RHSA-2026:57253
Vulnerability from csaf_opensuse - Published: 2026-08-20 00:00 - Updated: 2026-09-16 18:45Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:57253.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:57253.
Patchnames: RHSA-2026:57253
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
7.3 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
6.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
8.3 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
7.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
7.5 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
5.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2024-56602
Threats
Impact
important
References
80 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:57253.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:57253.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:57253",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_57253.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:57253",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-August/007528.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:57253",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-August/007528.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56602 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39902 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39902/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17523 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17523/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43206 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45991 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46120 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52991 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53009 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53016 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53189 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53329 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53329/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53374 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53374/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63879 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63884 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63887 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-63888 page",
"url": "https://www.suse.com/security/cve/CVE-2026-63888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64048 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64219 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64379 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64379/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64496 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68388 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68388/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:45:43Z",
"generator": {
"date": "2026-08-20T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:57253",
"initial_release_date": "2026-08-20T00:00:00Z",
"revision_history": [
{
"date": "2026-08-20T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T18:03:24Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:45:43Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.157.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.157.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.157.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.157.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.157.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.157.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.157.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.157.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.157.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.157.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.157.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.157.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.157.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.157.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.157.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.157.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.157.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.157.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.157.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.157.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.157.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-56602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56602"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: do not leave a dangling sk pointer in ieee802154_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If ieee802154_create() fails later, the allocated sk object is\nfreed, but the dangling pointer remains in the provided sock object, which\nmay allow use-after-free.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56602",
"url": "https://www.suse.com/security/cve/CVE-2024-56602"
},
{
"category": "external",
