OPENSUSE-SU-2026:12497-1
Vulnerability from csaf_opensuse - Published: 2026-11-09 00:00 - Updated: 2026-11-10 14:58Summary
kernel-devel-7.3.3-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: kernel-devel-7.3.3-1.1 on GA media
Description of the patch: These are all security issues fixed in the kernel-devel-7.3.3-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12497
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.8 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
low
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
low
6.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
important
4.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-99218
Threats
Impact
moderate
References
88 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "kernel-devel-7.3.3-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the kernel-devel-7.3.3-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-12497",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/2026/opensuse-su-2026_12497-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99218 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99219 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99220 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99221 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99222 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99223 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99224 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99225 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99226 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99227 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99228 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99229 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99230 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99231 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99232 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99233 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99234 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99235 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99236 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99237 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99238 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99239 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99240 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99244 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99245 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99245/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99253 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99253/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-99255 page",
"url": "https://www.suse.com/security/cve/CVE-2026-99255/"
}
],
"title": "kernel-devel-7.3.3-1.1 on GA media",
"tracking": {
"current_release_date": "2026-11-10T14:58:22Z",
"generator": {
"date": "2026-11-09T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:12497-1",
"initial_release_date": "2026-11-09T00:00:00Z",
"revision_history": [
{
"date": "2026-11-09T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-11-10T14:58:22Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.3.3-1.1.aarch64",
"product": {
"name": "kernel-devel-0:7.3.3-1.1.aarch64",
"product_id": "kernel-devel-0:7.3.3-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.3.3-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.3.3-1.1.aarch64",
"product": {
"name": "kernel-macros-0:7.3.3-1.1.aarch64",
"product_id": "kernel-macros-0:7.3.3-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.3.3-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.3.3-1.1.aarch64",
"product": {
"name": "kernel-source-0:7.3.3-1.1.aarch64",
"product_id": "kernel-source-0:7.3.3-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.3.3-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"product": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"product_id": "kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.3.3-1.1?arch=aarch64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.3.3-1.1.ppc64le",
"product": {
"name": "kernel-devel-0:7.3.3-1.1.ppc64le",
"product_id": "kernel-devel-0:7.3.3-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.3.3-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.3.3-1.1.ppc64le",
"product": {
"name": "kernel-macros-0:7.3.3-1.1.ppc64le",
"product_id": "kernel-macros-0:7.3.3-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.3.3-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.3.3-1.1.ppc64le",
"product": {
"name": "kernel-source-0:7.3.3-1.1.ppc64le",
"product_id": "kernel-source-0:7.3.3-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.3.3-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"product": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"product_id": "kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.3.3-1.1?arch=ppc64le\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.3.3-1.1.s390x",
"product": {
"name": "kernel-devel-0:7.3.3-1.1.s390x",
"product_id": "kernel-devel-0:7.3.3-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.3.3-1.1?arch=s390x\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.3.3-1.1.s390x",
"product": {
"name": "kernel-macros-0:7.3.3-1.1.s390x",
"product_id": "kernel-macros-0:7.3.3-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.3.3-1.1?arch=s390x\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.3.3-1.1.s390x",
"product": {
"name": "kernel-source-0:7.3.3-1.1.s390x",
"product_id": "kernel-source-0:7.3.3-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.3.3-1.1?arch=s390x\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.3.3-1.1.s390x",
"product": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.s390x",
"product_id": "kernel-source-vanilla-0:7.3.3-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.3.3-1.1?arch=s390x\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-0:7.3.3-1.1.x86_64",
"product": {
"name": "kernel-devel-0:7.3.3-1.1.x86_64",
"product_id": "kernel-devel-0:7.3.3-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@7.3.3-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-macros-0:7.3.3-1.1.x86_64",
"product": {
"name": "kernel-macros-0:7.3.3-1.1.x86_64",
"product_id": "kernel-macros-0:7.3.3-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-macros@7.3.3-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-0:7.3.3-1.1.x86_64",
"product": {
"name": "kernel-source-0:7.3.3-1.1.x86_64",
"product_id": "kernel-source-0:7.3.3-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source@7.3.3-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-0:7.3.3-1.1.x86_64",
"product": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.x86_64",
"product_id": "kernel-source-vanilla-0:7.3.3-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:7.3.3:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-source-vanilla@7.3.3-1.1?arch=x86_64\u0026upstream=kernel-source-0:7.3.3-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64"
