": "https://www.suse.com/security/cve/CVE-2026-80858"
},
{
"category": "external",
"summary": "SUSE Bug 1279776 for CVE-2026-80858",
"url": "https://bugzilla.suse.com/1279776"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80858"
},
{
"cve": "CVE-2026-80859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80859"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: fix missing barrier when checking io-uring readiness\n\nfuse_block_alloc() reads fch-\u003einitialized and then fch-\u003eio_uring.\nfch-\u003eio_uring is set before fch-\u003einitialized, ordered by the smp_wmb()\nin fuse_chan_set_intialized(), but fuse_block_alloc() has no matching\nread barrier between the two loads.\n\nThis may lead a CPU to observe fch-\u003einitialized=1 but fch-\u003eio_uring=0,\nand skip the check that blocks request allocation until the io-uring\nqueues are ready. This can reintroduce the lock-order inversion deadlock\nthat commit 3393ff964e0f prevents.\n\nAdd an smp_rmb() barrier to pair with the smp_wmb() in\nfuse_chan_set_initialized() to prevent this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80859",
"url": "https://www.suse.com/security/cve/CVE-2026-80859"
},
{
"category": "external",
"summary": "SUSE Bug 1279779 for CVE-2026-80859",
"url": "https://bugzilla.suse.com/1279779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80859"
},
{
"cve": "CVE-2026-80860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80860"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: fix race between interrupt and resend\n\nAfter commit f8fce75fedf7 (\"fuse: clear intr_entry in fuse_resend and\nfuse_remove_pending_req\") the WARN_ON(!list_empty(\u0026req-\u003eintr_entry)) in\nfuse_request_free() still triggers due to the following race:\n\nIn request_wait_answer()\n if (test_bit(FR_SENT, \u0026req-\u003eflags)) -\u003e returns true\n\nIn fuse_chan_resend()\n clear_bit(FR_SENT, \u0026req-\u003eflags)\n\nIn request_wait_answer()\n queue_interrupt(req)\n\nFix by:\n\n - move clearing FR_SENT inside fpq-\u003elock\n\n - move setting FR_PENDING inside fiq-\u003elock\n\n - recheck FR_SENT after acquiring fiq-\u003elock in fuse_dev_queue_interrupt()",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80860",
"url": "https://www.suse.com/security/cve/CVE-2026-80860"
},
{
"category": "external",
"summary": "SUSE Bug 1279780 for CVE-2026-80860",
"url": "https://bugzilla.suse.com/1279780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80860"
},
{
"cve": "CVE-2026-80861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80861"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci: bail out of setup if the controller is inaccessible\n\nxhci_gen_setup() locates the operational registers using the capability\nlength read from the very first register:\n\n\txhci-\u003eop_regs = hcd-\u003eregs +\n\t\tHC_LENGTH(readl(\u0026xhci-\u003ecap_regs-\u003ehc_capbase));\n\nIf the controller is dead or has dropped off the bus, that read returns\n~0, HC_LENGTH() truncates it to 0xff, and op_regs ends up 0xff bytes\npast the page-aligned MMIO base, i.e. unaligned. The first access\nthrough it, xhci_halt() -\u003e xhci_handshake() reading op_regs-\u003estatus, is\nthen an unaligned readl() on device memory. arm64 faults on unaligned\ndevice accesses, so instead of xhci_handshake() catching the all-ones\nvalue and returning -ENODEV, setup oopses:\n\n xhci-pci-renesas 0005:08:00.0: Unable to change power state from D3cold to D0, device inaccessible\n xhci-pci-renesas 0005:08:00.0: xHCI Host Controller\n xhci-pci-renesas 0005:08:00.0: new USB bus registered, assigned bus number 1\n Unable to handle kernel paging request at virtual address ffff80030a770103\n ESR = 0x0000000096000021\n FSC = 0x21: alignment fault\n Internal error: Oops: 0000000096000021 [#1] SMP\n pc : xhci_halt [xhci_hcd]\n Call trace:\n xhci_halt\n xhci_gen_setup\n xhci_pci_setup\n usb_add_hcd\n usb_hcd_pci_probe\n xhci_pci_common_probe\n xhci_pci_renesas_probe\n\nThis was hit with a Renesas uPD720201 that failed to power up (\"Unable\nto change power state from D3cold to D0, device inaccessible\") yet still\nreached the HCD probe path.\n\nRead the capability register once, and if it reads back the all-ones\nvalue (as xhci_handshake() and xhci_reset() already test for), abort\nsetup with -ENODEV before op_regs is derived from it. Reading it once\nalso avoids re-reading a register that may change under a concurrent\nhot-removal.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80861",