"summary": "SUSE Bug 1235521 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "external",
"summary": "SUSE Bug 1235522 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2025-39902",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39902"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slub: avoid accessing metadata when pointer is invalid in object_err()\n\nobject_err() reports details of an object for further debugging, such as\nthe freelist pointer, redzone, etc. However, if the pointer is invalid,\nattempting to access object metadata can lead to a crash since it does\nnot point to a valid object.\n\nOne known path to the crash is when alloc_consistency_checks()\ndetermines the pointer to the allocated object is invalid because of a\nfreelist corruption, and calls object_err() to report it. The debug code\nshould report and handle the corruption gracefully and not crash in the\nprocess.\n\nIn case the pointer is NULL or check_valid_pointer() returns false for\nthe pointer, only print the pointer value and skip accessing metadata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39902",
"url": "https://www.suse.com/security/cve/CVE-2025-39902"
},
{
"category": "external",
"summary": "SUSE Bug 1250702 for CVE-2025-39902",
"url": "https://bugzilla.suse.com/1250702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39902"
},
{
"cve": "CVE-2026-17523",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17523"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet\n\nThis patch switches the timer to HRTIMER_MODE_SOFT, which executed the\ntimer callback in softirq context and removes the hrtimer_tasklet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17523",
"url": "https://www.suse.com/security/cve/CVE-2026-17523"
},
{
"category": "external",
"summary": "SUSE Bug 1272749 for CVE-2026-17523",
"url": "https://bugzilla.suse.com/1272749"
},
{
"category": "external",
"summary": "SUSE Bug 1272750 for CVE-2026-17523",
"url": "https://bugzilla.suse.com/1272750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-17523"
},
{
"cve": "CVE-2026-43206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43206"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()\n\nThe kfd_event_page_set() function writes KFD_SIGNAL_EVENT_LIMIT * 8\nbytes via memset without checking the buffer size parameter. This allows\nunprivileged userspace to trigger an out-of bounds kernel memory write\nby passing a small buffer, leading to potential privilege\nescalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43206",
"url": "https://www.suse.com/security/cve/CVE-2026-43206"
},
{
"category": "external",
"summary": "SUSE Bug 1264551 for CVE-2026-43206",
"url": "https://bugzilla.suse.com/1264551"
},
{
"category": "external",
"summary": "SUSE Bug 1266668 for CVE-2026-43206",
"url": "https://bugzilla.suse.com/1266668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-43206"
},
{
"cve": "CVE-2026-45991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45991"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: fix partition descriptor append bookkeeping\n\nMounting a crafted UDF image with repeated partition descriptors can\ntrigger a heap out-of-bounds write in part_descs_loc[].\n\nhandle_partition_descriptor() deduplicates entries by partition number,\nbut appended slots never record partnum. As a result duplicate\nPartition Descriptors are appended repeatedly and num_part_descs keeps\ngrowing.\n\nOnce the table is full, the growth path still sizes the allocation from\npartnum even though inserts are indexed by num_part_descs. If partnum is\nalready aligned to PART_DESC_ALLOC_STEP, ALIGN(partnum, step) can keep\nthe old capacity and the next append writes past the end of the table.\n\nStore partnum in the appended slot and size growth from the next append\ncount so deduplication and capacity tracking follow the same model.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45991",
"url": "https://www.suse.com/security/cve/CVE-2026-45991"
},
{
"category": "external",
"summary": "SUSE Bug 1267227 for CVE-2026-45991",
"url": "https://bugzilla.suse.com/1267227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45991"
},
{
"cve": "CVE-2026-46120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46120"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_gre: Use cached t-\u003enet in ip6erspan_changelink().\n\nAfter commit 5e72ce3e3980 (\"net: ipv6: Use link netns in newlink() of\nrtnl_link_ops\"), ip6erspan_newlink() correctly resolves the per-netns\nip6gre hash via link_net. ip6erspan_changelink() was not converted in\nthat series and still uses dev_net(dev), which diverges from the\ndevice\u0027s creation netns after IFLA_NET_NS_FD migration.\n\nThis re-inserts the tunnel into the wrong per-netns hash. The\noriginal netns keeps a stale entry. When that netns is later\ndestroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a\nslab-use-after-free reported by KASAN, followed by a kernel BUG at\nnet/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().\n\nReachable from an unprivileged user namespace (unshare --user\n--map-root-user --net).\n\nip6gre_changelink() earlier in the same file already uses the cached\nt-\u003enet; only ip6erspan_changelink() has the wrong shape.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46120",