},
"product_reference": "kernel-devel-0:7.3.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le"
},
"product_reference": "kernel-devel-0:7.3.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.3.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x"
},
"product_reference": "kernel-devel-0:7.3.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:7.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64"
},
"product_reference": "kernel-devel-0:7.3.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64"
},
"product_reference": "kernel-macros-0:7.3.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le"
},
"product_reference": "kernel-macros-0:7.3.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.3.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x"
},
"product_reference": "kernel-macros-0:7.3.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-0:7.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64"
},
"product_reference": "kernel-macros-0:7.3.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64"
},
"product_reference": "kernel-source-0:7.3.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le"
},
"product_reference": "kernel-source-0:7.3.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.3.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x"
},
"product_reference": "kernel-source-0:7.3.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-0:7.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64"
},
"product_reference": "kernel-source-0:7.3.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64"
},
"product_reference": "kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le"
},
"product_reference": "kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x"
},
"product_reference": "kernel-source-vanilla-0:7.3.3-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-vanilla-0:7.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
},
"product_reference": "kernel-source-vanilla-0:7.3.3-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-99218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99218"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncoredump: hold RCU while releasing parked threads\n\ncoredump_finish() releases the parked threads by clearing -\u003etask in\ntheir core_thread entry and calling wake_up_process() on each of them.\nIt does that without holding a reference on the task and without being\ninside rcu.\n\nBut calling wake_up_process(task) without rcu here isn\u0027t safe. A parked\nthread doesn\u0027t need that wakeup to leave. A spurious wakeup or a\npreemption after the store is enough for the task to go away.\n\nSo if the coredump client is preempted between the store and\nwake_up_process() the thread can exit and be freed in the meantime and\ntry_to_wake_up() takes pi_lock in freed memory.\n\nHold rcu across the loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99218",
"url": "https://www.suse.com/security/cve/CVE-2026-99218"
},
{
"category": "external",
"summary": "SUSE Bug 1289176 for CVE-2026-99218",
"url": "https://bugzilla.suse.com/1289176"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99218"
},
{
"cve": "CVE-2026-99219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99219"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Initialize modname and offset in print_rec()\n\nprint_rec() leaves \u0027modname\u0027 and \u0027offset\u0027 uninitialized and\nkallsyms_lookup() only sets them on success. When the lookup fails like\nwhen a module is being loaded or unloaded, \u0027modname\u0027 holds a garbage\nvalue, passes the \u0027if (modname)\u0027 check, and is dereferenced by\nseq_printf().\n\n Oops: general protection fault\n RIP: 0010:string+0x48/0xe0\n Call Trace:\n vsnprintf+0x1f5/0x650\n seq_printf+0x8e/0xb0\n print_rec+0x6c/0xc0\n t_show+0x4c/0x440\n seq_read_iter+0x119/0x480\n\nThis can be triggered by reading available_filter_functions while a\nmodule is being loaded or unloaded.\n\nInitialize both variables so a failed lookup skips the module name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99219",
"url": "https://www.suse.com/security/cve/CVE-2026-99219"
},
{
"category": "external",
"summary": "SUSE Bug 1289188 for CVE-2026-99219",
"url": "https://bugzilla.suse.com/1289188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99219"
},
{
"cve": "CVE-2026-99220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99220"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nasymmetric_keys: reject trust keys without IDs\n\nThe PKCS#8 parser deliberately leaves the asym_key_ids payload slot\nempty. key_or_keyring_common() unconditionally dereferences that slot\nwhen a PKCS#8 key is supplied to a key_or_keyring restriction. Both the\nplain and :chain forms reach this branch, allowing an unprivileged caller\nto trigger a NULL pointer dereference through KEYCTL_RESTRICT_KEYRING\nfollowed by add_key().\n\n Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000\n KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n RIP: 0010:key_or_keyring_common (crypto/asymmetric_keys/restrict.c:205 crypto/asymmetric_keys/restrict.c:279)\n Call Trace:\n \u003cTASK\u003e\n __key_create_or_update (security/keys/key.c:884)\n key_create_or_update (security/keys/key.c:1021)\n __do_sys_add_key (security/keys/keyctl.c:134)\n do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n \u003c/TASK\u003e\n Kernel panic - not syncing: Fatal exception\n\nReject an asymmetric restriction key without key IDs. A PKCS#8 private\nkey cannot identify the signer of a candidate certificate and is not a\nvalid trust anchor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99220",
"url": "https://www.suse.com/security/cve/CVE-2026-99220"
},
{
"category": "external",
"summary": "SUSE Bug 1289225 for CVE-2026-99220",
"url": "https://bugzilla.suse.com/1289225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99220"
},
{
"cve": "CVE-2026-99221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99221"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys/trusted_keys: return immediately after TPM unseal failure\n\ntrusted_tpm_unseal() proceeds to pcrlock() when the TPM unseal operation\nfails. If pcrlock() succeeds, its return value overwrites the unseal error,\ncausing key instantiation to succeed.\n\nReturn immediately when unseal fails to preserve the original error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99221",
"url": "https://www.suse.com/security/cve/CVE-2026-99221"
},
{
"category": "external",
"summary": "SUSE Bug 1289204 for CVE-2026-99221",
"url": "https://bugzilla.suse.com/1289204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99221"
},
{
