RHSA-2026:61692
Vulnerability from csaf_opensuse - Published: 2026-08-31 00:00 - Updated: 2026-09-16 18:48Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:61692.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:61692.
Patchnames: RHSA-2026:61692
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.8 (High)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2023-52924
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2023-52924
Threats
Impact
important
7.8 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2023-52924
Threats
Impact
important
7.1 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2023-52924
Threats
Impact
important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:61692.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:61692.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:61692",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_61692.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:61692",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007709.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:61692",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007709.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52924 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43116 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-52923 page",
"url": "https://www.suse.com/security/cve/CVE-2026-52923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53059/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:48:10Z",
"generator": {
"date": "2026-08-31T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:61692",
"initial_release_date": "2026-08-31T00:00:00Z",
"revision_history": [
{
"date": "2026-08-31T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T18:05:21Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:48:10Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"product_id": "kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.159.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-3.10.0-1160.159.1.el7.noarch",
"product": {
"name": "kernel-doc-3.10.0-1160.159.1.el7.noarch",
"product_id": "kernel-doc-3.10.0-1160.159.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.159.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "bpftool-3.10.0-1160.159.1.el7.x86_64",
"product_id": "bpftool-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.159.1.el7?arch=x86_64\u0026upstream=bpftool-3.10.0-1160.159.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.159.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.159.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.159.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.159.1.el7?arch=x86_64\u0026upstream=kernel-debug-3.10.0-1160.159.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.159.1.el7?arch=x86_64\u0026upstream=kernel-source-3.10.0-1160.159.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.159.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.159.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.159.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.159.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "perf-3.10.0-1160.159.1.el7.x86_64",
"product_id": "perf-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.159.1.el7?arch=x86_64\u0026upstream=perf-3.10.0-1160.159.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-3.10.0-1160.159.1.el7.x86_64",
"product": {
"name": "python-perf-3.10.0-1160.159.1.el7.x86_64",
"product_id": "python-perf-3.10.0-1160.159.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.159.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "bpftool-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-3.10.0-1160.159.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch"
},
"product_reference": "kernel-doc-3.10.0-1160.159.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "perf-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-3.10.0-1160.159.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
},
"product_reference": "python-perf-3.10.0-1160.159.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: don\u0027t skip expired elements during walk\n\nThere is an asymmetry between commit/abort and preparation phase if the\nfollowing conditions are met:\n\n1. set is a verdict map (\"1.2.3.4 : jump foo\")\n2. timeouts are enabled\n\nIn this case, following sequence is problematic:\n\n1. element E in set S refers to chain C\n2. userspace requests removal of set S\n3. kernel does a set walk to decrement chain-\u003euse count for all elements\n from preparation phase\n4. kernel does another set walk to remove elements from the commit phase\n (or another walk to do a chain-\u003euse increment for all elements from\n abort phase)\n\nIf E has already expired in 1), it will be ignored during list walk, so its use count\nwon\u0027t have been changed.\n\nThen, when set is culled, -\u003edestroy callback will zap the element via\nnf_tables_set_elem_destroy(), but this function is only safe for\nelements that have been deactivated earlier from the preparation phase:\nlack of earlier deactivate removes the element but leaks the chain use\ncount, which results in a WARN splat when the chain gets removed later,\nplus a leak of the nft_chain structure.\n\nUpdate pipapo_get() not to skip expired elements, otherwise flush\ncommand reports bogus ENOENT errors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52924",