"url": "https://www.suse.com/security/cve/CVE-2026-46120"
},
{
"category": "external",
"summary": "SUSE Bug 1267640 for CVE-2026-46120",
"url": "https://bugzilla.suse.com/1267640"
},
{
"category": "external",
"summary": "SUSE Bug 1267893 for CVE-2026-46120",
"url": "https://bugzilla.suse.com/1267893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46120"
},
{
"cve": "CVE-2026-52991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52991"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/psi: fix race between file release and pressure write\n\nA potential race condition exists between pressure write and cgroup file\nrelease regarding the priv member of struct kernfs_open_file, which\ntriggers the uaf reported in [1].\n\nConsider the following scenario involving execution on two separate CPUs:\n\n CPU0\t\t\t\t\tCPU1\n ====\t\t\t\t\t====\n\t\t\t\t\tvfs_rmdir()\n\t\t\t\t\tkernfs_iop_rmdir()\n\t\t\t\t\tcgroup_rmdir()\n\t\t\t\t\tcgroup_kn_lock_live()\n\t\t\t\t\tcgroup_destroy_locked()\n\t\t\t\t\tcgroup_addrm_files()\n\t\t\t\t\tcgroup_rm_file()\n\t\t\t\t\tkernfs_remove_by_name()\n\t\t\t\t\tkernfs_remove_by_name_ns()\n vfs_write()\t\t\t\t__kernfs_remove()\n new_sync_write()\t\t\tkernfs_drain()\n kernfs_fop_write_iter()\t\tkernfs_drain_open_files()\n cgroup_file_write()\t\t\tkernfs_release_file()\n pressure_write()\t\t\tcgroup_file_release()\n ctx = of-\u003epriv;\n\t\t\t\t\tkfree(ctx);\n \t\t\t\t\tof-\u003epriv = NULL;\n\t\t\t\t\tcgroup_kn_unlock()\n cgroup_kn_lock_live()\n cgroup_get(cgrp)\n cgroup_kn_unlock()\n if (ctx-\u003epsi.trigger) // here, trigger uaf for ctx, that is of-\u003epriv\n\nThe cgroup_rmdir() is protected by the cgroup_mutex, it also safeguards\nthe memory deallocation of of-\u003epriv performed within cgroup_file_release().\nHowever, the operations involving of-\u003epriv executed within pressure_write()\nare not entirely covered by the protection of cgroup_mutex. Consequently,\nif the code in pressure_write(), specifically the section handling the\nctx variable executes after cgroup_file_release() has completed, a uaf\nvulnerability involving of-\u003epriv is triggered.\n\nTherefore, the issue can be resolved by extending the scope of the\ncgroup_mutex lock within pressure_write() to encompass all code paths\ninvolving of-\u003epriv, thereby properly synchronizing the race condition\noccurring between cgroup_file_release() and pressure_write().\n\nAnd, if an live kn lock can be successfully acquired while executing\nthe pressure write operation, it indicates that the cgroup deletion\nprocess has not yet reached its final stage; consequently, the priv\npointer within open_file cannot be NULL. Therefore, the operation to\nretrieve the ctx value must be moved to a point *after* the live kn\nlock has been successfully acquired.\n\nIn another situation, specifically after entering cgroup_kn_lock_live()\nbut before acquiring cgroup_mutex, there exists a different class of\nrace condition:\n\nCPU0: write memory.pressure CPU1: write cgroup.pressure=0\n===========================\t\t =============================\n\nkernfs_fop_write_iter()\n kernfs_get_active_of(of)\n pressure_write()\n cgroup_kn_lock_live(memory.pressure)\n cgroup_tryget(cgrp)\n kernfs_break_active_protection(kn)\n ... blocks on cgroup_mutex\n\n \t cgroup_pressure_write()\n \t cgroup_kn_lock_live(cgroup.pressure)\n \t cgroup_file_show(memory.pressure, false)\n \t kernfs_show(false)\n \t kernfs_drain_open_files()\n \t cgroup_file_release(of)\n \t kfree(ctx)\n \t of-\u003epriv = NULL\n \t cgroup_kn_unlock()\n\n ... acquires cgroup_mutex\n ctx = of-\u003epriv; // may now be NULL\n if (ctx-\u003epsi.trigger) // NULL dereference\n\nConsequently, there is a possibility that of-\u003epriv is NULL, the pressure\nwrite needs to check for this.\n\nNow that the scope of the cgroup_mutex has been expanded, the original\nexplicit cgroup_get/put operations are no longer necessary, this is\nbecause acquiring/releasing the live kn lock inherently executes a\ncgroup get/put operation.\n\n[1]\nBUG: KASAN: slab-use-after-free in pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\nCall Trace:\n pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\n cgroup_file_write+0x36f/0x790 kernel/cgroup/cgroup.c:43\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52991",
"url": "https://www.suse.com/security/cve/CVE-2026-52991"
},
{
"category": "external",
"summary": "SUSE Bug 1269134 for CVE-2026-52991",
"url": "https://bugzilla.suse.com/1269134"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-52991"
},
{
