RHSA-2026:27353
Vulnerability from csaf_opensuse - Published: 2026-06-19 00:00 - Updated: 2026-09-16 18:31Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:27353.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:27353.
Patchnames: RHSA-2026:27353
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2026-31419
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2026-31419
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2026-31419
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2026-31419
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2026-31419
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2026-31419
Threats
Impact
important
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2026-31419
Threats
Impact
important
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:27353.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:27353.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:27353",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_27353.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:27353",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-June/006657.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:27353",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-June/006657.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31419 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31419/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31488 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31488/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43056 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43279 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43279/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46090 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46145 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46331 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46331/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:31:07Z",
"generator": {
"date": "2026-06-19T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:27353",
"initial_release_date": "2026-06-19T00:00:00Z",
"revision_history": [
{
"date": "2026-06-19T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:50:38Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:31:07Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.136.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.136.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.136.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.136.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.136.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.136.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.136.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.136.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.136.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.136.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.136.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.136.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.136.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.136.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.136.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.136.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.136.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.136.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.136.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.136.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.136.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-31419",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31419"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bonding: fix use-after-free in bond_xmit_broadcast()\n\nbond_xmit_broadcast() reuses the original skb for the last slave\n(determined by bond_is_last_slave()) and clones it for others.\nConcurrent slave enslave/release can mutate the slave list during\nRCU-protected iteration, changing which slave is \"last\" mid-loop.\nThis causes the original skb to be double-consumed (double-freed).\n\nReplace the racy bond_is_last_slave() check with a simple index\ncomparison (i + 1 == slaves_count) against the pre-snapshot slave\ncount taken via READ_ONCE() before the loop. This preserves the\nzero-copy optimization for the last slave while making the \"last\"\ndetermination stable against concurrent list mutations.\n\nThe UAF can trigger the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in skb_clone\nRead of size 8 at addr ffff888100ef8d40 by task exploit/147\n\nCPU: 1 UID: 0 PID: 147 Comm: exploit Not tainted 7.0.0-rc3+ #4 PREEMPTLAZY\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl (lib/dump_stack.c:123)\n print_report (mm/kasan/report.c:379 mm/kasan/report.c:482)\n kasan_report (mm/kasan/report.c:597)\n skb_clone (include/linux/skbuff.h:1724 include/linux/skbuff.h:1792 include/linux/skbuff.h:3396 net/core/skbuff.c:2108)\n bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5334)\n bond_start_xmit (drivers/net/bonding/bond_main.c:5567 drivers/net/bonding/bond_main.c:5593)\n dev_hard_start_xmit (include/linux/netdevice.h:5325 include/linux/netdevice.h:5334 net/core/dev.c:3871 net/core/dev.c:3887)\n __dev_queue_xmit (include/linux/netdevice.h:3601 net/core/dev.c:4838)\n ip6_finish_output2 (include/net/neighbour.h:540 include/net/neighbour.h:554 net/ipv6/ip6_output.c:136)\n ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219)\n ip6_output (net/ipv6/ip6_output.c:250)\n ip6_send_skb (net/ipv6/ip6_output.c:1985)\n udp_v6_send_skb (net/ipv6/udp.c:1442)\n udpv6_sendmsg (net/ipv6/udp.c:1733)\n __sys_sendto (net/socket.c:730 net/socket.c:742 net/socket.c:2206)\n __x64_sys_sendto (net/socket.c:2209)\n do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)\n \u003c/TASK\u003e\n\nAllocated by task 147:\n\nFreed by task 147:\n\nThe buggy address belongs to the object at ffff888100ef8c80\n which belongs to the cache skbuff_head_cache of size 224\nThe buggy address is located 192 bytes inside of\n freed 224-byte region [ffff888100ef8c80, ffff888100ef8d60)\n\nMemory state around the buggy address:\n ffff888100ef8c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc\n ffff888100ef8c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\u003effff888100ef8d00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ^\n ffff888100ef8d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb\n ffff888100ef8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n==================================================================",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31419",
