RHSA-2026:45115
Vulnerability from csaf_opensuse - Published: 2026-07-24 00:00 - Updated: 2026-09-16 18:40Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:45115.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:45115.
Patchnames: RHSA-2026:45115
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
8.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-40026
Threats
Impact
important
7.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-40026
Threats
Impact
important
8.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2025-40026
Threats
Impact
important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:45115.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:45115.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:45115",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_45115.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:45115",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/007200.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:45115",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/007200.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40026 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52993 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52993/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64561 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64561/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:40:13Z",
"generator": {
"date": "2026-07-24T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:45115",
"initial_release_date": "2026-07-24T00:00:00Z",
"revision_history": [
{
"date": "2026-07-24T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:59:07Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:40:13Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.147.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.147.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.147.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.147.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.147.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.147.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.147.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.147.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.147.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.147.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.147.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.147.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.147.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.147.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.147.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.147.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.147.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.147.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.147.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.147.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.147.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-40026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40026"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Don\u0027t (re)check L1 intercepts when completing userspace I/O\n\nWhen completing emulation of instruction that generated a userspace exit\nfor I/O, don\u0027t recheck L1 intercepts as KVM has already finished that\nphase of instruction execution, i.e. has already committed to allowing L2\nto perform I/O. If L1 (or host userspace) modifies the I/O permission\nbitmaps during the exit to userspace, KVM will treat the access as being\nintercepted despite already having emulated the I/O access.\n\nPivot on EMULTYPE_NO_DECODE to detect that KVM is completing emulation.\nOf the three users of EMULTYPE_NO_DECODE, only complete_emulated_io() (the\nintended \"recipient\") can reach the code in question. gp_interception()\u0027s\nuse is mutually exclusive with is_guest_mode(), and\ncomplete_emulated_insn_gp() unconditionally pairs EMULTYPE_NO_DECODE with\nEMULTYPE_SKIP.\n\nThe bad behavior was detected by a syzkaller program that toggles port I/O\ninterception during the userspace I/O exit, ultimately resulting in a WARN\non vcpu-\u003earch.pio.count being non-zero due to KVM no completing emulation\nof the I/O instruction.\n\n WARNING: CPU: 23 PID: 1083 at arch/x86/kvm/x86.c:8039 emulator_pio_in_out+0x154/0x170 [kvm]\n Modules linked in: kvm_intel kvm irqbypass\n CPU: 23 UID: 1000 PID: 1083 Comm: repro Not tainted 6.16.0-rc5-c1610d2d66b1-next-vm #74 NONE\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:emulator_pio_in_out+0x154/0x170 [kvm]\n PKRU: 55555554\n Call Trace:\n \u003cTASK\u003e\n kvm_fast_pio+0xd6/0x1d0 [kvm]\n vmx_handle_exit+0x149/0x610 [kvm_intel]\n kvm_arch_vcpu_ioctl_run+0xda8/0x1ac0 [kvm]\n kvm_vcpu_ioctl+0x244/0x8c0 [kvm]\n __x64_sys_ioctl+0x8a/0xd0\n do_syscall_64+0x5d/0xc60\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40026",
"url": "https://www.suse.com/security/cve/CVE-2025-40026"
},
{
"category": "external",
"summary": "SUSE Bug 1252764 for CVE-2025-40026",
"url": "https://bugzilla.suse.com/1252764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-24T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2025-40026"
},
{