"cve": "CVE-2026-53009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53009"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix double-free of tx_buf skb\n\nIf ice_tso() or ice_tx_csum() fail, the error path in\nice_xmit_frame_ring() frees the skb, but the \u0027first\u0027 tx_buf still points\nto it and is marked as valid (ICE_TX_BUF_SKB).\n\u0027next_to_use\u0027 remains unchanged, so the potential problem will\nlikely fix itself when the next packet is transmitted and the tx_buf\ngets overwritten. But if there is no next packet and the interface is\nbrought down instead, ice_clean_tx_ring() -\u003e ice_unmap_and_free_tx_buf()\nwill find the tx_buf and free the skb for the second time.\n\nThe fix is to reset the tx_buf type to ICE_TX_BUF_EMPTY in the error\npath, so that ice_unmap_and_free_tx_buf().\nMove the initialization of \u0027first\u0027 up, to ensure it\u0027s already valid in\ncase we hit the linearization error path.\n\nThe bug was spotted by AI while I had it looking for something else.\nIt also proposed an initial version of the patch.\n\nI reproduced the bug and tested the fix by adding code to inject\nfailures, on a build with KASAN.\n\nI looked for similar bugs in related Intel drivers and did not find any.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53009",
"url": "https://www.suse.com/security/cve/CVE-2026-53009"
},
{
"category": "external",
"summary": "SUSE Bug 1269098 for CVE-2026-53009",
"url": "https://bugzilla.suse.com/1269098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53009"
},
{
"cve": "CVE-2026-53016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53016"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - copy IV using skcipher ivsize\n\nAF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver.\n\nccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller\u0027s IV\nbuffer while RFC3686 skciphers expose an 8-byte IV, so the restore\noverruns the provided buffer.\n\nUse crypto_skcipher_ivsize() to copy only the algorithm\u0027s IV length.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53016",
"url": "https://www.suse.com/security/cve/CVE-2026-53016"
},
{
"category": "external",
"summary": "SUSE Bug 1269090 for CVE-2026-53016",
"url": "https://bugzilla.suse.com/1269090"
},
{
"category": "external",
"summary": "SUSE Bug 1269766 for CVE-2026-53016",
"url": "https://bugzilla.suse.com/1269766"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-53016"
},
{
"cve": "CVE-2026-53136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Clamp VBIOS HDMI retimer register count to array size\n\n[Why \u0026 How]\nThe VBIOS integrated info tables (v1_11 and v2_1) contain HdmiRegNum and\nHdmi6GRegNum fields that are used as loop bounds when copying retimer I2C\nregister settings into fixed-size arrays (dp*_ext_hdmi_reg_settings[9]\nand dp*_ext_hdmi_6g_reg_settings[3]). These u8 fields are not validated\nbefore use, so a malformed VBIOS can specify values up to 255, causing an\nout-of-bounds heap write during driver probe.\n\nClamp each register count to the destination array size using min_t()\nbefore the copy loops, in both get_integrated_info_v11() and\nget_integrated_info_v2_1().\n\n(cherry picked from commit 5a7f0ef90195940c54b0f5bb85b87da55f038c69)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53136",
"url": "https://www.suse.com/security/cve/CVE-2026-53136"
},
{
"category": "external",
"summary": "SUSE Bug 1269811 for CVE-2026-53136",
"url": "https://bugzilla.suse.com/1269811"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53136"
},
{
"cve": "CVE-2026-53189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53189"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: update file PMD counter before folio_put()\n\n__split_huge_pmd_locked() updates the file/shmem RSS counter after\ndropping the PMD mapping\u0027s folio reference. If folio_put() drops the last\nreference, mm_counter_file() can later read freed folio state via\nfolio_test_swapbacked().\n\nMove the counter update before folio_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53189",
"url": "https://www.suse.com/security/cve/CVE-2026-53189"
},
{
"category": "external",
"summary": "SUSE Bug 1269797 for CVE-2026-53189",
"url": "https://bugzilla.suse.com/1269797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53189"
},
{
"cve": "CVE-2026-53329",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53329"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Use krealloc_array() in dal_vector_reserve()\n\n[Why \u0026 How]\ndal_vector_reserve() computes the allocation size as\n\"capacity * vector-\u003estruct_size\" using uint32_t arithmetic, which can\nsilently wrap to a small value on overflow. This would cause krealloc to\nreturn a smaller buffer than expected, leading to heap overflows on\nsubsequent vector appends.\n\nReplace krealloc() with krealloc_array() which performs an internal\noverflow check and returns NULL on wrap, preventing the issue.\n\n(cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53329",
"url": "https://www.suse.com/security/cve/CVE-2026-53329"
},
{
"category": "external",
"summary": "SUSE Bug 1270058 for CVE-2026-53329",
"url": "https://bugzilla.suse.com/1270058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53329"
},
{