"url": "https://www.suse.com/security/cve/CVE-2026-80861"
},
{
"category": "external",
"summary": "SUSE Bug 1279824 for CVE-2026-80861",
"url": "https://bugzilla.suse.com/1279824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80861"
},
{
"cve": "CVE-2026-80862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80862"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix usage of page_frag_cache\n\nnvme uses page_frag_cache to preallocate PDU for each preallocated request\nof block device. Block devices are created in parallel threads,\nconsequently page_frag_cache is used in not thread-safe manner.\nThat leads to incorrect refcounting of backstore pages and premature free.\n\nThat can be catched by !sendpage_ok inside network stack:\n\nWARNING: CPU: 7 PID: 467 at ../net/core/skbuff.c:6931 skb_splice_from_iter+0xfa/0x310.\n\ttcp_sendmsg_locked+0x782/0xce0\n\ttcp_sendmsg+0x27/0x40\n\tsock_sendmsg+0x8b/0xa0\n\tnvme_tcp_try_send_cmd_pdu+0x149/0x2a0\nThen random panic may occur.\n\nFix that by serializing the usage of page_frag_cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80862",
"url": "https://www.suse.com/security/cve/CVE-2026-80862"
},
{
"category": "external",
"summary": "SUSE Bug 1279823 for CVE-2026-80862",
"url": "https://bugzilla.suse.com/1279823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80862"
},
{
"cve": "CVE-2026-80863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80863"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix OOB in free_rd_atomic_resources()\n\nfree_rd_atomic_resources() iterates using qp-\u003eattr.max_dest_rd_atomic.\nUpdating max_dest_rd_atomic before freeing the old array can make the\nfree path walk past the old allocation and trigger a slab out-of-bounds\nwrite catched by KASAN:\n==================================================================\nBUG: KASAN: slab-out-of-bounds in free_rd_atomic_resource drivers/infiniband/sw/rxe/rxe_qp.c:180 [inline]\nBUG: KASAN: slab-out-of-bounds in free_rd_atomic_resources drivers/infiniband/sw/rxe/rxe_qp.c:171 [inline]\nBUG: KASAN: slab-out-of-bounds in free_rd_atomic_resources drivers/infiniband/sw/rxe/rxe_qp.c:163 [inline]\nBUG: KASAN: slab-out-of-bounds in rxe_qp_from_attr+0x1e88/0x2150 drivers/infiniband/sw/rxe/rxe_qp.c:712\nWrite of size 4 at addr ffff88802b8dddb8 by task syz.3.451/11063\n\nCPU: 0 UID: 0 PID: 11063 Comm: syz.3.451 Not tainted 7.1.0 #2 PREEMPT(full)\nHardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x10e/0x1f0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xf7/0x600 mm/kasan/report.c:482\n kasan_report+0xe4/0x120 mm/kasan/report.c:595\n free_rd_atomic_resource drivers/infiniband/sw/rxe/rxe_qp.c:180 [inline]\n free_rd_atomic_resources drivers/infiniband/sw/rxe/rxe_qp.c:171 [inline]\n free_rd_atomic_resources drivers/infiniband/sw/rxe/rxe_qp.c:163 [inline]\n rxe_qp_from_attr+0x1e88/0x2150 drivers/infiniband/sw/rxe/rxe_qp.c:712\n rxe_modify_qp+0x1e2/0x530 drivers/infiniband/sw/rxe/rxe_verbs.c:623\n ib_security_modify_qp+0x223/0xfa0 drivers/infiniband/core/security.c:625\n _ib_modify_qp+0x333/0xec0 drivers/infiniband/core/verbs.c:1915\n modify_qp+0x13ca/0x1940 drivers/infiniband/core/uverbs_cmd.c:1932\n ib_uverbs_modify_qp+0xcb/0x120 drivers/infiniband/core/uverbs_cmd.c:1958\n ib_uverbs_write+0xb86/0x1030 drivers/infiniband/core/uverbs_main.c:680\n vfs_write+0x2aa/0x1070 fs/read_write.c:686\n ksys_write+0x1f8/0x250 fs/read_write.c:740\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x116/0x800 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fefc75a70cd\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fefc8495018 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 00007fefc7835fa0 RCX: 00007fefc75a70cd\nRDX: 0000000000000078 RSI: 0000200000000240 RDI: 0000000000000007\nRBP: 00007fefc764f10f R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007fefc7836038 R14: 00007fefc7835fa0 R15: 00007ffcf0586aa0\n \u003c/TASK\u003e\n\nAllocated by task 11063:\n kasan_save_stack+0x33/0x60 mm/kasan/common.c:57\n kasan_save_track+0x14/0x30 mm/kasan/common.c:78\n poison_kmalloc_redzone mm/kasan/common.c:398 [inline]\n __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415\n kasan_kmalloc include/linux/kasan.h:263 [inline]\n __do_kmalloc_node mm/slub.c:5296 [inline]\n __kmalloc_noprof+0x32a/0x850 mm/slub.c:5308\n kmalloc_noprof include/linux/slab.h:954 [inline]\n kzalloc_noprof include/linux/slab.h:1188 [inline]\n alloc_rd_atomic_resources drivers/infiniband/sw/rxe/rxe_qp.c:155 [inline]\n rxe_qp_from_attr+0x3f8/0x2150 drivers/infiniband/sw/rxe/rxe_qp.c:714\n rxe_modify_qp+0x1e2/0x530 drivers/infiniband/sw/rxe/rxe_verbs.c:623\n ib_security_modify_qp+0x223/0xfa0 drivers/infiniband/core/security.c:625\n _ib_modify_qp+0x333/0xec0 drivers/infiniband/core/verbs.c:1915\n modify_qp+0x13ca/0x1940 drivers/infiniband/core/uverbs_cmd.c:1932\n ib_uverbs_modify_qp+0xcb/0x120 drivers/infiniband/core/uverbs_cmd.c:1958\n ib_uverbs_write+0xb86/0x1030 drivers/infiniband/core/uverbs_ma\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80863",
"url": "https://www.suse.com/security/cve/CVE-2026-80863"
},
{
"category": "external",
"summary": "SUSE Bug 1279535 for CVE-2026-80863",
"url": "https://bugzilla.suse.com/1279535"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80863"
},
{
"cve": "CVE-2026-80864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80864"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp\n\nrxe_qp_from_attr() handles IB_QP_MAX_DEST_RD_ATOMIC outside the\nIB_QP_STATE path, so it holds no state_lock and runs while the responder\ntask rxe_receiver() (recv_task on rxe_wq) is live. A modify_qp() setting\nonly that attribute calls free_rd_atomic_resources() then\nalloc_rd_atomic_resources(), swapping qp-\u003eresp.resources[] while\nrxe_prepare_res()/find_resource() walk it; free_rd_atomic_resources()\nalso leaves the cached pointer qp-\u003eresp.res dangling. A local\nunprivileged user can race the free/realloc into a use-after-free in\nrxe_receiver() (local DoS).\n\nDrain recv_task around the swap with rxe_disable_task()/rxe_enable_task(),\nas rxe_qp_reset() already does when tearing this array down, re-enabling\nonly after alloc_rd_atomic_resources() succeeds so the responder never\nresumes against a NULL qp-\u003eresp.resources on the ENOMEM path. Also clear\nqp-\u003eresp.res in free_rd_atomic_resources(), like the rxe_resp.c\ncompletion paths.\n\nReproduced under KASAN; the slab-use-after-free in rxe_receiver() is gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80864",
"url": "https://www.suse.com/security/cve/CVE-2026-80864"
},
{
"category": "external",
"summary": "SUSE Bug 1279525 for CVE-2026-80864",
"url": "https://bugzilla.suse.com/1279525"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80864"
},
{
"cve": "CVE-2026-80914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80914"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready\n\niso_conn_ready() looks up the BIS listener socket with iso_get_sock(),\nwhich takes a reference, and then, without re-checking its state,\ncreates a child socket from it:\n\n parent = iso_get_sock(hdev, ...);\n if (!parent)\n return;\n\n lock_sock(parent);\n sk = iso_sock_alloc(sock_net(parent), NULL, BTPROTO_ISO, ...);\n ...\n iso_chan_add(conn, sk, parent);\n ...\n release_sock(parent);\n sock_put(parent);\n\nIf the listener socket is closed concurrently, between iso_get_sock()\nand lock_sock(), the reference taken by iso_get_sock() may be the last\none: the close path drops the link-list reference, and once\niso_conn_ready() drops its own reference at the end of the function the\nsocket is freed. The child socket, however, is already linked to the\nfreed parent, and a later disconnect of the child runs iso_chan_del()\n-\u003e bt_accept_unlink(), which dereferences the dangling parent pointer\ninto the freed accept queue (a use-after-free). The same dangling\npointer is also dereferenced through parent-\u003e***() in\niso_chan_del().\n\nFix it the same way the connected (non-BIS) path was fixed in commit\n0d255e63fcf3 (\"Bluetooth: ISO: hold sk properly in iso_conn_ready\"):\nafter taking the socket lock, re-check that the parent is still a\nlistening, alive socket, and bail out otherwise.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80914",
"url": "https://www.suse.com/security/cve/CVE-2026-80914"
},
{
"category": "external",
"summary": "SUSE Bug 1279921 for CVE-2026-80914",