"url": "https://www.suse.com/security/cve/CVE-2023-52924"
},
{
"category": "external",
"summary": "SUSE Bug 1236821 for CVE-2023-52924",
"url": "https://bugzilla.suse.com/1236821"
},
{
"category": "external",
"summary": "SUSE Bug 1244630 for CVE-2023-52924",
"url": "https://bugzilla.suse.com/1244630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-52924"
},
{
"cve": "CVE-2026-43116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43116"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: ensure safe access to master conntrack\n\nHolding reference on the expectation is not sufficient, the master\nconntrack object can just go away, making exp-\u003emaster invalid.\n\nTo access exp-\u003emaster safely:\n\n- Grab the nf_conntrack_expect_lock, this gets serialized with\n clean_from_lists() which also holds this lock when the master\n conntrack goes away.\n\n- Hold reference on master conntrack via nf_conntrack_find_get().\n Not so easy since the master tuple to look up for the master conntrack\n is not available in the existing problematic paths.\n\nThis patch goes for extending the nf_conntrack_expect_lock section\nto address this issue for simplicity, in the cases that are described\nbelow this is just slightly extending the lock section.\n\nThe add expectation command already holds a reference to the master\nconntrack from ctnetlink_create_expect().\n\nHowever, the delete expectation command needs to grab the spinlock\nbefore looking up for the expectation. Expand the existing spinlock\nsection to address this to cover the expectation lookup. Note that,\nthe nf_ct_expect_iterate_net() calls already grabs the spinlock while\niterating over the expectation table, which is correct.\n\nThe get expectation command needs to grab the spinlock to ensure master\nconntrack does not go away. This also expands the existing spinlock\nsection to cover the expectation lookup too. I needed to move the\nnetlink skb allocation out of the spinlock to keep it GFP_KERNEL.\n\nFor the expectation events, the IPEXP_DESTROY event is already delivered\nunder the spinlock, just move the delivery of IPEXP_NEW under the\nspinlock too because the master conntrack event cache is reached through\nexp-\u003emaster.\n\nWhile at it, add lockdep notations to help identify what codepaths need\nto grab the spinlock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43116",
"url": "https://www.suse.com/security/cve/CVE-2026-43116"
},
{
"category": "external",
"summary": "SUSE Bug 1264619 for CVE-2026-43116",
"url": "https://bugzilla.suse.com/1264619"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-43116"
},
{
"cve": "CVE-2026-45984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45984"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix use-after-free in iomap inline data write path\n\nThe inline data buffer head (dibh) is being released prematurely in\ngfs2_iomap_begin() via release_metapath() while iomap-\u003einline_data\nstill points to dibh-\u003eb_data. This causes a use-after-free when\niomap_write_end_inline() later attempts to write to the inline data\narea.\n\nThe bug sequence:\n1. gfs2_iomap_begin() calls gfs2_meta_inode_buffer() to read inode\n metadata into dibh\n2. Sets iomap-\u003einline_data = dibh-\u003eb_data + sizeof(struct gfs2_dinode)\n3. Calls release_metapath() which calls brelse(dibh), dropping refcount\n to 0\n4. kswapd reclaims the page (~39ms later in the syzbot report)\n5. iomap_write_end_inline() tries to memcpy() to iomap-\u003einline_data\n6. KASAN detects use-after-free write to freed memory\n\nFix by storing dibh in iomap-\u003eprivate and incrementing its refcount\nwith get_bh() in gfs2_iomap_begin(). The buffer is then properly\nreleased in gfs2_iomap_end() after the inline write completes,\nensuring the page stays alive for the entire iomap operation.\n\nNote: A C reproducer is not available for this issue. The fix is based\non analysis of the KASAN report and code review showing the buffer head\nis freed before use.\n\n[agruenba: Take buffer head reference in gfs2_iomap_begin() to avoid\nleaks in gfs2_iomap_get() and gfs2_iomap_alloc().]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45984",
"url": "https://www.suse.com/security/cve/CVE-2026-45984"
},
{
"category": "external",
"summary": "SUSE Bug 1267214 for CVE-2026-45984",
"url": "https://bugzilla.suse.com/1267214"
},
{
"category": "external",
"summary": "SUSE Bug 1267215 for CVE-2026-45984",