"cve": "CVE-2026-53374",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53374"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: zero-initialize GART table on allocation\n\nGART TLB is flushed after unmapping but not after mapping. Since\namdgpu_bo_create_kernel() does not zero-initialize the buffer, when a\nsingle PTE is written the TLB may speculatively load other uninitialized\nentries from the same cacheline. Those garbage entries can appear valid,\nand a subsequent write to another PTE in the same cacheline may cause the\nGPU to use a stale garbage PTE from the TLB.\n\nFix this by calling memset_io() to zero-initialize the GART table with\ngart_pte_flags immediately after allocation.\n\nUsing AMDGPU_GEM_CREATE_VRAM_CLEARED, SDMA-based clear will not work\nsince SDMA needs GART to be initialized to work.\n\n(cherry picked from commit d9af8263b82b6eaa60c5718e0c6631c5037e4b24)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53374",
"url": "https://www.suse.com/security/cve/CVE-2026-53374"
},
{
"category": "external",
"summary": "SUSE Bug 1271827 for CVE-2026-53374",
"url": "https://bugzilla.suse.com/1271827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53374"
},
{
"cve": "CVE-2026-63879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63879"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix amdgpu_hmm_range_get_pages\n\nThe notifier sequence must only be read once or otherwise we could work\nwith invalid pages.\n\nWhile at it also fix the coding style, e.g. drop the pre-initialized\nreturn value and use the common define for 2G range.\n\n(cherry picked from commit c08972f555945cda57b0adb72272a37910153390)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63879",
"url": "https://www.suse.com/security/cve/CVE-2026-63879"
},
{
"category": "external",
"summary": "SUSE Bug 1272569 for CVE-2026-63879",
"url": "https://bugzilla.suse.com/1272569"
},
{
"category": "external",
"summary": "SUSE Bug 1272585 for CVE-2026-63879",
"url": "https://bugzilla.suse.com/1272585"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63879"
},
{
"cve": "CVE-2026-63884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix potential UAF in TTM object purge\n\nTLDR: The bo-\u003ettm object might be changed by calling ttm_bo_validate(),\n move casting it to an i915_tt object later to actually get the right\n pointer.\n\nA user reported hitting the following bug under heavy use on DG2:\n\n[26620.095550] Oops: general protection fault, probably for non-canonical address 0xa56b6b6b6b6b6b8b: 0000 1 SMP NOPTI\n[26620.095556] CPU: 2 UID: 0 PID: 631 Comm: Xorg Not tainted 6.18.8 #1 PREEMPT(lazy)\n[26620.095558] Hardware name: ASRock B850M Steel Legend WiFi/B850M Steel Legend WiFi, BIOS 3.50 09/18/2025\n[26620.095559] RIP: 0010:i915_ttm_purge+0x84/0x100 [i915]\n[26620.095604] Code: 00 00 00 48 8d 54 24 10 48 89 e6 48 89 fb e8 83 aa ae ff 85 c0 75 6f 48 83 bb a8 01 00 00 00 74 2c 48 8b 45 78 48 85 c0 74 23 \u003c48\u003e 8b 78 20 48 c7 c2 ff ff ff ff 31 f6 e8 7a 73 e3 e0 48 8b 7d 78\n[26620.095605] RSP: 0018:ffffc90005fd7430 EFLAGS: 00010282\n[26620.095607] RAX: a56b6b6b6b6b6b6b RBX: ffff8881f46c3dc0 RCX: 0000000000000000\n[26620.095608] RDX: 0000000000000000 RSI: 0000000000000246 RDI: 00000000ffffffff\n[26620.095609] RBP: ffff888289610f00 R08: 0000000000000001 R09: ffff88823b022000\n[26620.095609] R10: ffff888103029b28 R11: ffff8881fc7f3800 R12: ffff88810b6150d0\n[26620.095609] R13: ffff888289610f00 R14: 0000000000000000 R15: ffff8881f46c3dc0\n[26620.095610] FS: 00007f1004d86900(0000) GS:ffff88901c858000(0000) knlGS:0000000000000000\n[26620.095611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[26620.095611] CR2: 00007f0fdf489000 CR3: 000000035b0c1000 CR4: 0000000000750ef0\n[26620.095612] PKRU: 55555554\n[26620.095612] Call Trace:\n[26620.095615] \u003cTASK\u003e\n[26620.095615] i915_ttm_move+0x2b9/0x420 [i915]\n[26620.095642] ? ttm_tt_init+0x65/0x80 [ttm]\n[26620.095644] ? i915_ttm_tt_create+0xc6/0x150 [i915]\n[26620.095667] ttm_bo_handle_move_mem+0xb6/0x160 [ttm]\n[26620.095669] ttm_bo_evict+0x100/0x150 [ttm]\n[26620.095671] ? preempt_count_add+0x64/0xa0\n[26620.095673] ? _raw_spin_lock+0xe/0x30\n[26620.095675] ? _raw_spin_unlock+0xd/0x30\n[26620.095675] ? i915_gem_object_evictable+0xb7/0xd0 [i915]\n[26620.095704] ttm_bo_evict_cb+0x6e/0xd0 [ttm]\n[26620.095705] ttm_lru_walk_for_evict+0xa6/0x200 [ttm]\n[26620.095708] ttm_bo_alloc_resource+0x185/0x4f0 [ttm]\n[26620.095709] ? init_object+0x62/0xd0\n[26620.095712] ttm_bo_validate+0x7a/0x180 [ttm]\n[26620.095713] ? _raw_spin_unlock_irqrestore+0x16/0x30\n[26620.095714] __i915_ttm_get_pages+0xb0/0x170 [i915]\n[26620.095737] i915_ttm_get_pages+0x9f/0x150 [i915]\n[26620.095759] ? i915_gem_do_execbuffer+0xedc/0x2b40 [i915]\n[26620.095786] ? alloc_debug_processing+0xd0/0x100\n[26620.095787] ? _raw_spin_unlock_irqrestore+0x16/0x30\n[26620.095788] ? i915_vma_instance+0xa0/0x4e0 [i915]\n[26620.095822] __i915_gem_object_get_pages+0x2f/0x40 [i915]\n[26620.095848] i915_vma_pin_ww+0x706/0x980 [i915]\n[26620.095875] ? i915_gem_do_execbuffer+0xedc/0x2b40 [i915]\n[26620.095904] eb_validate_vmas+0x170/0xa00 [i915]\n[26620.095930] i915_gem_do_execbuffer+0x1201/0x2b40 [i915]\n[26620.095953] ? alloc_debug_processing+0xd0/0x100\n[26620.095954] ? _raw_spin_unlock_irqrestore+0x16/0x30\n[26620.095955] ? i915_gem_execbuffer2_ioctl+0xc9/0x240 [i915]\n[26620.095977] ? __wake_up_sync_key+0x32/0x50\n[26620.095979] ? i915_gem_execbuffer2_ioctl+0xc9/0x240 [i915]\n[26620.096001] ? __slab_alloc.isra.0+0x67/0xc0\n[26620.096003] i915_gem_execbuffer2_ioctl+0x11a/0x240 [i915]\n\nResults from decode_stacktrace.sh pointed to dereference of a file pointer\nfield of a i915 TTM page vector container associated with an object being\npurged on eviction. That path is taken when the object is marked as no\nlonger needed.