"url": "https://bugzilla.suse.com/1279921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80914"
},
{
"cve": "CVE-2026-80916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcov: fix data corruption and race conditions on PREEMPT_RT\n\nsyzbot is reporting KCOV state corruption on PREEMPT_RT kernels, for the\ntemporary storage used for saving/restoring remote KCOV state is currently\nallocated as the per-CPU area.\n\nOn PREEMPT_RT kernels, softirq handlers run as preemptible task threads\n(e.g., ksoftirqd). If a softirq context preempts a task running a remote\nKCOV session, it safely saves the task\u0027s state into the per-CPU area.\nHowever, if that softirq thread is subsequently preempted by a higher-\npriority softirq thread on the same CPU, the second softirq will overwrite\nthe same per-CPU area, permanently destroying the original task\u0027s KCOV\nstate.\n\nFix this data corruption by moving the temporary storage from the per-CPU\narea to the per-thread area. Since each softirq thread now owns its own\ntask context, nested softirq preemption no longer causes data overwrites.\n\nNote that while the temporary storage is now on a per-thread basis, the\nper-CPU kcov_percpu_data.lock must be retained, for we need to ensure that\nkcov_remote_start() and kcov_remote_stop() operate atomically without\nracing against asynchronous interrupts that manipulate the current task\u0027s\nKCOV state.\n\nIt is likely that GFP_KERNEL allocation by vmalloc_node() in kcov_init()\nhas already called panic() before returning NULL, for there will be no\nOOM-killable userspace processes when __init function of built-in module\nruns. But this patch also fixes crashing the kernel when vmalloc_node()\nin kcov_init() returned NULL, for kcov_init() left per-CPU irq_area == NULL\nbut kcov_remote_start() depends on per-CPU irq_area != NULL, resulting in\n\n (1) doing vmalloc() in kcov_remote_start() despite !in_task() context\n\n (2) out-of-array-bounds access if (1) succeeded but\n kcov-\u003eremote_size \u003c CONFIG_KCOV_IRQ_AREA_SIZE\n\n (3) always leak memory allocated by (1), eventually killing all\n OOM-killable userspace processes\n\nproblems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80916",
"url": "https://www.suse.com/security/cve/CVE-2026-80916"
},
{
"category": "external",
"summary": "SUSE Bug 1279972 for CVE-2026-80916",
"url": "https://bugzilla.suse.com/1279972"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80916"
},
{
"cve": "CVE-2026-80917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems\n\nOn 32-bit systems the config space is too large to ioremap in one go, so\npci_ecam_create() maps each bus segment separately and relies on the\n-\u003eadd_bus callback (pci_ecam_add_bus) to populate the per-bus mapping in\ncfg-\u003ewinp[]. pci_ecam_map_bus() then uses that mapping as the base for\nevery config access.\n\nThe generic ECAM ops (pci_generic_ecam_ops) already provide the -\u003eadd_bus\nand -\u003eremove_bus callbacks, but the CAM (legacy) ops in pci-host-generic.c\ndo not. As a result, on a 32-bit host using \"pci-host-cam-generic\" the\nper-bus mapping is never set up and the first config read dereferences a\nNULL base, crashing during bus enumeration:\n\n Unable to handle kernel NULL pointer dereference at virtual address 00000800\n Oops [#1]\n CPU: 0 PID: 1 Comm: swapper Not tainted 6.9.7+ #43\n Hardware name: Digilent Nexys-Video-A7 RV32 (DT)\n epc : pci_generic_config_read+0x40/0xb0\n ra : pci_generic_config_read+0x2c/0xb0\n [\u003cc038db9c\u003e] pci_generic_config_read+0x40/0xb0\n [\u003cc038da04\u003e] pci_bus_read_config_dword+0x50/0xb0\n [\u003cc0391e94\u003e] pci_bus_generic_read_dev_vendor_id+0x3c/0x1ec\n [\u003cc039245c\u003e] pci_scan_single_device+0xa4/0x11c\n [\u003cc0392570\u003e] pci_scan_slot+0x9c/0x23c\n [\u003cc039388c\u003e] pci_scan_child_bus_extend+0x58/0x2f4\n [\u003cc0393db0\u003e] pci_scan_root_bus_bridge+0x64/0xe8\n [\u003cc0393e54\u003e] pci_host_probe+0x20/0xc8\n [\u003cc03bc6f4\u003e] pci_host_common_probe+0x144/0x1e4\n\nFix this by giving the CAM ops the same -\u003eadd_bus/-\u003eremove_bus callbacks.\nSince pci_ecam_add_bus() and pci_ecam_remove_bus() are static to ecam.c,\nmove the CAM ops definition there as pci_generic_cam_ops (mirroring\npci_generic_ecam_ops) and export it for pci-host-generic.c to reference.\n\n[mani: removed timestamp from log]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80917",