"cve": "CVE-2026-99222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99222"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Protect the read method check against type removal\n\nkeyctl_read_key() checks key-\u003etype-\u003eread without holding key-\u003esem.\nA reference keeps the key alive, but does not pin the module containing\nits type. A surviving RxRPC key can therefore be read while AF_RXRPC\nis being unloaded:\n\n KEYCTL_READ task Module unload and key GC\n ---------------- ------------------------\n lookup_user_key()\n permission / possession checks\n load key-\u003etype\n af_rxrpc_exit()\n unregister_key_type()\n GC: down_write(key-\u003esem)\n GC: retype to key_type_dead\n GC: up_write(key-\u003esem)\n unregister_key_type() returns\n free_module()\n read saved type\u0027s read member\n\nThe final access can read freed module storage. The read invocation in\n__keyctl_read_key() is already protected by key-\u003esem, but the earlier\nmethod check is outside that critical section.\n\nMove the method check into __keyctl_read_key(), after key_validate() and\nunder its existing read hold on key-\u003esem. The check and invocation then\nuse the same protected type for length queries and every read retry.\nThe GC cannot retype the key until the semaphore is released, and type\nunregistration waits for that GC pass before the module can be freed.\n\nReturn -EOPNOTSUPP when validation succeeds and the type has no read\nmethod. A temporary buffer may now be allocated before this result;\nallocation and copying to userspace remain outside the semaphore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99222",
"url": "https://www.suse.com/security/cve/CVE-2026-99222"
},
{
"category": "external",
"summary": "SUSE Bug 1289209 for CVE-2026-99222",
"url": "https://bugzilla.suse.com/1289209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99222"
},
{
"cve": "CVE-2026-99223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99223"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: make keyring indexes independent of kernel addresses\n\nKEYCTL_READ returns the serial numbers in a keyring in associative-array\ntraversal order. The first word of the index is a public, deterministic\nhash of the type pointer, domain pointer and description. An unprivileged\nuser can therefore insert keys with known descriptions, predict their\norder for each possible KASLR slide, and recover the kernel image address.\nOn an x86-64 build with 16 MiB alignment, 45 user keys suffice to\ndistinguish the candidate slides.\n\nRemove the addresses from the whole index, not just its first hash word.\nAssign each key type and domain a nonzero 64-bit ID and hash those IDs and\nthe description with a once-initialized SipHash key. Use the full IDs in\nthe later index chunks as well. Truncating or hashing the IDs there would\nlose the guarantee that distinct type/domain/description tuples have a\ndiffering index bit.\n\nAllocate IDs lazily since private key types need not be registered. Cache\nthem in the index key so tree walks and copies of an existing index do not\nneed to dereference a type descriptor that may have been unregistered.\nKeep the 32-bit chunk layout and diff_objects() bit offsets consistent,\nand retain the separate root slot for keyrings used by recursive search.\nThe key comparison, permissions and userspace data format are unchanged;\nonly the address-dependent in-memory ordering is replaced.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99223",
"url": "https://www.suse.com/security/cve/CVE-2026-99223"
},
{
"category": "external",
"summary": "SUSE Bug 1289224 for CVE-2026-99223",
"url": "https://bugzilla.suse.com/1289224"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-99223"
},
{
"cve": "CVE-2026-99224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99224"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Protect the type name while describing a key\n\nkeyctl_describe_key() must keep the key type\u0027s name alive until\nkasprintf() has consumed it. The retained key reference keeps the key\nand its description alive, but does not pin the module providing its\ntype. The name is passed to kasprintf() without holding key-\u003esem.\n\nkvasprintf() uses the saved name pointer in two formatting passes, with\na GFP_KERNEL allocation between them. With AF_RXRPC=m, a task that\npasses View permission before type retirement can overlap a privileged\nmodule unload in this order:\n\n1. KEYCTL_DESCRIBE looks up the key, saves key-\u003etype-\u003ename in the\n kasprintf() arguments and completes the first formatting pass.\n2. While the formatter is delayed before its second pass,\n af_rxrpc_exit() calls unregister_key_type(), which removes the type\n from the registry and waits for key_gc_keytype().\n3. The collector takes key-\u003esem for writing, retypes the retained key\n to key_type_dead and completes retirement. Unregistration and module\n exit return, allowing free_module() to release the type and name.\n4. The formatter resumes its second pass and reads the saved name from\n released module storage, which can fault in string().\n\nHold key-\u003esem for reading across kasprintf(). The collector then cannot\nretype the key or complete retirement until both formatting passes have\nfinished. If retirement wins the lock first, formatting uses the core\nkey_type_dead name instead. Release the semaphore immediately after\nkasprintf(), including on allocation failure, before copying to\nuserspace.\n\nOops report as below:\n\n BUG: unable to handle page fault for address: fffffbfff8054794\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n RIP: 0010:string+0x23f/0x470\n Call Trace:\n vsnprintf+0x330/0x1110",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99224",
"url": "https://www.suse.com/security/cve/CVE-2026-99224"
},
{
"category": "external",
"summary": "SUSE Bug 1289223 for CVE-2026-99224",
"url": "https://bugzilla.suse.com/1289223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99224"
},
{