"url": "https://www.suse.com/security/cve/CVE-2026-31419"
},
{
"category": "external",
"summary": "SUSE Bug 1262066 for CVE-2026-31419",
"url": "https://bugzilla.suse.com/1262066"
},
{
"category": "external",
"summary": "SUSE Bug 1262733 for CVE-2026-31419",
"url": "https://bugzilla.suse.com/1262733"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31419"
},
{
"cve": "CVE-2026-31488",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31488"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Do not skip unrelated mode changes in DSC validation\n\nStarting with commit 17ce8a6907f7 (\"drm/amd/display: Add dsc pre-validation in\natomic check\"), amdgpu resets the CRTC state mode_changed flag to false when\nrecomputing the DSC configuration results in no timing change for a particular\nstream.\n\nHowever, this is incorrect in scenarios where a change in MST/DSC configuration\nhappens in the same KMS commit as another (unrelated) mode change. For example,\nthe integrated panel of a laptop may be configured differently (e.g., HDR\nenabled/disabled) depending on whether external screens are attached. In this\ncase, plugging in external DP-MST screens may result in the mode_changed flag\nbeing dropped incorrectly for the integrated panel if its DSC configuration\ndid not change during precomputation in pre_validate_dsc().\n\nAt this point, however, dm_update_crtc_state() has already created new streams\nfor CRTCs with DSC-independent mode changes. In turn,\namdgpu_dm_commit_streams() will never release the old stream, resulting in a\nmemory leak. amdgpu_dm_atomic_commit_tail() will never acquire a reference to\nthe new stream either, which manifests as a use-after-free when the stream gets\ndisabled later on:\n\nBUG: KASAN: use-after-free in dc_stream_release+0x25/0x90 [amdgpu]\nWrite of size 4 at addr ffff88813d836524 by task kworker/9:9/29977\n\nWorkqueue: events drm_mode_rmfb_work_fn\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x6e/0xa0\n print_address_description.constprop.0+0x88/0x320\n ? dc_stream_release+0x25/0x90 [amdgpu]\n print_report+0xfc/0x1ff\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __virt_addr_valid+0x225/0x4e0\n ? dc_stream_release+0x25/0x90 [amdgpu]\n kasan_report+0xe1/0x180\n ? dc_stream_release+0x25/0x90 [amdgpu]\n kasan_check_range+0x125/0x200\n dc_stream_release+0x25/0x90 [amdgpu]\n dc_state_destruct+0x14d/0x5c0 [amdgpu]\n dc_state_release.part.0+0x4e/0x130 [amdgpu]\n dm_atomic_destroy_state+0x3f/0x70 [amdgpu]\n drm_atomic_state_default_clear+0x8ee/0xf30\n ? drm_mode_object_put.part.0+0xb1/0x130\n __drm_atomic_state_free+0x15c/0x2d0\n atomic_remove_fb+0x67e/0x980\n\nSince there is no reliable way of figuring out whether a CRTC has unrelated\nmode changes pending at the time of DSC validation, remember the value of the\nmode_changed flag from before the point where a CRTC was marked as potentially\naffected by a change in DSC configuration. Reset the mode_changed flag to this\nearlier value instead in pre_validate_dsc().\n\n(cherry picked from commit cc7c7121ae082b7b82891baa7280f1ff2608f22b)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31488",
"url": "https://www.suse.com/security/cve/CVE-2026-31488"
},
{
"category": "external",
"summary": "SUSE Bug 1262746 for CVE-2026-31488",
"url": "https://bugzilla.suse.com/1262746"
},
{
"category": "external",
"summary": "SUSE Bug 1262777 for CVE-2026-31488",
"url": "https://bugzilla.suse.com/1262777"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-31488"
},
{
"cve": "CVE-2026-43056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43056"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: fix use-after-free in add_adev() error path\n\nIf auxiliary_device_add() fails, add_adev() jumps to add_fail and calls\nauxiliary_device_uninit(adev).\n\nThe auxiliary device has its release callback set to adev_release(),\nwhich frees the containing struct mana_adev. Since adev is embedded in\nstruct mana_adev, the subsequent fall-through to init_fail and access\nto adev-\u003eid may result in a use-after-free.\n\nFix this by saving the allocated auxiliary device id in a local\nvariable before calling auxiliary_device_add(), and use that saved id\nin the cleanup path after auxiliary_device_uninit().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43056",
"url": "https://www.suse.com/security/cve/CVE-2026-43056"
},
{
"category": "external",
"summary": "SUSE Bug 1264053 for CVE-2026-43056",
"url": "https://bugzilla.suse.com/1264053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43056"
},
{
"cve": "CVE-2026-43279",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43279"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Add sanity check for OOB writes at silencing\n\nAt silencing the playback URB packets in the implicit fb mode before\nthe actual playback, we blindly assume that the received packets fit\nwith the buffer size. But when the setup in the capture stream\ndiffers from the playback stream (e.g. due to the USB core limitation\nof max packet size), such an inconsistency may lead to OOB writes to\nthe buffer, resulting in a crash.\n\nFor addressing it, add a sanity check of the transfer buffer size at\nprepare_silent_urb(), and stop the data copy if the received data\noverflows. Also, report back the transfer error properly from there,\ntoo.\n\nNote that this doesn\u0027t fix the root cause of the playback error\nitself, but this merely covers the kernel Oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43279",
"url": "https://www.suse.com/security/cve/CVE-2026-43279"