"cve": "CVE-2026-52993",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52993"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix double-free in tipc_buf_append()\n\ntipc_msg_validate() can potentially reallocate the skb it is validating,\nfreeing the old one. In tipc_buf_append(), it was being called with a\npointer to a local variable which was a copy of the caller\u0027s skb\npointer.\n\nIf the skb was reallocated and validation subsequently failed, the error\nhandling path would free the original skb pointer, which had already\nbeen freed, leading to double-free.\n\nFix this by checking if head now points to a newly allocated reassembled\nskb. If it does, reassign *headbuf for later freeing operations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52993",
"url": "https://www.suse.com/security/cve/CVE-2026-52993"
},
{
"category": "external",
"summary": "SUSE Bug 1269193 for CVE-2026-52993",
"url": "https://bugzilla.suse.com/1269193"
},
{
"category": "external",
"summary": "SUSE Bug 1269194 for CVE-2026-52993",
"url": "https://bugzilla.suse.com/1269194"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-52993"
},
{
"cve": "CVE-2026-53059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53059"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm log: fix out-of-bounds write due to region_count overflow\n\nThe local variable region_count in create_log_context() is declared as\nunsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit).\nWhen a device-mapper target has a sufficiently large ti-\u003elen with a small\nregion_size, the division result can exceed UINT_MAX. The truncated\nvalue is then used to calculate bitset_size, causing clean_bits,\nsync_bits, and recovering_bits to be allocated far smaller than needed\nfor the actual number of regions.\n\nSubsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use\nregion indices derived from the full untruncated region space, causing\nout-of-bounds writes to kernel heap memory allocated by vmalloc.\n\nThis can be reproduced by creating a mirror target whose region_count\noverflows 32 bits:\n\n dmsetup create bigzero --table \u00270 8589934594 zero\u0027\n dmsetup create mymirror --table \u00270 8589934594 mirror \\\n core 2 2 nosync 2 /dev/mapper/bigzero 0 \\\n /dev/mapper/bigzero 0\u0027\n\nThe status output confirms the truncation (sync_count=1 instead of\n4294967297, because 0x100000001 was truncated to 1):\n\n $ dmsetup status mymirror\n 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...\n\nThis leads to a kernel crash in core_in_sync:\n\n BUG: scheduling while atomic: (udev-worker)/9150/0x00000000\n RIP: 0010:core_in_sync+0x14/0x30 [dm_log]\n CR2: 0000000000000008\n Fixing recursive fault but reboot is needed!\n\nFix by widening the local region_count to sector_t and adding an\nexplicit overflow check before the value is assigned to lc-\u003eregion_count.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53059",
"url": "https://www.suse.com/security/cve/CVE-2026-53059"
},
{
"category": "external",
"summary": "SUSE Bug 1269655 for CVE-2026-53059",
"url": "https://bugzilla.suse.com/1269655"
},
{
"category": "external",
"summary": "SUSE Bug 1270376 for CVE-2026-53059",
"url": "https://bugzilla.suse.com/1270376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-53059"
},
{
"cve": "CVE-2026-64561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64561"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Check for invalid/obsolete root *after* making MMU pages available\n\nCheck for a \"stale\" page fault, i.e. for an invalid and/or obsolete root,\nafter making MMU pages available for the shadow MMU. If reclaiming shadow\npages zaps an in-use root, i.e. marks it invalid, then KVM will attempt to\nmap memory into an invalid root. On its own, populating an invalid root is\n\"fine\", but because child shadow pages inherit their parent\u0027s role, any\nchildren created during the map/fetch will be created as invalid pages,\nthus violating KVM\u0027s invariant that invalid pages are never on the list of\nactive MMU pages.\n\nNote, the underlying flaw has existed since KVM first started tracking\ninvalid roots in 2008 (commit 2e53d63acba7, \"KVM: MMU: ignore zapped root\npagetables\"), but the true badness only came along in 2020 (Linux 5.9)\nwith the invariant that invalid shadow pages can\u0027t be on the list of\nactive pages.\n\nNote #2, inheriting role.invalid when creating child shadow pages is also\nfar from ideal; that flaw will be addressed separately.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64561",
"url": "https://www.suse.com/security/cve/CVE-2026-64561"
},
{
"category": "external",
"summary": "SUSE Bug 1273231 for CVE-2026-64561",
"url": "https://bugzilla.suse.com/1273231"
},
{
"category": "external",
"summary": "SUSE Bug 1273232 for CVE-2026-64561",
"url": "https://bugzilla.suse.com/1273232"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.147.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.147.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.147.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-24T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-64561"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…