"cve": "CVE-2026-99225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99225"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Check the authorization payload in process keyring searches\n\nAn authorization payload and its saved credentials must remain valid\nwhile search_process_keyrings_rcu() searches the requestor\u0027s keyrings.\nThe function validates the authorization key, then separately loads\npayload.data[0] and unconditionally reads rka-\u003ecred. Validation does\nnot prevent request_key_auth_revoke() from clearing the payload.\n\nA request-key helper can assume authority and fork a descendant that\ninherits the authorization key. If the descendant misses in its own\nkeyrings, it falls back to the saved requestor credentials. Successful\ntarget instantiation invalidates the authorization key without clearing\nthe payload. After the helper exits, UMH_WAIT_PROC returns to the\nrequester, which calls complete_request_key() and revokes that key.\n\nWith the descendant paused after validation, the paths can interleave\nas follows:\n\n 1. The descendant enters search_process_keyrings_rcu() under RCU and\n key_validate() succeeds.\n 2. The helper instantiates the target, invalidates the authorization\n key, and exits.\n 3. The requester resumes from UMH_WAIT_PROC, calls\n complete_request_key(), and revokes the authorization key.\n request_key_auth_revoke() sets its payload pointer to NULL.\n 4. The descendant loads NULL and dereferences rka-\u003ecred.\n\nThis NULL dereference can oops the kernel. RCU delays payload disposal\nbut does not prevent the pointer from being cleared.\n\nLoad the payload with dereference_key_rcu() and require a non-NULL\nresult before validating the authorization key and searching its saved\ncredentials. A non-NULL payload and its credentials remain alive for\nthe caller\u0027s RCU read-side section; a cleared payload skips the fallback\nsearch and follows the existing error selection.\n\nKASAN report as below:\n\n Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI\n KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]\n RIP: 0010:search_process_keyrings_rcu+0x32b/0x790",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99225",
"url": "https://www.suse.com/security/cve/CVE-2026-99225"
},
{
"category": "external",
"summary": "SUSE Bug 1289221 for CVE-2026-99225",
"url": "https://bugzilla.suse.com/1289221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99225"
},
{
"cve": "CVE-2026-99226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99226"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Avoid the owner account dereference in named keyring lookup\n\nNamed keyring lookup must keep the storage containing the owner UID\nalive through the namespace mapping check. find_keyring_by_name()\nreads keyring-\u003euser-\u003euid under keyring_name_lock, but that lock protects\nthe keyring\u0027s name entry and allocation, not its separate key_user.\n\nA named session-keyring join can overlap a privileged KEYCTL_CHOWN on\nanother CPU. If the keyring holds the last reference to its old dynamic\nkey_user and the ownership transfer succeeds, the following ordering is\npossible:\n\n Named join Chown\n find_keyring_by_name() keyctl_chown_key()\n read_lock(keyring_name_lock) down_write(key-\u003esem)\n load old keyring-\u003euser\n replace key-\u003euser and key-\u003euid\n up_write(key-\u003esem)\n key_put(key)\n key_user_put(old user): free\n read old user-\u003euid\n read_unlock(keyring_name_lock)\n\nChown neither takes keyring_name_lock nor key_session_mutex, so it can\nfree the old account between the pointer load and the UID read. The\nlookup then reads freed memory even though the keyring itself is alive.\n\nUse keyring-\u003euid for the mapping check. key_alloc() initializes this\ninline owner UID and keyctl_chown_key() updates it on chown.\nThe existing name lock keeps its containing keyring allocated throughout\nthe check, so lookup no longer depends on the account\u0027s lifetime. This\nalso matches the owner UID used by the permission check.\n\nKASAN report as below:\n\n BUG: KASAN: slab-use-after-free in find_keyring_by_name+0x577/0x5d0\n Read of size 4 at addr ffff8881128ae2ec by task keycase/500",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99226",
"url": "https://www.suse.com/security/cve/CVE-2026-99226"
},
{
"category": "external",
"summary": "SUSE Bug 1289220 for CVE-2026-99226",
"url": "https://bugzilla.suse.com/1289220"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99226"
},
{
"cve": "CVE-2026-99227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: prevent cancel reference wrap\n\nio_waitid packs the cancellation state into bit 31 of -\u003erefs and uses\nbits 30:0 as a 31-bit reference counter:\n\n #define IO_WAITID_CANCEL_FLAG BIT(31)\n #define IO_WAITID_REF_MASK GENMASK(30, 0)\n\n__io_waitid_cancel() marks a request canceled, then increments the low\nbits of -\u003erefs to claim completion ownership. When another path owns the\nrequest, the increment remains even though cancellation returns false.\nThe request remains discoverable by cancellation, so repeated failed\nattempts can wrap the 31-bit reference field to zero. A later\ncancellation can claim ownership and complete the request a second time.\n\nUse atomic_fetch_or() when setting the cancel flag and inspect the old\nflag value. The first cancel attempt continues to the existing ownership\nincrement, preserving its wake and issuer handoff semantics. Later\nattempts see the cancel flag and return without incrementing the\nreference field.\n\nThis makes repeated failed cancellation attempts idempotent while\nleaving the first-cancel state transitions unchanged.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99227",
"url": "https://www.suse.com/security/cve/CVE-2026-99227"
},
{
"category": "external",
"summary": "SUSE Bug 1289219 for CVE-2026-99227",
"url": "https://bugzilla.suse.com/1289219"
},
{
"category": "external",
"summary": "SUSE Bug 1289230 for CVE-2026-99227",
"url": "https://bugzilla.suse.com/1289230"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-99227"
},
{
"cve": "CVE-2026-99228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99228"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/io-wq: don\u0027t lose the signal that ends work\n\nWhen a thread exits, only its tracked requests are cancelled. Then its\nio-wq is torn down. io_wq_exit_workers() signals every worker, to get it\nout of an interruptible sleep, and waits for all of them to exit. Before\nthey do, they go through the work that is left. Unbounded work is\ncancelled. Bounded work is run, as it is expected to end by itself.\n\nNot all of it does. An open has no file yet, so it counts as bounded, and\nthe open of a FIFO waits for the other end. That is what the signal is for.\nBut the workers are signalled once, and a worker that hasn\u0027t started the\nwork by then loses the signal:\n\n io_wq_exit_workers() io_worker_handle_work()\n io_wq_worker_wake()\n set TIF_NOTIFY_SIGNAL\n io_assign_current_work()\n io_run_task_work()\n clear TIF_NOTIFY_SIGNAL\n io_wq_submit_work()\n fifo_open()\n wait_for_partner()\n wait_for_completion_timeout()\n\nThe thread never gets out of do_exit():\n\n IORING_OP_OPENAT of a FIFO without a writer, IOSQE_ASYNC\n exit of the thread that has submitted it\n\nhangs in more than 9 of 10 attempts (4 CPUs, KVM), until the process is\nkilled.\n\nSet TIF_NOTIFY_SIGNAL for bounded work that is started with IO_WQ_BIT_EXIT\nset. The bit is set before the workers are signalled, and it is tested\nafter the flag has been cleared, with clear_notify_signal() providing the\nbarrier. So either the flag stays, or the bit is seen.\n\nWork that is started while the io-wq exits is treated like work that is\nbeing run at that time: it isn\u0027t interrupted unless it waits\ninterruptibly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99228",