"url": "https://www.suse.com/security/cve/CVE-2026-80917"
},
{
"category": "external",
"summary": "SUSE Bug 1280009 for CVE-2026-80917",
"url": "https://bugzilla.suse.com/1280009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80917"
},
{
"cve": "CVE-2026-80918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80918"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: fix number/pointer type confusion on long items\n\nWhen fetch_item() is called by hid_scan_report() on an item with\nHID_ITEM_TAG_LONG, it stores a pointer to the item data in\nitem-\u003edata.longdata instead of storing a value directly in\nitem-\u003edata.{u8/u16/u32}.\n\nWhen item_udata() or item_sdata() encounters such an item, it incorrectly\nassumes that the item is in short format, and therefore returns the lower\npart of a kernel pointer reinterpreted as a number.\n\nWhen a HID device is connected whose descriptor contains a\nHID_GLOBAL_ITEM_TAG_REPORT_SIZE encoded in long format with size=4, this\ncauses the lower half of a kernel pointer to be printed into dmesg as a\nnumber, like this:\n\n hid (null): invalid report_size 107953555\n\nTo fix it, let item_udata() and item_sdata() verify that the item is in\nshort format.\n\nNote that this bug only affects hid_scan_report(), while the main parsing\npass hid_parse_collections() will always bail out when encountering a long\nitem.\n\nSidenote: There are currently no users of data.longdata; maybe we should\njust remove any parsing of long-format descriptors as a follow-up.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80918",
"url": "https://www.suse.com/security/cve/CVE-2026-80918"
},
{
"category": "external",
"summary": "SUSE Bug 1279971 for CVE-2026-80918",
"url": "https://bugzilla.suse.com/1279971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80918"
},
{
"cve": "CVE-2026-80920",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80920"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: defer eventfd signaling when queued from a wakeup handler\n\nio_req_local_work_add() signals the CQ ring eventfd inline when it is the\none to push the first entry onto -\u003ework_list. For DEFER_TASKRUN rings that\nadd is frequently done from a waitqueue wakeup handler, where an\narbitrary waitqueue lock is held.\n\neventfd_signal_mask() only refuses to recurse when current-\u003ein_eventfd\nis set, but that bit is set by eventfd_signal_mask() itself. If the wake\nchain starts somewhere else, signal goes out inline and can feed back\ninto epoll.\n\nAdd IOU_F_TWQ_IN_WAKE, set it on the task_work add done from the three\nwaitqueue callbacks, and use it to force io_eventfd_signal() down the\nexisting call_rcu_hurry() deferral instead of signaling inline.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80920",
"url": "https://www.suse.com/security/cve/CVE-2026-80920"
},
{
"category": "external",
"summary": "SUSE Bug 1279928 for CVE-2026-80920",
"url": "https://bugzilla.suse.com/1279928"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80920"
},
{
"cve": "CVE-2026-80921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80921"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: vsie: zero stale crypto bits\n\nWhen shadowing crypto access bits from a format0 apcb (crycb 0 or 1),\nthe bits 64..255 are unchanged from whatever is in the vsie page in the\ncrycb and thus in the apcb. This gives a nested guest potential access\nto a device no longer available. Zero out the remaining bits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80921",
"url": "https://www.suse.com/security/cve/CVE-2026-80921"
},
{
"category": "external",
"summary": "SUSE Bug 1279926 for CVE-2026-80921",
"url": "https://bugzilla.suse.com/1279926"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80921"
},
{
"cve": "CVE-2026-80922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - Allow zero as a random number\n\nZero is a valid random number and needs to be allowed. Otherwise the\noutput is distinguishable from random.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80922",
"url": "https://www.suse.com/security/cve/CVE-2026-80922"
},
{
"category": "external",
"summary": "SUSE Bug 1280010 for CVE-2026-80922",
"url": "https://bugzilla.suse.com/1280010"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-80922"