"url": "https://bugzilla.suse.com/1267215"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-45984"
},
{
"cve": "CVE-2026-52923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-52923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: limit next_id allocation to the valid ID range\n\nThe checkpoint/restore sysctl path can request the next SysV IPC id\nthrough ids-\u003enext_id. ipc_idr_alloc() currently forwards that request to\nidr_alloc() with an open-ended upper bound.\n\nIf the valid tail of the SysV IPC id space is full, the allocation can\nspill beyond ipc_mni. The returned SysV IPC id still uses the normal\nindex encoding, so later lookup and removal can target the wrong slot. \nThis leaves the real IDR entry behind and breaks the IDR state for the\nobject.\n\nThe bug is in ipc_idr_alloc() in the checkpoint/restore path.\n\n1. ids-\u003enext_id is passed to:\n\n idr_alloc(\u0026ids-\u003eipcs_idr, new, ipcid_to_idx(next_id), 0, ...)\n\n2. The zero upper bound makes the allocation effectively open-ended.\n Once the valid SysV IPC tail is occupied, idr_alloc() can spill past\n ipc_mni and allocate an entry beyond the valid IPC id range.\n\n3. The new object id is still encoded with the narrower SysV IPC index\n width:\n\n new-\u003eid = (new-\u003eseq \u003c\u003c ipcmni_seq_shift()) + idx\n\n4. Later removal goes through ipc_rmid(), which uses:\n\n ipcid_to_idx(ipcp-\u003eid)\n\n That truncates the real IDR index. An object actually stored at a\n high index can then be removed as if it lived at a low in-range\n index.\n\n5. For shared memory, shm_destroy() frees the current object anyway, but\n the real high IDR slot is left behind as a dangling pointer.\n\n6. A subsequent walk of /proc/sysvipc/shm reaches the stale IDR entry\n and dereferences freed memory.\n\nPrevent this by bounding the requested allocation to ipc_mni so the\ncheckpoint/restore path fails once the valid range is exhausted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-52923",
"url": "https://www.suse.com/security/cve/CVE-2026-52923"
},
{
"category": "external",
"summary": "SUSE Bug 1269033 for CVE-2026-52923",
"url": "https://bugzilla.suse.com/1269033"
},
{
"category": "external",
"summary": "SUSE Bug 1269034 for CVE-2026-52923",
"url": "https://bugzilla.suse.com/1269034"
},
{
"category": "external",
"summary": "SUSE Bug 1274780 for CVE-2026-52923",
"url": "https://bugzilla.suse.com/1274780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-52923"
},
{
"cve": "CVE-2026-53059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53059"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm log: fix out-of-bounds write due to region_count overflow\n\nThe local variable region_count in create_log_context() is declared as\nunsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit).\nWhen a device-mapper target has a sufficiently large ti-\u003elen with a small\nregion_size, the division result can exceed UINT_MAX. The truncated\nvalue is then used to calculate bitset_size, causing clean_bits,\nsync_bits, and recovering_bits to be allocated far smaller than needed\nfor the actual number of regions.\n\nSubsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use\nregion indices derived from the full untruncated region space, causing\nout-of-bounds writes to kernel heap memory allocated by vmalloc.\n\nThis can be reproduced by creating a mirror target whose region_count\noverflows 32 bits:\n\n dmsetup create bigzero --table \u00270 8589934594 zero\u0027\n dmsetup create mymirror --table \u00270 8589934594 mirror \\\n core 2 2 nosync 2 /dev/mapper/bigzero 0 \\\n /dev/mapper/bigzero 0\u0027\n\nThe status output confirms the truncation (sync_count=1 instead of\n4294967297, because 0x100000001 was truncated to 1):\n\n $ dmsetup status mymirror\n 0 8589934594 mirror 2 254:1 254:1 1/4294967297 ...\n\nThis leads to a kernel crash in core_in_sync:\n\n BUG: scheduling while atomic: (udev-worker)/9150/0x00000000\n RIP: 0010:core_in_sync+0x14/0x30 [dm_log]\n CR2: 0000000000000008\n Fixing recursive fault but reboot is needed!\n\nFix by widening the local region_count to sector_t and adding an\nexplicit overflow check before the value is assigned to lc-\u003eregion_count.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53059",
"url": "https://www.suse.com/security/cve/CVE-2026-53059"
},
{
"category": "external",
"summary": "SUSE Bug 1269655 for CVE-2026-53059",
"url": "https://bugzilla.suse.com/1269655"
},
{
"category": "external",
"summary": "SUSE Bug 1270376 for CVE-2026-53059",
"url": "https://bugzilla.suse.com/1270376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-3.10.0-1160.159.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-3.10.0-1160.159.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-3.10.0-1160.159.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-53059"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…