"url": "https://www.suse.com/security/cve/CVE-2026-99228"
},
{
"category": "external",
"summary": "SUSE Bug 1289222 for CVE-2026-99228",
"url": "https://bugzilla.suse.com/1289222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-99228"
},
{
"cve": "CVE-2026-99229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99229"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/wait: don\u0027t spin on a stuck overflow list\n\nAs long as IO_CHECK_CQ_OVERFLOW_BIT is set, io_cqring_wait_schedule()\nreturns right away, before it gets to look at signals or arms the timeout,\nfor io_cqring_wait() to flush the overflow list. If that doesn\u0027t empty the\nlist, and the CQ ring doesn\u0027t hold the number of events the caller wants,\nthe loop starts over, with the same result. The task spins in the kernel,\nand can\u0027t be killed.\n\nThe assumption is that this can\u0027t happen: if CQEs can\u0027t be flushed, the\nring is full, and min_events is capped to the size of the ring. But:\n\n- With IORING_SETUP_CQE_MIXED a 32b CQE needs two contiguous entries. It\n is stuck on the list if a single one is free, and then the ring holds\n less than cq_entries events. A single threaded application that asks\n for as many events as the ring has entries never gets out of\n io_uring_enter().\n\n- Whether the ring is full is up to the CQ head, which the application\n can write to. While one thread waits for events on an empty ring,\n another one can move the head back so that the ring looks full and\n have a CQE overflow. The waiter can\u0027t be stopped any more, not even by\n SIGKILL.\n\nOnly the application can make room in the CQ ring. Return to it if the\nlist could not be flushed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99229",
"url": "https://www.suse.com/security/cve/CVE-2026-99229"
},
{
"category": "external",
"summary": "SUSE Bug 1289216 for CVE-2026-99229",
"url": "https://bugzilla.suse.com/1289216"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99229"
},
{
"cve": "CVE-2026-99230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/cmd: don\u0027t leave list poison in -\u003ehash_node\n\nio_uring_cmd_del_cancelable() uses hlist_del() to take a command off\n-\u003ecancelable_uring_cmd, which leaves LIST_POISON1/2 behind in\n-\u003ehash_node. Requests are recycled through the request cache without\nbeing reinitialised, and not every user of -\u003ehash_node sets it up before\nit is used:\n\nIf a vectored futex wait is woken while futex_wait_multiple_setup() is\nstill queueing the futexes, io_futexv_wait() doesn\u0027t add the request to\n-\u003efutex_list, and leaves the completion to the task_work queued by the\nwake up. io_futexv_complete() ends in __io_futex_complete(), whose\nhlist_del_init() is fine for a request that is unhashed, which is how all\nother users of the node leave it. If the request was a cancelable\nuring_cmd in its previous life, e.g. a ublk FETCH_REQ, it writes through\nLIST_POISON2:\n\n Oops: general protection fault, probably for non-canonical address\n KASAN: maybe wild-memory-access in range [0xdead000000000120-...]\n RIP: 0010:io_futexv_complete+0x219/0x420\n Call Trace:\n tctx_task_work_run+0x804/0x950\n tctx_task_work+0x71/0xa0\n task_work_run+0x118/0x200\n\nLeave the node unhashed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99230",
"url": "https://www.suse.com/security/cve/CVE-2026-99230"
},
{
"category": "external",
"summary": "SUSE Bug 1289226 for CVE-2026-99230",
"url": "https://bugzilla.suse.com/1289226"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99230"
},
{
"cve": "CVE-2026-99231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: own the request before clearing -\u003ehead\n\nio_waitid_remove_wq() only takes the wait queue lock if -\u003ehead is set.\nio_waitid_wait() clears -\u003ehead first thing, before it tries to become the\nowner of the request by bumping -\u003erefs. If somebody else owns the request\nat that point, nothing keeps it from completing the request while the\nwake up handler is still going to touch it:\n\nCPU0 (io_waitid_wait) CPU1 (io_waitid, holds a ref)\nlist_del_init(\u0026wait-\u003eentry)\nsmp_store_release(\u0026iw-\u003ehead, NULL)\n __do_wait() finds another child\n io_waitid_remove_wq()\n // -\u003ehead == NULL, no locking\n io_waitid_finish(), IOU_COMPLETE\n // request freed and reused\natomic_fetch_inc(\u0026iw-\u003erefs)\n\nThe same goes for __io_waitid_cancel() if it claims the request in that\nwindow. -\u003erefs is part of the per opcode data of the request, so this\nincrements whatever the next user of the request keeps there. If that\nhappens to be zero, the handler concludes that it owns the request, and\nqueues io_waitid_cb() for it. With the window held open by a delay, and\nthe request reused for a receive that is waiting for data:\n\n BUG: KASAN: slab-use-after-free in __wake_up_common+0x1ca/0x1f0\n __wake_up_sync_key+0x36/0x50\n sock_def_readable+0xf1/0x420\n unix_stream_sendmsg+0x60b/0x1110\n Allocated by task 87:\n io_arm_apoll+0x1ed/0x940\n Freed by task 87:\n __io_submit_flush_completions+0x118d/0x1a10\n tctx_task_work_run+0x327/0x950\n\nOnly clear -\u003ehead once the handler owns the request. If it doesn\u0027t, the\nowner finds -\u003ehead set and has to wait for the lock, which is held by the\ncaller of the handler. Deleting the already deleted entry again is\nharmless.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99231",
"url": "https://www.suse.com/security/cve/CVE-2026-99231"
},
{
"category": "external",
"summary": "SUSE Bug 1289215 for CVE-2026-99231",
"url": "https://bugzilla.suse.com/1289215"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-99231"
},
{
"cve": "CVE-2026-99232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/syscalls: Use copy_from_user for the faultable syscall buffer\n\nsyscall_copy_user_array() copies the buffer argument of faultable\nsyscalls (write, pwrite64, ...) with __copy_from_user(), which skips\naccess_ok(). Use copy_from_user() instead so a non-user address is\nrejected and the entry is recorded as faulted.\n\nIt could be a security concern for machines that trust perf a bit too\nmuch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99232",
"url": "https://www.suse.com/security/cve/CVE-2026-99232"
},
{
"category": "external",
"summary": "SUSE Bug 1289228 for CVE-2026-99232",
"url": "https://bugzilla.suse.com/1289228"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99232"
},
{