},
{
"category": "external",
"summary": "SUSE Bug 1264618 for CVE-2026-43279",
"url": "https://bugzilla.suse.com/1264618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43279"
},
{
"cve": "CVE-2026-46090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46090"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: aloop: Fix peer runtime UAF during format-change stop\n\nloopback_check_format() may stop the capture side when playback starts\nwith parameters that no longer match a running capture stream. Commit\n826af7fa62e3 (\"ALSA: aloop: Fix racy access at PCM trigger\") moved\nthe peer lookup under cable-\u003elock, but the actual snd_pcm_stop() still\nruns after dropping that lock.\n\nA concurrent close can clear the capture entry from cable-\u003estreams[] and\ndetach or free its runtime while the playback trigger path still holds a\nstale peer substream pointer.\n\nKeep a per-cable count of in-flight peer stops before dropping\ncable-\u003elock, and make free_cable() wait for those stops before\ndetaching the runtime. This preserves the existing behavior while\nmaking the peer runtime lifetime explicit.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46090",
"url": "https://www.suse.com/security/cve/CVE-2026-46090"
},
{
"category": "external",
"summary": "SUSE Bug 1267531 for CVE-2026-46090",
"url": "https://bugzilla.suse.com/1267531"
},
{
"category": "external",
"summary": "SUSE Bug 1267895 for CVE-2026-46090",
"url": "https://bugzilla.suse.com/1267895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46090"
},
{
"cve": "CVE-2026-46135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46135"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-tcp: fix race between ICReq handling and queue teardown\n\nnvmet_tcp_handle_icreq() updates queue-\u003estate after sending an\nInitialization Connection Response (ICResp), but it does so without\nserializing against target-side queue teardown.\n\nIf an NVMe/TCP host sends an Initialization Connection Request\n(ICReq) and immediately closes the connection, target-side teardown\nmay start in softirq context before io_work drains the already\nbuffered ICReq. In that case, nvmet_tcp_schedule_release_queue()\nsets queue-\u003estate to NVMET_TCP_Q_DISCONNECTING and drops the queue\nreference under state_lock.\n\nIf io_work later processes that ICReq, nvmet_tcp_handle_icreq() can\nstill overwrite the state back to NVMET_TCP_Q_LIVE. That defeats the\nDISCONNECTING-state guard in nvmet_tcp_schedule_release_queue() and\nallows a later socket state change to re-enter teardown and issue a\nsecond kref_put() on an already released queue.\n\nThe ICResp send failure path has the same problem. If teardown has\nalready moved the queue to DISCONNECTING, a send error can still\noverwrite the state with NVMET_TCP_Q_FAILED, again reopening the\nwindow for a second teardown path to drop the queue reference.\n\nFix this by serializing both post-send state transitions with\nstate_lock and bailing out if teardown has already started.\n\nUse -ESHUTDOWN as an internal sentinel for that bail-out path rather\nthan propagating it as a transport error like -ECONNRESET. Keep\nnvmet_tcp_socket_error() setting rcv_state to NVMET_TCP_RECV_ERR before\nhonoring that sentinel so receive-side parsing stays quiesced until the\nexisting release path completes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46135",
"url": "https://www.suse.com/security/cve/CVE-2026-46135"
},
{
"category": "external",
"summary": "SUSE Bug 1267373 for CVE-2026-46135",
"url": "https://bugzilla.suse.com/1267373"
},
{
"category": "external",
"summary": "SUSE Bug 1267374 for CVE-2026-46135",
"url": "https://bugzilla.suse.com/1267374"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46135"
},
{
"cve": "CVE-2026-46145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46145"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mana: Validate rx_hash_key_len\n\nSashiko points out that rx_hash_key_len comes from a uAPI structure and is\nblindly passed to memcpy, allowing the userspace to trash kernel\nmemory. Bounds check it so the memcpy cannot overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46145",
"url": "https://www.suse.com/security/cve/CVE-2026-46145"
},
{
"category": "external",
"summary": "SUSE Bug 1267715 for CVE-2026-46145",
"url": "https://bugzilla.suse.com/1267715"
},
{
"category": "external",
"summary": "SUSE Bug 1267716 for CVE-2026-46145",
"url": "https://bugzilla.suse.com/1267716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46145"
},
{
"cve": "CVE-2026-46331",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46331"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fix pedit partial COW leading to page cache corruption\n\ntcf_pedit_act() computes the COW range for skb_ensure_writable()\nonce before the key loop using tcfp_off_max_hint, but the hint does\nnot account for the runtime header offset added by typed keys. This\ncan leave part of the write region un-COW\u0027d.\n\nFix by moving skb_ensure_writable() inside the per-key loop where\nthe actual write offset is known, and add overflow checking on the\noffset arithmetic. For negative offsets (e.g. Ethernet header edits\nat ingress), use skb_cow() to COW the headroom instead. Guard\noffset_valid() against INT_MIN, where negation is undefined.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46331",
"url": "https://www.suse.com/security/cve/CVE-2026-46331"
},
{
"category": "external",
"summary": "SUSE Bug 1265421 for CVE-2026-46331",
"url": "https://bugzilla.suse.com/1265421"
},
{
"category": "external",
"summary": "SUSE Bug 1268335 for CVE-2026-46331",
"url": "https://bugzilla.suse.com/1268335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.136.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.136.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.136.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-19T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46331"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…