\n\nCode analysis revealed a possibility of the i915 TTM page vector container\nbeing replaced with a new instance inside a function that purges content\nof the object, should it be still busy. That function is called,\nindirectly via a more general function that changes the object\u0027s placement\nand caching policy,\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63884",
"url": "https://www.suse.com/security/cve/CVE-2026-63884"
},
{
"category": "external",
"summary": "SUSE Bug 1272573 for CVE-2026-63884",
"url": "https://bugzilla.suse.com/1272573"
},
{
"category": "external",
"summary": "SUSE Bug 1272587 for CVE-2026-63884",
"url": "https://bugzilla.suse.com/1272587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63884"
},
{
"cve": "CVE-2026-63887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf\n\niscsi_encode_text_output() concatenates \"key=value\\0\" records into\nlogin-\u003ersp_buf, an 8192-byte kzalloc(MAX_KEY_VALUE_PAIRS) buffer\nallocated in iscsit_alloc_login_setup_buffer(). The three sprintf() call\nsites in this function (lines 1398, 1411, 1424 in v7.1-rc2) never check\nthe remaining buffer capacity:\n\n\t*length += sprintf(output_buf, \"%s=%s\", er-\u003ekey, er-\u003evalue);\n\t*length += 1;\n\toutput_buf = textbuf + *length;\n\nThe 8192-byte ceiling at iscsi_target_check_login_request() bounds the\n*input* Login PDU payload, but a single PDU can carry up to 2048 minimal\nfour-byte \"a=b\\0\" pairs, each unknown key expanding to a 16-byte\n\"a=NotUnderstood\\0\" output record via iscsi_add_notunderstood_response().\n2048 * 16 = 32 KiB of output into an 8 KiB buffer, producing a ~24 KiB\nheap overrun in the kmalloc-8k slab.\n\nThe fix introduces a static iscsi_encode_text_record() helper that uses\nsnprintf() with a per-call bounds check against the remaining buffer,\nand threads a u32 textbuf_size parameter through\niscsi_encode_text_output(). Both call sites in\niscsi_target_handle_csg_zero() (PHASE_SECURITY) and\niscsi_target_handle_csg_one() (PHASE_OPERATIONAL) pass\nMAX_KEY_VALUE_PAIRS. On overflow the encoder logs the condition, calls\niscsi_release_extra_responses() to drop queued records, and returns -1;\nboth caller sites now emit ISCSI_STATUS_CLS_INITIATOR_ERR /\nISCSI_LOGIN_STATUS_INIT_ERR via iscsit_tx_login_rsp() before returning,\nso the initiator sees an explicit failed-login response rather than a\nsilent connection drop. (Prior to this patch only the PHASE_OPERATIONAL\ncaller did that; the PHASE_SECURITY caller is converted to the same\nshape.)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63887",
"url": "https://www.suse.com/security/cve/CVE-2026-63887"
},
{
"category": "external",
"summary": "SUSE Bug 1272385 for CVE-2026-63887",
"url": "https://bugzilla.suse.com/1272385"
},
{
"category": "external",
"summary": "SUSE Bug 1272386 for CVE-2026-63887",
"url": "https://bugzilla.suse.com/1272386"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63887"
},
{
"cve": "CVE-2026-63888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-63888"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()\n\nTwo latent bugs in the Text-phase handler, both present since the\noriginal LIO integration in commit e48354ce078c (\"iscsi-target: Add\niSCSI fabric support for target v4.1\"):\n\n1) DataDigest CRC buffer overread (4 bytes past text_in).\n\n text_in is kzalloc()\u0027d at ALIGN(payload_length, 4). rx_size is then\n incremented by ISCSI_CRC_LEN to make room for the received DataDigest\n in the iovec, but the same (now-bumped) rx_size is passed as the\n buffer length to iscsit_crc_buf():\n\n if (conn-\u003econn_ops-\u003eDataDigest) {\n ...\n rx_size += ISCSI_CRC_LEN;\n }\n ...\n if (conn-\u003econn_ops-\u003eDataDigest) {\n data_crc = iscsit_crc_buf(text_in, rx_size, 0, NULL);\n\n iscsit_crc_buf() walks rx_size bytes of text_in with crc32c(), so\n when DataDigest is negotiated it reads 4 bytes past the end of the\n text_in allocation. KASAN reproduces this directly on the unpatched\n mainline tree as slab-out-of-bounds in crc32c() called from the Text\n PDU path. The OOB bytes feed crc32c() and are then compared against\n the initiator-supplied checksum, so the value does not flow back to\n the attacker, but the kernel does read past the buffer on every Text\n PDU with DataDigest=CRC32C.