"cve": "CVE-2026-99233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/histograms: Verify event_call identity when updating synth_event refcount\n\nIn event_hist_trigger_parse() and hist_unreg_all(), the histogram\nregistration and unregistration paths look up find_synth_event() using\ntrace_event_name(file-\u003eevent_call) and adjust se-\u003eref if a match is\nfound.\n\nBecause find_synth_event() only compares the event basename, registering\nor removing a histogram on a non-synthetic trace event whose basename\nmatches a synthetic event erroneously modifies the synthetic event\u0027s\nreference count. If a histogram is registered on the non-synthetic\nevent before the synthetic event is created and removed afterwards,\nse-\u003eref is decremented without a matching increment, allowing the\nsynthetic event to be freed while an active histogram action still holds\na pointer to it.\n\nIntroduce find_synth_event_call() to verify that \u0026se-\u003ecall matches\nfile-\u003eevent_call before adjusting se-\u003eref.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99233",
"url": "https://www.suse.com/security/cve/CVE-2026-99233"
},
{
"category": "external",
"summary": "SUSE Bug 1289227 for CVE-2026-99233",
"url": "https://bugzilla.suse.com/1289227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99233"
},
{
"cve": "CVE-2026-99234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99234"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Unregister field variable histograms when the command fails\n\nAn action that names a field on another event needs that field as a\nvariable, so create_field_var_hist() registers a second hist trigger on\nthat event to provide it, and records it in\ntarget_hist_data-\u003efield_var_hists[].\n\nIf a later part of the same command fails, create_actions() returns an\nerror and event_hist_trigger_parse() jumps to out_free. The write fails\nwith -EINVAL and sched_switch gets no trigger, but:\n\n # echo \u0027hist:keys=pid:ts0=common_timestamp.usecs\u0027 \u003e\u003e \\\n events/sched/sched_waking/trigger\n # echo \u0027my_synth u64 lat; int a; int b\u0027 \u003e\u003e synthetic_events\n # echo \u0027hist:keys=next_pid:wakeup_lat=common_timestamp.usecs-$ts0:\\\n onmatch(sched.sched_waking).my_synth($wakeup_lat,prio,nosuchfld)\u0027\\\n \u003e\u003e events/sched/sched_switch/trigger\n # cat events/sched/sched_waking/trigger\n hist:keys=pid:vals=hitcount:ts0=common_timestamp.usecs:sort=hitcount:size=2048:clock=global [active]\n hist:keys=pid:vals=hitcount:synthetic_prio=prio:sort=hitcount:size=2048 [active]\n\nThe second histogram is the one created for \u0027prio\u0027. It is still active and\nstill counting.\n\nout_free reaches destroy_field_var_hists(), which frees the\nfield_var_hists[] entries, but never unregister_field_var_hists(), which is\nwhat removes the triggers and runs only from event_hist_trigger_free(). The\nentry is freed and the trigger is left with nothing tracking it.\n\nUnregister the field variable histograms in out_free as well, and record\neach one as soon as its trigger is registered rather than after the lookup\nthat follows it, so no exit can leave a registered trigger untracked. The\nentry then belongs to field_var_hists[] and is released by\ndestroy_field_var_hists(), so freeing it on that exit would be a double\nfree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99234",
"url": "https://www.suse.com/security/cve/CVE-2026-99234"
},
{
"category": "external",
"summary": "SUSE Bug 1289217 for CVE-2026-99234",
"url": "https://bugzilla.suse.com/1289217"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-99234"
},
{
"cve": "CVE-2026-99235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99235"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Save the event file instead of the compatible histogram\n\ncreate_field_var_hist() creates a histogram on the matched event to\nsupply a field variable, and records it on the target so it can be torn\ndown later:\n\n\thist_data = find_compatible_hist(target_hist_data, file);\n\t...\n\t/* Save the compatible histogram information */\n\tvar_hist-\u003ehist_data = hist_data;\n\nhist_data is not the histogram it creates. It is one that was already\nthere, whose keys the new one copies. The saved pointer has a single\nuser, unregister_field_var_hists(), which runs when the target is\nremoved:\n\n\tfile = hist_data-\u003efield_var_hists[i]-\u003ehist_data-\u003eevent_file;\n\nfind_compatible_hist() matches on keys alone, so it can pick one with no\nvariables of its own. check_var_refs() then returns false and the user\ncan remove it while the target still points at it:\n\n BUG: KASAN: slab-use-after-free in event_hist_trigger_free+0x2b2/0x320\n Read of size 8 at addr ffff8880093b90e0 by task init/1\n\n Freed by task 1:\n kfree+0x154/0x420\n event_hist_trigger_free+0x1d5/0x320\n event_hist_trigger_parse+0x35f3/0x69e0\n trigger_process_regex+0x1a6/0x250\n\nSave the event file instead. It is all the dereference ever wanted, and\nit does not go away when the user removes a trigger.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99235",
"url": "https://www.suse.com/security/cve/CVE-2026-99235"
},
{
"category": "external",
"summary": "SUSE Bug 1289218 for CVE-2026-99235",
"url": "https://bugzilla.suse.com/1289218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99235"
},
{
"cve": "CVE-2026-99236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Reject incomplete event filter expressions\n\nA non-empty expression normally finishes in predicate_parse()\u0027s inner\nloop, which resolves the pending logical operators before jumping to\nfinalization. If the input ends after an operator, possibly followed by\nunary \u0027!\u0027 tokens, the outer loop instead falls through with unresolved\noperator state.\n\nFor example, \"common_pid == 1 || common_pid == 2 \u0026\u0026\" leaves\nprog[0].target equal to -1. The second pass then reads prog[-1] before\nthe forward-jump check can reject it. Depending on adjacent slab\ncontents, it can also copy an out-of-bounds word into a branch target\nthat passes the forward-only check. A self-targeted perf tracepoint\ncounting event can reach this path through PERF_EVENT_IOC_SET_FILTER.\n\nReject the outer-loop fallthrough when a predicate has already been\nparsed. This ensures that non-empty expressions only reach finalization\nafter the inner loop has resolved their operators. Keep the existing\nno-filter error for input that has no predicates. Add a regression test\nfor trailing logical operators and unary negations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99236",
"url": "https://www.suse.com/security/cve/CVE-2026-99236"
},
{
"category": "external",
"summary": "SUSE Bug 1289229 for CVE-2026-99236",
"url": "https://bugzilla.suse.com/1289229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99236"
},
{
"cve": "CVE-2026-99237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99237"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Hold trace_types_lock when resetting last boot data from readers\n\nupdate_last_data_if_empty() is called from tracing_open() with O_TRUNC,\ntracing_read_pipe() and tracing_buffers_read() without trace_types_lock.\nTwo readers can both pass the LAST_BOOT test and free module_delta\ntwice, and a module notifier can update module_delta while it is being\nfreed.\n\nTake trace_types_lock in those paths and keep the callers that already\nhold it on an unlocked variant.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99237",