},
{
"cve": "CVE-2026-80923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxhci: dbgtty: Fix unregister on tty_register_driver() failure\n\nIf tty_register_driver() fails, it drops the reference, but fails to set\nthe global dbc_tty_driver to NULL, causing the unregister to be called\nagain when module exits.\n\nOn module unload dbc_tty_exit() only gates its cleanup on the driver\npointer being non-NULL, so it operates on the already-freed driver:\n\n module_init(xhci_hcd_init)\n xhci_hcd_init()\n xhci_dbc_init() [return value ignored]\n dbc_tty_init()\n tty_register_driver() fails\n tty_driver_kref_put() -\u003e driver freed\n (dbc_tty_driver left dangling)\n ...\n module_exit(xhci_hcd_fini)\n xhci_hcd_fini()\n xhci_dbc_exit()\n dbc_tty_exit()\n if (dbc_tty_driver) -\u003e true (dangling)\n tty_unregister_driver() -\u003e use-after-free",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80923",
"url": "https://www.suse.com/security/cve/CVE-2026-80923"
},
{
"category": "external",
"summary": "SUSE Bug 1279920 for CVE-2026-80923",
"url": "https://bugzilla.suse.com/1279920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80923"
},
{
"cve": "CVE-2026-80924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: krb5 - use kfree_sensitive() for derived key buffers\n\ncrypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum()\nfree the buffer holding the freshly derived keys with plain kfree(),\nleaving the key material behind in the freed slab object.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80924",
"url": "https://www.suse.com/security/cve/CVE-2026-80924"
},
{
"category": "external",
"summary": "SUSE Bug 1279919 for CVE-2026-80924",
"url": "https://bugzilla.suse.com/1279919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80924"
},
{
"cve": "CVE-2026-80925",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-80925"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvlan: fix skb_under_panic and races when toggling HW VLAN offload\n\nToggling hardware VLAN TX offload (NETIF_F_HW_VLAN_CTAG_TX or\nNETIF_F_HW_VLAN_STAG_TX) on a lower device invokes vlan_transfer_features(),\nwhich dynamically changed vlandev-\u003ehard_header_len.\n\nThis causes two issues:\n1. Lockless TX paths (e.g. packet_snd in af_packet.c, ip6_finish_output2)\n read dev-\u003ehard_header_len without holding RTNL lock. Mutating\n hard_header_len dynamically under RTNL creates a data race where upper\n layers reserve insufficient headroom based on a stale hard_header_len,\n resulting in skb_under_panic when vlan_dev_hard_header() is called.\n2. In addition, vlan_transfer_features() updated hard_header_len without\n updating header_ops, causing a mismatch between allocated headroom\n and header creation.\n\nAlways setting dev-\u003ehard_header_len = real_dev-\u003ehard_header_len and\ndev-\u003eneeded_headroom = real_dev-\u003eneeded_headroom + VLAN_HLEN unconditionally\nensures:\n- dev-\u003ehard_header_len remains 100% static and immutable at real_dev-\u003ehard_header_len,\n eliminating all dynamic runtime updates and data races on hard_header_len.\n- Upper layers allocating skbs via LL_RESERVED_SPACE() will always reserve\n sufficient headroom for software VLAN tag insertion (real_dev-\u003ehard_header_len +\n real_dev-\u003eneeded_headroom + VLAN_HLEN).\n- vlandev inherits real_dev-\u003eneeded_tailroom so underlying trailer/padding/ICV\n requirements are honored.\n- AF_PACKET SOCK_RAW network header offsets remain correctly aligned at\n real_dev-\u003ehard_header_len.\n- vlan_header_ops is used unconditionally.\n\nNote to stable teams: Make sure to backport these commits:\n\ne16e960d55a4 (\"ipvlan: inherit needed_headroom and needed_tailroom from phy_dev\")\ncef51860becd (\"macvlan: inherit needed_headroom and needed_tailroom from lowerdev\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-80925",
"url": "https://www.suse.com/security/cve/CVE-2026-80925"
},
{
"category": "external",
"summary": "SUSE Bug 1280011 for CVE-2026-80925",
"url": "https://bugzilla.suse.com/1280011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-7.2.5-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-7.2.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-80925"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…