RHSA-2026:49214
Vulnerability from csaf_opensuse - Published: 2026-07-31 00:00 - Updated: 2026-09-16 18:41Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:49214.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:49214.
Patchnames: RHSA-2026:49214
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2026-31692
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2026-31692
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2026-31692
Threats
Impact
important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:49214.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:49214.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:49214",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_49214.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:49214",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-August/007308.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:49214",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-August/007308.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31692 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43116 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46150 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64530 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64530/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:41:47Z",
"generator": {
"date": "2026-07-31T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:49214",
"initial_release_date": "2026-07-31T00:00:00Z",
"revision_history": [
{
"date": "2026-07-31T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T18:00:26Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:41:47Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.150.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"product": {
"name": "kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"product_id": "kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.150.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "bpftool-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "bpftool-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.150.1.el8_10?arch=x86_64\u0026upstream=bpftool-4.18.0-553.150.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.150.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.150.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.150.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-4.18.0-553.150.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.150.1.el8_10?arch=x86_64\u0026upstream=kernel-source-4.18.0-553.150.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.150.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "perf-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "perf-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.150.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.150.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-4.18.0-553.150.1.el8_10.x86_64",
"product": {
"name": "python3-perf-4.18.0-553.150.1.el8_10.x86_64",
"product_id": "python3-perf-4.18.0-553.150.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.150.1.el8_10?arch=x86_64\u0026upstream=perf-4.18.0-553.150.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "bpftool-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-4.18.0-553.150.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch"
},
"product_reference": "kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "perf-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-4.18.0-553.150.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
},
"product_reference": "python3-perf-4.18.0-553.150.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-31692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31692"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtnetlink: add missing netlink_ns_capable() check for peer netns\n\nrtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer\nnetwork namespace when creating paired devices (veth, vxcan,\nnetkit). This allows an unprivileged user with a user namespace\nto create interfaces in arbitrary network namespaces, including\ninit_net.\n\nAdd a netlink_ns_capable() check for CAP_NET_ADMIN in the peer\nnamespace before allowing device creation to proceed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31692",
"url": "https://www.suse.com/security/cve/CVE-2026-31692"
},
{
"category": "external",
"summary": "SUSE Bug 1267741 for CVE-2026-31692",
"url": "https://bugzilla.suse.com/1267741"
},
{
"category": "external",
"summary": "SUSE Bug 1267743 for CVE-2026-31692",
"url": "https://bugzilla.suse.com/1267743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-31692"
},
{
"cve": "CVE-2026-43116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43116"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: ensure safe access to master conntrack\n\nHolding reference on the expectation is not sufficient, the master\nconntrack object can just go away, making exp-\u003emaster invalid.\n\nTo access exp-\u003emaster safely:\n\n- Grab the nf_conntrack_expect_lock, this gets serialized with\n clean_from_lists() which also holds this lock when the master\n conntrack goes away.\n\n- Hold reference on master conntrack via nf_conntrack_find_get().\n Not so easy since the master tuple to look up for the master conntrack\n is not available in the existing problematic paths.\n\nThis patch goes for extending the nf_conntrack_expect_lock section\nto address this issue for simplicity, in the cases that are described\nbelow this is just slightly extending the lock section.\n\nThe add expectation command already holds a reference to the master\nconntrack from ctnetlink_create_expect().\n\nHowever, the delete expectation command needs to grab the spinlock\nbefore looking up for the expectation. Expand the existing spinlock\nsection to address this to cover the expectation lookup. Note that,\nthe nf_ct_expect_iterate_net() calls already grabs the spinlock while\niterating over the expectation table, which is correct.\n\nThe get expectation command needs to grab the spinlock to ensure master\nconntrack does not go away. This also expands the existing spinlock\nsection to cover the expectation lookup too. I needed to move the\nnetlink skb allocation out of the spinlock to keep it GFP_KERNEL.\n\nFor the expectation events, the IPEXP_DESTROY event is already delivered\nunder the spinlock, just move the delivery of IPEXP_NEW under the\nspinlock too because the master conntrack event cache is reached through\nexp-\u003emaster.\n\nWhile at it, add lockdep notations to help identify what codepaths need\nto grab the spinlock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43116",
"url": "https://www.suse.com/security/cve/CVE-2026-43116"
},
{
"category": "external",
"summary": "SUSE Bug 1264619 for CVE-2026-43116",
"url": "https://bugzilla.suse.com/1264619"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43116"
},
{
"cve": "CVE-2026-46150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfanotify: fix false positive on permission events\n\nfsnotify_get_mark_safe() may return false for a mark on an unrelated group,\nwhich results in bypassing the permission check.\n\nFix by skipping over detached marks that are not in the current group.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46150",
"url": "https://www.suse.com/security/cve/CVE-2026-46150"
},
{
"category": "external",
"summary": "SUSE Bug 1267387 for CVE-2026-46150",
"url": "https://bugzilla.suse.com/1267387"
},
{
"category": "external",
"summary": "SUSE Bug 1267388 for CVE-2026-46150",
"url": "https://bugzilla.suse.com/1267388"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46150"
},
{
"cve": "CVE-2026-64530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64530"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle\n\ntcf_classify() can return TC_ACT_CONSUMED while the skb is held by the\ndefragmentation engine (e.g. act_ct on out-of-order fragments). When\nthat happens the skb is no longer owned by the caller and must not be\ntouched again.\n\ntcf_qevent_handle() did not handle TC_ACT_CONSUMED: it fell through the\nswitch and returned the skb to the caller as if classification had\npassed. The only qdisc that wires up qevents today is RED, via three call sites\n(qe_mark on RED_PROB_MARK/HARD_MARK, qe_early_drop on congestion_drop)\nred_enqueue() was continuing to operate on an skb it no longer owns in this\ncase -- enqueueing it, dropping it, or updating statistics. Resulting in a UAF.\n\n tc qdisc add dev eth0 root handle 1: red ... qevent early_drop block 10\n tc filter add block 10 ... action ct\n\n (with ct defrag enabled and traffic that produces out-of-order\n fragments, e.g. a fragmented UDP stream)\n\nHandle TC_ACT_CONSUMED in tcf_qevent_handle() the same way the ingress\nand egress fast paths do: treat it as stolen and return NULL without\ntouching the skb. Unlike the TC_ACT_STOLEN case, the skb must not be\ndropped/freed here, as it is no longer owned by us.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64530",
"url": "https://www.suse.com/security/cve/CVE-2026-64530"
},
{
"category": "external",
"summary": "SUSE Bug 1271866 for CVE-2026-64530",
"url": "https://bugzilla.suse.com/1271866"
},
{
"category": "external",
"summary": "SUSE Bug 1271867 for CVE-2026-64530",
"url": "https://bugzilla.suse.com/1271867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-4.18.0-553.150.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-4.18.0-553.150.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-4.18.0-553.150.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-64530"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…