"url": "https://www.suse.com/security/cve/CVE-2026-99237"
},
{
"category": "external",
"summary": "SUSE Bug 1289181 for CVE-2026-99237",
"url": "https://bugzilla.suse.com/1289181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99237"
},
{
"cve": "CVE-2026-99238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99238"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Hold trace_types_lock when updating modules in persistent instances\n\ntrace_module_record() walks ftrace_trace_arrays from the module notifier\nwithout trace_types_lock. A concurrent rmdir of an instance removes it\nfrom the list and frees it under that lock, so a module load or unload\ncan walk into a freed trace_array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99238",
"url": "https://www.suse.com/security/cve/CVE-2026-99238"
},
{
"category": "external",
"summary": "SUSE Bug 1289182 for CVE-2026-99238",
"url": "https://bugzilla.suse.com/1289182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99238"
},
{
"cve": "CVE-2026-99239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn\n\nl2cap_chan may be linked to l2cap_conn at most once. This is assumed in\nseveral places, eg l2cap_chan_del cleanup.\n\nThere is a TOCTOU race where the invariant is violated:\n\n [Task 1] [Task 2]\n l2cap_chan_connect l2cap_sock_bind\n l2cap_chan_lock lock_sock\n l2cap_state_change if (sk-\u003esk_state != BT_OPEN)\n chan-\u003estate = BT_CONNECT\n l2cap_sock_state_change_cb chan-\u003estate = BT_BOUND\n sk-\u003esk_state = BT_BOUND\n lock_sock \u003c------------------ release_sock\n sk-\u003esk_state = BT_CONNECT\n\nl2cap_sock_connect() does not check sk-\u003esk_state, so since chan-\u003estate\nis now BT_BOUND, subsequent connect() ends up with second\n__l2cap_chan_add.\n\nExplicitly document and check the invariant in __l2cap_chan_add with\nWARN_ON_ONCE. The only callsite where it could be hit is\nl2cap_chan_connect, so add pre-check there to avoid relying on\nchan-\u003estate. chan-\u003estate read/write is not properly guarded currently so\nthere can be other TOCTOUC problems.\n\nAdd l2cap_lock_chan in l2cap_sock_bind() to guard chan-\u003estate write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99239",
"url": "https://www.suse.com/security/cve/CVE-2026-99239"
},
{
"category": "external",
"summary": "SUSE Bug 1289189 for CVE-2026-99239",
"url": "https://bugzilla.suse.com/1289189"
},
{
"category": "external",
"summary": "SUSE Bug 1289190 for CVE-2026-99239",
"url": "https://bugzilla.suse.com/1289190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-99239"
},
{
"cve": "CVE-2026-99240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99240"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/core: error damos_commit_quota_goal() for zero target_value\n\nPatch series \"mm/damon: move zero damos quota target_value handling to the\ncore layer\".\n\nHaving zero DAMOS quota target value can cause division by zero. DAMON\nAPI callers are checking the target value parameters to avoid that. It is\neasy to make mistakes in some of the multiple API callers. Move that to\nthe core layer.\n\nPatch 1 adds the corner case handling into the core layer DAMON parameters\nvalidation logic. Patches 2 and 3 remove no more needed DAMON API callers\nside handling of the corner case in DAMON_LRU_SORT and DMON_SAMPLIE_MTIER,\nrespectively.\n\n\nThis patch (of 3):\n\nIf a DAMOS scheme has a damos_quota_goal of zero target_value,\ndamos_quota_goal() could trigger division-by-zero error. Hence each DAMON\nAPI callers should do the zero target_value validation. It is easy to\nmake mistakes. Actually such bugs in DAMON_LRU_SORT and\nDAMON_SAMPLE_MTIER were found and fixed [1].\n\nIt is better to handle the corner case only once in the core layer,\ninstead of multiple places in all DAMON API callers. One straightforward\noption is using an alternative denominator for the corner case in the\ndamos_quota_goal(). However, the zero target_value is meaningless. In\nthis case, the quota goal is always evaluated as achieved or\nover-achieved. The quota will only keep being reduced.\n\nSimply avoid using zero target_value by adding a check in the core layer\nDAMOS quota goal parameters validation/commit path,\ndamos_commit_quota_goal(). Update it to return an error in the case. \nAlso update its caller to propagate the error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99240",
"url": "https://www.suse.com/security/cve/CVE-2026-99240"
},
{
"category": "external",
"summary": "SUSE Bug 1289193 for CVE-2026-99240",
"url": "https://bugzilla.suse.com/1289193"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99240"
},
{
"cve": "CVE-2026-99244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99244"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper\n\nSince commit 7fea700e04bd (\"zap_pid_ns_processes: clear\nTIF_NOTIFY_SIGNAL along with TIF_SIGPENDING\") zap_pid_ns_processes()\nclears TIF_NOTIFY_SIGNAL before every kernel_wait4() call. Otherwise\nkernel_wait4() doesn\u0027t sleep and returns -ERESTARTSYS if\nsignal_pending() is true and the reaper busy-waits.\n\nBut clearing TIF_NOTIFY_SIGNAL doesn\u0027t fix it. It can get raised again.\nFor example, klp_send_signals() sets it raw against any task that hasn\u0027t\ntransitioned yet. And it keeps sending it until the livepatch finishes.\n\nThe sleep loop waiting for pid_allocated to drop has the same problem\nand it doesn\u0027t even clear anything. So a schedule() in\nTASK_INTERRUPTIBLE returns immediately.\n\nUse a no_notify_signal guard. signal_pending() will ignore\nTIF_NOTIFY_SIGNAL and the pid namespace reaper sleeps until a child\nexits or free_pid() wakes it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99244",
"url": "https://www.suse.com/security/cve/CVE-2026-99244"
},
{
"category": "external",
"summary": "SUSE Bug 1289343 for CVE-2026-99244",
"url": "https://bugzilla.suse.com/1289343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99244"
},
{
"cve": "CVE-2026-99245",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99245"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: Fix key_reject_and_link() race with keyring restriction\n\nThe restrict_link check in key_reject_and_link() is done before taking\nthe keyring semaphore, racing with a concurrent keyring_restrict()\nthat installs the restriction while holding the semaphore in write\nmode.\n\nMove the check to after __key_link_lock(), so it is done under the\nsemaphore, matching the pattern used in __key_create_or_update().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99245",
"url": "https://www.suse.com/security/cve/CVE-2026-99245"
},
{
"category": "external",