\n\n Fix by passing the actual padded payload length\n (ALIGN(payload_length, 4)) that was used for the kzalloc().\n\n2) Stale cmd-\u003etext_in_ptr re-free (double-free) on ERL\u003e0 bad DataDigest\n drop.\n\n On DataDigest mismatch with ErrorRecoveryLevel \u003e 0 the handler\n silently drops the PDU and lets the initiator plug the CmdSN gap:\n\n kfree(text_in);\n return 0;\n\n cmd-\u003etext_in_ptr still points at the freed buffer. The next Text\n Request on the same ITT re-enters iscsit_setup_text_cmd(), which\n unconditionally does\n\n kfree(cmd-\u003etext_in_ptr);\n cmd-\u003etext_in_ptr = NULL;\n\n freeing the same pointer a second time. Session teardown via\n iscsit_release_cmd() has the same shape and hits the same double-free\n if the connection is dropped before a second Text Request arrives.\n\n On an unmodified mainline tree the bug-1 CRC overread fires first on\n the initial valid Text Request and perturbs the subsequent state, so\n #4 was isolated by building a kernel with only the bug-1 hunk of this\n patch applied plus temporary printk() observability around the three\n relevant kfree() sites. The observability prints are not part of\n this patch. On that build, a three-PDU Text Request sequence after\n login produces two back-to-back splats:\n\n BUG: KASAN: double-free in iscsit_setup_text_cmd+0x??\n BUG: KASAN: double-free in iscsit_release_cmd+0x??\n\n showing the same pointer freed in the ERL\u003e0 drop path and again in\n iscsit_setup_text_cmd() (next Text Request on the same ITT) and once\n more in iscsit_release_cmd() (session teardown). On distro kernels\n with CONFIG_SLAB_FREELIST_HARDENED=y (default) the double-free\n becomes a remote kernel BUG(); on non-hardened kernels it corrupts\n the slab freelist.\n\n Fix by clearing cmd-\u003etext_in_ptr after the kfree() in the ERL\u003e0 drop\n path. With both hunks applied #4 is directly observable on the stock\n tree without observability printks; fixing bug-1 alone would mask #4\n less, not more, so the hunks are submitted together.\n\nBoth fixes are one-liners. The Text PDU state machine is unchanged and\nthe wire protocol is unaffected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-63888",
"url": "https://www.suse.com/security/cve/CVE-2026-63888"
},
{
"category": "external",
"summary": "SUSE Bug 1272390 for CVE-2026-63888",
"url": "https://bugzilla.suse.com/1272390"
},
{
"category": "external",
"summary": "SUSE Bug 1272391 for CVE-2026-63888",
"url": "https://bugzilla.suse.com/1272391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-63888"
},
{
"cve": "CVE-2026-64048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64048"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot\n\nOn the SMC-D client, slot 0 of ini-\u003eism_dev[]/ini-\u003eism_chid[] is\nreserved for an SMC-Dv1 device. smc_find_ism_v2_device_clnt()\npopulates V2 entries starting at index 1, so when no V1 device is\nselected slot 0 is left in its kzalloc()\u0027ed state with ism_dev[0] ==\nNULL and ism_chid[0] == 0.\n\nsmc_v2_determine_accepted_chid() then matches the peer\u0027s CHID against\nthe array starting from index 0 using the CHID alone. A malicious\npeer replying to a SMC-Dv2-only proposal with d1.chid == 0 matches\nthe empty slot, ini-\u003eism_selected becomes 0, and the subsequent\nism_dev[0]-\u003elgr_lock dereference in smc_conn_create() faults at\noffsetof(struct smcd_dev, lgr_lock) == 0x68:\n\n BUG: KASAN: null-ptr-deref in _raw_spin_lock_bh+0x79/0xe0\n Write of size 4 at addr 0000000000000068 by task exploit/144\n Call Trace:\n _raw_spin_lock_bh\n smc_conn_create (net/smc/smc_core.c:1997)\n __smc_connect (net/smc/af_smc.c:1447)\n smc_connect (net/smc/af_smc.c:1720)\n __sys_connect\n __x64_sys_connect\n do_syscall_64\n\nRequire ism_dev[i] to be non-NULL before accepting a CHID match.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64048",
"url": "https://www.suse.com/security/cve/CVE-2026-64048"
},
{
"category": "external",
"summary": "SUSE Bug 1273484 for CVE-2026-64048",
"url": "https://bugzilla.suse.com/1273484"
},
{
"category": "external",
"summary": "SUSE Bug 1273513 for CVE-2026-64048",
"url": "https://bugzilla.suse.com/1273513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-64048"
},
{
"cve": "CVE-2026-64219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64219"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async\n\n[Why\u0026How]\ndc_process_dmub_aux_transfer_async() copies payload-\u003elength bytes into a\n16-byte stack buffer (dpaux.data[16]) guarded only by an ASSERT(), which\nis a no-op in release builds. If a caller ever passes length \u003e 16 this\nresults in a stack buffer overflow via memcpy.\n\nAdditionally, link_index is used to dereference dc-\u003elinks[] without\nbounds checking against dc-\u003elink_count, risking an out-of-bounds access.\n\nReplace the ASSERT with a hard runtime check that returns false when\npayload-\u003elength exceeds the destination buffer size, and add a bounds\ncheck for link_index before it is used.\n\n(cherry picked from commit ba4caa9fecdf7a38f98c878ad05a8a64148b6881)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64219",