"summary": "SUSE Bug 1289347 for CVE-2026-99245",
"url": "https://bugzilla.suse.com/1289347"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99245"
},
{
"cve": "CVE-2026-99253",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99253"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/cancel: rearm local work wake up before sleep\n\nio_uring_try_cancel_requests() sets -\u003ecq_wait_nr to 1 so that the next\nio_req_local_work_add() wakes the cancelling task. The add that takes the\ncount to zero is the only one that wakes, later ones see a count \u003c= 0 and\nreturn. io_uring_cancel_generic() however only becomes\nTASK_INTERRUPTIBLE much later, so the one wake up can be spent on a\nrunning task. That is fine as long as the entry of that add is still\nqueued, as the io_local_work_pending() check then skips the sleep. It is\nnot if the add was delayed after queueing its entry:\n\nCPU0 (submitter in exec or exit) CPU1 (io_req_local_work_add)\n mpscq_push(req A)\nio_uring_try_cancel_requests()\n io_run_local_work() // runs req A\nio_uring_try_cancel_requests()\n atomic_set(\u0026ctx-\u003ecq_wait_nr, 1)\n atomic_read(\u0026ctx-\u003ecq_wait_nr) == 1\n count taken, wake_up_state()\n // task is running, no-op\nprepare_to_wait(TASK_INTERRUPTIBLE)\nio_local_work_pending() == false\nschedule()\n mpscq_push(req B)\n cq_wait_nr \u003c= 0, return\n\nOnly the sleeping task can run req B, so it is stuck in execve() until a\nsignal happens to wake it. An exiting task doesn\u0027t even get that.\n\nArm the count again once the task state is set and before the work list\nis checked, for the rings whose local work this task is the one to run.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99253",
"url": "https://www.suse.com/security/cve/CVE-2026-99253"
},
{
"category": "external",
"summary": "SUSE Bug 1289298 for CVE-2026-99253",
"url": "https://bugzilla.suse.com/1289298"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99253"
},
{
"cve": "CVE-2026-99254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99254"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: don\u0027t flood a cancelling task with task_work\n\nio_ring_exit_work() asks each task which has used the ring to remove its\ntctx node, by task_work, and repeats that until the list is empty.\nio_tctx_exit_cb() doesn\u0027t touch the node while the task is in\nio_uring_cancel_generic(), which removes all the nodes at its end. So the\nwork item queues the callback again as soon as it has completed, for\nnothing.\n\nThat is more than a waste of time. task_work_run() only returns when it\nfinds the list empty. If the rings are released from inside the\ncancellation, because requests of other rings held the last references to\ntheir files, up to 64 work items keep sending callbacks to the one task\nwhich is running them. It never finds the list empty, never gets back to\nthe cancellation, the nodes stay, and so it goes on: a task with 60 pairs\nof rings which poll each other ran 280000 callbacks in 5 seconds, 20\nseconds after exit_group(). It ends when all the senders happen to be late\nat the same time. Until then the task keeps a CPU and the work items busy.\n\nAn exiting task can\u0027t be killed meanwhile. execve() cancels the requests in\nthe same way, so a live task can get stuck there as well, for minutes. If\nit takes more than five, the work items run into the\nWARN_ON_ONCE(time_after(jiffies, timeout)) of io_ring_exit_work(). No\nprivilege is needed for any of this.\n\nIf the callback has met a task in cancellation, wait a little before it is\nsent again. Nobody has to wake the work item up for that: either the node\nis gone by then, or it is the turn of the next round.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99254",
"url": "https://www.suse.com/security/cve/CVE-2026-99254"
},
{
"category": "external",
"summary": "SUSE Bug 1289306 for CVE-2026-99254",
"url": "https://bugzilla.suse.com/1289306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99254"
},
{
"cve": "CVE-2026-99255",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-99255"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/io-wq: don\u0027t hide a link from cancellations\n\nA task that exits cancels its tracked requests and waits until they are\ngone. io_uring_cancel_generic() looks everywhere a request can be, and\ngoes to sleep if it found nothing to cancel. It is woken up each time\none of the requests of the task is completed by task work or freed.\n\nWhen io-wq is done with a request that has a link, there is a time in which\nthe next request of the link can\u0027t be found:\n\n io_worker_handle_work()\n io_assign_current_work(worker, NULL)\n io_wq_free_work(work)\n io_req_find_next() // takes the link off the request\n io_free_req() // task work for the task\n io_assign_current_work(worker, linked)\n io_run_task_work()\n cond_resched()\n worker-\u003ecur_work = linked\n\nIt is not pending, it is not the current work of a worker, and it is not\nyet on the list that it is about to be parked on. If the pass that the\nexiting task makes because of io_free_req() falls into that time, it finds\nnothing and the task goes to sleep. The worker then runs the link, which\nIO_WQ_BIT_EXIT doesn\u0027t prevent for bounded work. If that parks the request\nnothing is completed or freed, and nobody wakes up the task. If it is the\nprocess that exits it can\u0027t be killed any more either.\n\n NOP, IOSQE_ASYNC | IOSQE_IO_LINK\n FUTEX_WAIT, FUTEX2_PRIVATE\n exit of the thread, or of the process, up to 63us later\n\nWith four of these per round 5 to 8 of 10,000 rounds hang (4 CPUs, KVM):\n\n io_uring_cancel_generic\n do_exit\n\nCommit f8b632e89a10 (\"io_uring: tighten task exit cancellations\") is about\nthe same gap, and makes the task look again for whatever happens before\nio_free_req().\n\nFree the request once the link is the current work of the worker, or\npending. Whoever is woken up by that can find the link, until it is parked\nwhere cancellations look as well. To do so split io_wq_free_work() in two.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-99255",
"url": "https://www.suse.com/security/cve/CVE-2026-99255"
},
{
"category": "external",
"summary": "SUSE Bug 1289285 for CVE-2026-99255",
"url": "https://bugzilla.suse.com/1289285"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-devel-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-macros-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-0:7.3.3-1.1.x86_64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.aarch64",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.ppc64le",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.s390x",
"openSUSE Tumbleweed:kernel-source-vanilla-0:7.3.3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-11-09T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-99255"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.