"url": "https://www.suse.com/security/cve/CVE-2026-64219"
},
{
"category": "external",
"summary": "SUSE Bug 1273811 for CVE-2026-64219",
"url": "https://bugzilla.suse.com/1273811"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64219"
},
{
"cve": "CVE-2026-64379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64379"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: mask server-provided mode to 07777 in modefromsid\n\nWhen modefromsid is active, parse_dacl() applies the server-provided\nsub_auth[2] value from the NFS mode SID to cf_mode without masking to\n07777. Apply the correct masking, same as in the read path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64379",
"url": "https://www.suse.com/security/cve/CVE-2026-64379"
},
{
"category": "external",
"summary": "SUSE Bug 1273029 for CVE-2026-64379",
"url": "https://bugzilla.suse.com/1273029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64379"
},
{
"cve": "CVE-2026-64496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64496"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: event: Fix event FIFO reset race\n\n`iio_event_getfd()` creates the event file descriptor with\n`anon_inode_getfd()`, which allocates a new fd, creates the anonymous\nfile and installs it in the process fd table before returning to the\ncaller.\n\nThe IIO code resets the event FIFO after `anon_inode_getfd()` has returned,\nbut before `IIO_GET_EVENT_FD_IOCTL` has copied the fd number to userspace.\nBut since fd tables are shared between threads, another thread can guess\nthe newly allocated fd number and issue a `read()` on it as soon as the fd\nhas been installed.\n\nThis means the `kfifo_to_user()` in `iio_event_chrdev_read()` can run in\nparallel with the `kfifo_reset_out()` in `iio_event_getfd()`.\n\nThe kfifo documentation says that `kfifo_reset_out()` is only safe when it\nis called from the reader thread and there is only one concurrent reader.\nOtherwise it is dangerous and must be handled in the same way as\n`kfifo_reset()`.\n\nIf that happens, `kfifo_to_user()` can advance the FIFO `out` index based\non state from before the reset, after the reset has already moved the `out`\nindex to the current `in` index. That can leave the FIFO with an `out`\nindex past the `in` index. A later `read()` can then see an underflowed\nFIFO length and copy more data than the event FIFO buffer contains. This\ncan result in an out-of-bounds read and leak adjacent kernel memory to\nuserspace.\n\nMove the FIFO reset before `anon_inode_getfd()`. At that point the event fd is\nmarked busy, but the new fd has not been installed yet, so userspace cannot\naccess it while the FIFO is reset.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64496",
"url": "https://www.suse.com/security/cve/CVE-2026-64496"
},
{
"category": "external",
"summary": "SUSE Bug 1273600 for CVE-2026-64496",
"url": "https://bugzilla.suse.com/1273600"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64496"
},
{
"cve": "CVE-2026-68388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68388"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: handle overlapping allocated ranges in fallocate\n\nsmb3_simple_fallocate_range() can skip holes when an allocated range\nreturned by the server starts before the current fallocate offset. The\nskipped hole is not zero-filled, but fallocate still returns success. A\nlater write to that hole may therefore fail with ENOSPC.\n\nThe function queries allocated ranges so that it can preserve existing\ncontents and write zeroes only into holes. However, the server may return\na range that starts before the current fallocate offset.\n\nFor example, assume the fallocate request is [100, 400) and the only\nallocated range returned by the server is [0, 200):\n\n Request: [100, 400)\n Server range: [ 0, 200) allocated\n\n Correct:\n [100, 200) allocated data, skip\n [200, 400) hole, zero-fill\n\n Current:\n [100, 300) skipped\n [300, 400) zero-filled afterwards\n\nThe current code adds the full server range length, 200, to the current\noffset 100 and moves to 300. As a result, the hole in [200, 300) is\nskipped without being zero-filled.\n\nFix this by advancing only over the part of the allocated range that\noverlaps the current fallocate offset. Ignore ranges that end before the\ncurrent offset and reject ranges whose end offset overflows.\n\nThis also prevents a malformed range length from causing an out-of-bounds\nzero-buffer read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68388",
"url": "https://www.suse.com/security/cve/CVE-2026-68388"
},
{
"category": "external",
"summary": "SUSE Bug 1274902 for CVE-2026-68388",
"url": "https://bugzilla.suse.com/1274902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.157.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.157.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.157.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-68388"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…